Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
File: QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft (raw, json)
Hash identifier: 9XaJrSW2bli45oopvTq83kSqIzv02NXnWyUbRlN+kvA=
Subject key identifier: 09:78:92:E4:5A:BF:57:B1:59:1B:51:CB:8E:BD:29:62:D0:9F:BB:CA
Authority key identifier: 42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
Certificate issuer: /CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Certificate serial: 019A725CE440F37391383E0B16A03648BC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
Manifest number: 0A3F
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl (hash: KkTNzucrLfHUPQ9btpeAnIIhKBKjB85S9/Yi3J2zWP8=)
2: _1j-vq_YcHaEMFMbb53TSNwHgps.roa (hash: FFNOOLLPGSug4NyRBtLQbxLYgOZN6JLp0mqYGuu/rHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e4:40:f3:73:91:38:3e:0b:16:a0:36:48:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423535aa6c317ba76ccb81bbfee5d474b193e6e3
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=097892e45abf57b1591b51cb8ebd2962d09fbbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:22:23:b5:eb:3b:4d:00:b1:70:ad:5c:a0:
91:b9:1e:97:1b:86:c2:36:d9:60:9c:f3:e4:fd:ba:
be:58:b4:1f:6f:01:a8:95:20:37:31:75:b3:92:f2:
60:4e:c8:8a:33:63:86:12:a0:65:31:aa:a3:b1:51:
64:17:2b:60:84:fe:ce:b8:69:78:a6:7c:90:be:43:
9e:12:d2:57:3f:fe:d6:0b:87:82:12:ee:00:fc:23:
a5:d4:46:ee:d4:06:89:f3:6d:bc:ea:2b:c7:2c:14:
fc:16:36:8e:e2:b0:89:4e:ba:93:4e:27:fd:72:80:
ec:a9:ce:86:a3:df:1e:41:85:76:0b:ac:f6:7c:03:
f8:a9:5a:0a:27:68:67:a5:a2:a8:4f:8c:4e:d9:2e:
dc:21:1d:da:f0:da:92:e6:58:20:4d:51:26:61:2e:
3c:bd:4b:c7:51:29:96:f6:02:59:32:17:c8:49:68:
1f:5b:5b:71:45:b3:8d:b4:8d:17:07:68:88:37:44:
25:ab:bd:45:bd:5f:3f:ba:e6:22:eb:07:01:7f:a1:
9d:30:b7:6e:74:a1:6f:fe:a0:b3:b3:84:df:b6:08:
4b:93:25:92:53:80:70:6d:c6:f3:4f:c0:2c:1a:dc:
5a:d8:c5:10:ba:0a:b0:bf:29:e5:db:4f:73:fb:a6:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:92:E4:5A:BF:57:B1:59:1B:51:CB:8E:BD:29:62:D0:9F:BB:CA
X509v3 Authority Key Identifier:
keyid:42:35:35:AA:6C:31:7B:A7:6C:CB:81:BB:FE:E5:D4:74:B1:93:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjU1qmwxe6dsy4G7_uXUdLGT5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a12b7a-2e4a-4f22-8811-099587c71bab/1/QjU1qmwxe6dsy4G7_uXUdLGT5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:59:0b:d8:12:55:31:bc:5b:7c:c1:11:1e:79:64:5f:78:4c:
b3:fe:0d:70:74:af:4e:44:69:50:be:f1:1f:5d:0a:4e:56:99:
82:d9:8f:30:aa:e5:a6:94:4b:71:be:0f:f6:0f:7f:65:d8:e2:
ae:74:bf:eb:d7:26:88:de:31:b6:80:18:91:33:89:0c:c2:41:
e9:4d:e4:34:03:e4:bf:cd:cd:47:01:3f:12:0c:ba:76:4a:75:
56:4b:2e:20:58:54:ef:63:39:04:e4:b0:03:0b:7d:ea:8d:15:
eb:fd:ff:81:a4:33:1f:95:cd:ae:73:0e:59:d5:5c:56:c2:bc:
6d:62:80:fa:2a:84:7d:8c:d2:f4:93:ba:48:f4:f2:f9:67:0a:
29:ce:d3:8c:24:33:71:3b:03:5a:40:48:7c:bf:20:f1:10:56:
14:66:8f:71:0e:6c:49:6e:86:c5:db:9b:fd:20:8a:16:0d:12:
74:ac:f3:87:d6:c4:8a:8d:a1:05:88:c5:09:8d:24:5a:35:6d:
ab:18:fd:6b:4d:cb:ee:53:2a:30:e8:a7:47:5b:28:4c:81:76:
02:c6:c5:14:8d:57:87:1c:db:d3:54:07:6a:00:90:26:b2:28:
a6:3e:2e:74:cd:3e:c8:df:85:e6:96:a9:76:3d:99:f5:7a:5e:
e4:79:c7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:52 2025 by rpki-client