Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
File: QZaJLQegCQaxt61L-FDYv4CIb7w.mft (raw, json)
Hash identifier: jDOXCbUKaw81Igi/yJBdNOIk2zQZPcz/P0Za1WUSV8I=
Subject key identifier: 6D:9B:F7:36:06:67:7C:7E:36:92:45:B8:57:73:7C:74:8E:78:E0:D6
Authority key identifier: 41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
Certificate issuer: /CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Certificate serial: 019A706E7857A688EB5F3E6B5BCDDBA4C032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
Manifest number: 02FC
Signing time: Tue 11 Nov 2025 01:01:19 +0000
Manifest this update: Tue 11 Nov 2025 01:01:19 +0000
Manifest next update: Wed 12 Nov 2025 01:01:19 +0000
Files and hashes: 1: QZaJLQegCQaxt61L-FDYv4CIb7w.crl (hash: YDRwa/Z2mimPXdYXqiF73oUNO4Cdue6sr7FGVA0ojO0=)
2: e5dMHPand7tLiGm-I939H3JZTvY.roa (hash: y0qgSQNcHHdL0M2B8nXHP7/1AvZVBbtB25JDO+3B9Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:78:57:a6:88:eb:5f:3e:6b:5b:cd:db:a4:c0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196892d07a00906b1b7ad4bf850d8bf80886fbc
Validity
Not Before: Nov 11 01:01:19 2025 GMT
Not After : Nov 12 01:01:19 2025 GMT
Subject: CN=6d9bf73606677c7e369245b857737c748e78e0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:8f:72:4d:c4:79:8e:f4:af:69:28:cc:2d:
3b:70:25:bc:89:6a:81:d7:05:07:88:39:24:27:8a:
cc:67:4a:4e:23:b7:29:6b:77:37:34:2b:14:11:53:
1d:b4:cb:dc:c1:db:14:8c:a2:fc:b3:bd:69:9f:ab:
bb:e0:d9:66:5d:6f:3d:53:c0:2c:f8:bb:50:9a:28:
e4:17:d5:dd:aa:69:25:b5:41:33:29:64:28:9d:e2:
01:f2:6b:d2:4d:ab:80:9a:57:46:ef:57:76:fc:b9:
5d:42:d2:1e:98:2c:b6:0f:af:dc:f9:61:dd:e2:bd:
f4:11:25:08:73:a2:7a:f8:2c:5e:09:f9:48:a8:d1:
b0:27:f5:4e:35:ab:cb:b7:dd:79:85:24:ae:3a:f6:
8a:f2:fa:50:4b:78:b7:7c:83:92:be:4c:d8:55:df:
82:f5:1b:19:de:a6:41:52:63:9a:bb:f1:05:17:e1:
d0:65:6d:f6:de:2a:c8:3b:8c:e8:ee:c6:6a:6a:44:
08:ca:3a:c5:69:8f:42:13:43:ec:ba:ee:30:67:7d:
68:98:d3:7f:23:96:ee:79:41:ba:46:81:f4:68:97:
9a:7f:1e:da:af:d3:c6:c8:ce:30:4d:ca:22:0c:b0:
05:47:75:6d:ab:58:7c:30:36:ec:67:28:57:7b:7e:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9B:F7:36:06:67:7C:7E:36:92:45:B8:57:73:7C:74:8E:78:E0:D6
X509v3 Authority Key Identifier:
keyid:41:96:89:2D:07:A0:09:06:B1:B7:AD:4B:F8:50:D8:BF:80:88:6F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZaJLQegCQaxt61L-FDYv4CIb7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/07228e-32a9-4e1c-aada-dee3333c367b/1/QZaJLQegCQaxt61L-FDYv4CIb7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:87:9a:bb:58:70:85:f4:91:21:db:b9:f5:29:db:56:f1:17:
75:dc:e0:2e:24:7d:64:98:24:d8:1a:bf:a6:ef:ec:9d:c1:db:
39:0c:59:5b:b3:70:06:1f:65:af:a6:60:1f:9c:10:e1:1b:4d:
12:30:67:48:0b:3c:6b:f7:77:25:6a:cd:61:1f:5c:28:ae:77:
b5:8c:88:06:2d:3a:33:13:db:f2:b3:47:5c:c9:bf:ad:98:c1:
77:1a:eb:d4:fd:5b:08:7e:83:70:45:d4:c8:66:b6:2a:87:e8:
b2:a2:eb:26:00:85:e5:d8:fa:2f:2f:a9:e1:7f:71:5e:6c:eb:
4a:99:bf:ab:24:93:f4:4b:d5:a6:35:5f:fc:cf:eb:be:b8:ee:
cf:0e:7f:9e:9b:a0:df:c9:69:a1:48:ba:07:63:dc:ed:05:fc:
cd:a3:81:60:98:41:d0:36:2d:97:c6:95:32:81:d0:95:02:c8:
d1:c0:93:c5:e1:2b:03:a3:10:e0:0d:aa:59:67:1e:d5:bf:32:
1c:0d:9e:fc:a8:ce:07:34:de:c3:c5:61:bc:06:28:b3:6d:9c:
ae:7b:98:e1:95:bb:c0:44:22:fa:28:79:c0:c1:9b:12:58:05:
ba:33:c3:a4:bd:af:e9:c6:ba:55:d7:11:dc:18:1a:5e:65:4e:
56:67:85:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:47 2025 by rpki-client