Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
File: QXQcBdStftaQ5XHvXtD4dSLaR9c.mft (raw, json)
Hash identifier: A8w0/oTXT2qMcpXWyVBSN9j7iHMM1pBCgQVZb9Z6rkQ=
Subject key identifier: 6B:01:02:09:74:4D:7C:85:97:F6:1F:BE:19:FC:95:F6:92:69:77:AE
Authority key identifier: 41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
Certificate issuer: /CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Certificate serial: 019A4C97F28759B8FAE845000D1FB37B5273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
Manifest number: 12B6
Signing time: Tue 04 Nov 2025 02:00:17 +0000
Manifest this update: Tue 04 Nov 2025 02:00:17 +0000
Manifest next update: Wed 05 Nov 2025 02:00:17 +0000
Files and hashes: 1: 4LiTUjwXcNYVafdM65pwT0SBtHo.roa (hash: aRRcAkpdwNbRnG0Mp4QvYoZmqIPlW1QZ3Z9Gc0YUkqo=)
2: QXQcBdStftaQ5XHvXtD4dSLaR9c.crl (hash: UhyF0o95melcV9mDy55jPcbaqNe+gtwl+kiQgi2aLt8=)
3: zEBQe0diBcaOVV5htU-MT0YXuxI.roa (hash: vc03WVR1fNObTg7X+wnsDqJFAk1MeivSKBBQ+zB+8LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:f2:87:59:b8:fa:e8:45:00:0d:1f:b3:7b:52:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41741c05d4ad7ed690e571ef5ed0f87522da47d7
Validity
Not Before: Nov 4 02:00:17 2025 GMT
Not After : Nov 5 02:00:17 2025 GMT
Subject: CN=6b010209744d7c8597f61fbe19fc95f6926977ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:2a:e6:c4:25:1c:0f:d4:87:2c:41:0d:a1:
85:9d:d1:55:e8:12:94:2f:6e:19:a6:5b:b0:00:fa:
65:dc:9e:d8:f9:50:93:68:7f:49:81:ef:1e:0e:74:
a8:21:6b:8a:00:21:3a:be:c8:74:58:23:69:9c:23:
83:05:84:95:09:88:47:84:d1:d5:47:47:ee:c7:e7:
d7:13:44:b7:fe:f0:ef:df:fa:0f:25:b2:70:27:c1:
d1:d3:c9:c3:8a:f6:a1:84:09:f1:c4:f8:46:1d:5d:
5a:cb:11:96:fb:19:e9:59:a7:70:17:6e:48:2e:f3:
24:f8:db:ad:f0:15:b9:4f:b1:39:6c:f3:1d:f3:9b:
94:6a:2a:9e:99:d4:3e:c2:0c:98:f2:77:ec:5f:54:
78:73:65:9e:81:ed:5c:ce:b4:59:b8:1c:da:db:3a:
c2:f4:e0:3d:92:ec:dc:52:1b:b9:9e:08:65:69:fb:
54:ec:e7:99:74:d8:3f:f2:1d:e8:5f:7e:55:e3:69:
40:4f:05:d7:f4:cc:31:69:30:af:76:20:99:82:be:
65:12:2c:b8:67:c5:fd:bb:1a:25:a0:8e:a3:2d:93:
9a:68:5f:65:9a:bc:6c:43:68:eb:3e:3c:35:20:87:
21:a3:f0:d0:5a:a5:0e:35:7f:89:88:4a:f1:03:7d:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:01:02:09:74:4D:7C:85:97:F6:1F:BE:19:FC:95:F6:92:69:77:AE
X509v3 Authority Key Identifier:
keyid:41:74:1C:05:D4:AD:7E:D6:90:E5:71:EF:5E:D0:F8:75:22:DA:47:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXQcBdStftaQ5XHvXtD4dSLaR9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a311ea-31b3-4ba4-b533-410322c702ff/1/QXQcBdStftaQ5XHvXtD4dSLaR9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a0:4d:c4:c1:9c:79:0f:e0:08:21:30:48:1b:1b:ab:29:32:
0d:cc:e5:a3:12:11:e0:70:19:d1:e5:d6:24:0d:03:a6:4d:a4:
fd:61:86:97:a0:5e:62:3e:19:b5:08:4a:b4:d1:14:fc:a9:a3:
42:8a:42:2f:05:89:26:24:e7:59:f9:97:ce:18:d5:4d:64:82:
c0:7a:39:e5:f0:e0:69:60:36:20:8d:39:f7:ce:e3:ef:f4:0b:
05:63:05:c8:34:e7:71:1d:ef:8d:99:9d:50:b2:36:03:04:bb:
8f:d7:d4:d4:65:7a:70:7b:ad:83:73:6c:1c:5c:d6:7e:99:8b:
76:f0:c6:20:50:3e:c0:e2:b0:f1:43:43:f5:ce:09:bf:d2:5e:
47:b2:88:e0:a7:e5:5d:f4:6d:74:11:27:56:78:6b:5f:ae:c5:
74:29:8d:70:26:4f:8c:bd:59:6e:13:ae:ae:95:01:20:3d:53:
c5:3c:07:8f:27:3f:df:b2:dc:86:9d:9a:51:2c:6c:e9:6e:f4:
11:cb:aa:f3:c5:3d:5f:70:33:33:24:91:6a:c4:ef:26:ca:49:
27:94:e1:6a:5f:f5:96:05:a4:97:52:db:70:9e:0d:b8:71:3a:
ff:32:6e:9c:83:89:41:2b:00:62:e8:9a:7f:87:b0:6e:df:cd:
1c:61:16:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:07:31 2025 by rpki-client