Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: nZJctbW56Vi/eIp5n7bzqvBWoWpWWvn4ppMIdnVPVjQ=
Subject key identifier: 63:1B:5B:7B:BC:1C:81:BA:31:59:CB:1F:13:CC:F9:63:DC:AC:5D:61
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 019A4D06AE8968846AB230ED0371AB05109E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0B7A
Signing time: Tue 04 Nov 2025 04:01:14 +0000
Manifest this update: Tue 04 Nov 2025 04:01:14 +0000
Manifest next update: Wed 05 Nov 2025 04:01:14 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: yKFXTBKVdRJ7wDeq3w7S0fvt7fiq4RyIaaGAma/zC/A=)
2: UJVJt5_Arh5oP7MnvKcbCGODOc4.roa (hash: cSJe9mPxkDM+ny/+GoKSWRH8dkU4qbTNsxlZ1deFGeo=)
3: epRoE1oSS28-kMoVUvbovqDaftI.roa (hash: vf7QEJn0ywPdqhUagZXAfAdq0fp3vefGorgZKG9IKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:ae:89:68:84:6a:b2:30:ed:03:71:ab:05:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Nov 4 04:01:14 2025 GMT
Not After : Nov 5 04:01:14 2025 GMT
Subject: CN=631b5b7bbc1c81ba3159cb1f13ccf963dcac5d61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:03:c4:b3:ec:f3:d8:86:64:92:ac:fe:0f:
44:ad:8e:17:39:af:07:81:dc:f7:a8:6e:9b:3c:01:
48:3c:a2:2c:e0:d7:c7:3e:ee:62:86:84:62:36:b5:
44:f7:f3:7e:21:87:c0:50:c4:8e:f6:71:a5:1b:cd:
07:e5:0e:42:45:4f:a6:5a:04:76:41:9b:ff:c8:cf:
ff:f2:69:89:5d:80:0a:aa:34:a6:cf:4b:3f:05:1e:
98:ce:c0:b8:9c:84:91:59:4e:19:a8:b9:e6:e0:8f:
c8:15:36:ba:c5:64:20:b3:30:ad:1a:6b:0b:b3:e5:
00:e0:5a:21:79:28:ee:30:4f:9e:29:8c:cd:62:2d:
7b:e4:71:e3:af:8e:57:c1:e4:49:28:64:18:72:27:
e9:13:0a:44:f7:bc:a9:f0:93:45:0b:f7:66:b2:81:
68:20:a8:89:a6:83:e6:0f:a1:1e:ae:d0:bc:9b:69:
c1:ba:f6:a2:48:17:bb:28:03:54:b9:81:f0:1a:d0:
27:17:13:9f:97:40:b4:d4:76:c4:b1:53:48:8f:4e:
7a:10:50:03:e5:6b:8e:88:aa:4c:b5:8b:dd:fe:51:
96:a5:69:fa:81:1c:95:cc:da:7d:04:53:fc:93:cb:
64:2d:46:31:7d:b7:85:97:14:f6:e4:20:64:45:cc:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1B:5B:7B:BC:1C:81:BA:31:59:CB:1F:13:CC:F9:63:DC:AC:5D:61
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:da:02:6e:16:af:46:c9:dd:5f:32:f6:06:b5:bb:57:46:b2:
2f:bc:77:2e:0b:0a:4a:8e:bf:8f:3c:96:e9:13:67:34:04:4c:
f0:ce:85:42:4d:b0:86:fb:f8:27:38:f6:58:67:4c:e6:cf:2b:
5f:eb:85:0d:1a:7d:93:44:30:d2:c1:b1:12:c8:5a:96:8b:39:
92:cd:62:6b:36:a0:8a:e9:33:96:e7:62:74:88:21:02:06:0d:
51:85:73:49:ce:cd:41:1f:43:e2:9c:6b:df:5e:b7:b4:3b:67:
a3:98:05:93:4d:50:ad:5d:6a:24:ab:c9:f2:93:ed:8f:4b:6e:
43:8f:1c:85:97:44:12:d2:bc:31:34:f3:ff:2a:c5:a3:d9:db:
fc:01:b0:c8:74:ab:aa:7a:29:78:e5:8e:03:90:e1:0d:14:53:
76:f9:ab:69:15:af:ea:dd:48:31:5e:62:b0:52:f2:f4:15:12:
bd:68:b8:84:3e:07:06:e1:81:b8:1b:09:dc:92:b6:5f:72:25:
49:84:91:45:c7:ff:a7:23:24:d7:a4:9c:7b:fb:10:ee:cd:61:
f2:eb:32:b6:71:14:a9:85:13:61:88:2d:82:5a:15:fc:fe:da:
9b:47:f1:fc:ba:3c:f4:e1:36:24:b8:f2:7f:7d:cf:89:1a:6b:
d9:ab:26:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:41:50 2025 by rpki-client