Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File: QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier: qFPhw7+eCRN06cEGQzzB//ZKiIF4c4SAh1TiQ/tzH08=
Subject key identifier: F6:19:D1:AE:3A:06:1D:81:2E:1E:13:71:40:34:18:88:9B:07:7D:C4
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer: /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial: 019A7301176C356E4C6FFAF1C4EDD02D0336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number: 12D6
Signing time: Tue 11 Nov 2025 13:00:42 +0000
Manifest this update: Tue 11 Nov 2025 13:00:42 +0000
Manifest next update: Wed 12 Nov 2025 13:00:42 +0000
Files and hashes: 1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: l8Tfrb28Yr/1QrTA9OJlEqMU4oOMslEmwr0BuMamZ1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:17:6c:35:6e:4c:6f:fa:f1:c4:ed:d0:2d:03:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Validity
Not Before: Nov 11 13:00:42 2025 GMT
Not After : Nov 12 13:00:42 2025 GMT
Subject: CN=f619d1ae3a061d812e1e1371403418889b077dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4b:84:80:2f:33:f7:f8:36:3a:b8:80:18:d8:
d1:c9:3d:25:ad:86:93:24:d2:5b:ed:f2:56:5d:f4:
97:0f:cf:a5:78:f3:53:45:0c:57:0d:5c:88:21:99:
2d:8a:18:11:57:5c:3e:4d:d6:62:54:7b:32:b0:df:
d0:97:87:81:f5:7a:b4:15:30:18:37:73:3a:85:e3:
82:a0:fe:0c:c4:f4:48:4f:39:bd:b1:71:c1:13:3d:
ab:85:46:26:20:ac:b0:1c:6b:db:89:11:0c:b1:fa:
12:b3:b2:5e:89:75:98:38:25:5d:52:14:d6:0d:c7:
92:75:f5:44:0a:71:d3:da:e4:ac:d4:fb:69:bf:55:
48:17:35:f2:0e:7b:7c:6c:8b:5e:db:42:2f:49:6d:
2b:7c:5b:27:60:26:f3:52:73:55:4f:c5:b9:c8:d5:
ef:27:1d:74:02:c5:5e:bd:cb:63:62:49:59:5b:3e:
c6:f1:b9:1e:6e:24:c7:17:05:9c:e8:1f:03:3c:b0:
d6:56:29:7f:ca:8d:01:dd:23:94:42:cf:5e:a4:15:
bb:82:b6:00:44:df:3d:ad:a9:5b:95:30:39:90:1f:
22:76:9b:cf:01:c0:5b:a5:dd:f2:5b:a2:23:4a:1f:
fa:97:59:ea:09:54:a7:04:60:51:e5:ab:0d:1d:63:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:19:D1:AE:3A:06:1D:81:2E:1E:13:71:40:34:18:88:9B:07:7D:C4
X509v3 Authority Key Identifier:
keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:66:be:6c:a6:83:ca:0a:aa:85:74:2f:ee:02:69:f4:f8:f0:
7f:81:22:57:a7:c8:95:d6:40:8e:8a:de:e6:c2:35:fe:ba:0d:
bc:ce:3c:f7:60:1c:4f:0c:9d:24:26:4f:b7:71:5b:90:8f:09:
87:86:f2:2e:77:a1:4c:43:f2:3f:0e:94:70:70:33:ee:b4:f2:
ed:02:f3:10:78:f7:79:bc:23:2b:7a:1e:8c:ae:33:ad:a2:b2:
de:98:e1:75:a4:8b:0b:af:8f:57:b9:40:cb:bc:6c:f0:bb:7a:
a8:f2:22:47:c0:a9:85:d6:85:12:4b:bf:95:88:b3:bc:40:51:
75:6b:f4:ab:73:52:f2:e1:7b:52:aa:1b:40:78:05:55:8a:82:
17:ed:9d:81:59:9f:4d:05:b2:b6:32:ff:e6:81:07:d5:b8:eb:
e3:40:79:63:3a:e9:b9:24:49:d8:12:37:c9:c9:29:88:9f:89:
ff:20:2b:f3:14:f4:89:0d:08:de:ab:c0:b0:09:0c:08:f6:1b:
29:18:b5:5a:4f:08:3d:ff:5f:8f:fa:a8:e3:42:a2:66:ec:79:
ea:bd:67:3a:2a:d9:d0:b4:8c:e5:33:c3:0d:df:95:38:1b:61:
5c:a1:06:1c:10:6d:e2:e3:f9:48:9c:48:8c:8e:4f:5a:46:2a:
c3:37:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:11 2025 by rpki-client