Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: XWS6vFgPjlgPh00kYuJ+0sRoo1b8FrDAEg6q7N26tzM=
Subject key identifier: AB:5B:55:88:E3:E7:FE:E9:45:A5:B4:E9:86:56:72:1B:FF:95:C1:C0
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 019A729363B1B6F3126F56AB2774270085AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:00:53 +0000
Manifest this update: Tue 11 Nov 2025 11:00:53 +0000
Manifest next update: Wed 12 Nov 2025 11:00:53 +0000
Files and hashes: 1: EuVjqybteP4_2uP1qrjFTh6Ex84.roa (hash: VQ7r6aXcK3EoAppW65m/zYlli6sD8iLPznPeACkUL+k=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: I5iyRE0eiC7s/vo901R7azC5gKe741QfWDsl2D9u+rY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:63:b1:b6:f3:12:6f:56:ab:27:74:27:00:85:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Nov 11 11:00:53 2025 GMT
Not After : Nov 12 11:00:53 2025 GMT
Subject: CN=ab5b5588e3e7fee945a5b4e98656721bff95c1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:94:ad:fa:dc:1a:3c:fd:0d:9d:c8:ff:29:
1c:21:de:c0:0c:57:ea:33:f2:e3:d4:15:00:51:9d:
bd:b2:52:73:fc:6f:71:03:63:41:90:db:c2:51:21:
07:4e:0b:0a:49:3d:01:b5:2a:e6:01:7d:dc:7f:e7:
25:67:2c:ba:36:42:55:ad:a5:03:59:55:86:ce:56:
01:7e:e1:87:a1:85:0c:58:47:a8:cf:8e:a1:ad:86:
27:d3:83:f9:0e:fe:d9:a9:77:c4:a9:d0:2c:4c:d9:
2e:64:f1:55:56:38:95:36:17:f8:21:ac:07:b6:44:
dc:8d:18:98:68:32:90:df:40:10:e0:55:ba:5a:89:
a8:d7:7d:24:8b:34:07:d6:f6:a2:33:c6:7a:9f:a8:
56:2f:e1:5d:60:89:69:01:e1:1e:80:f1:9f:46:17:
f0:15:9c:19:59:34:95:6b:48:1e:b0:6a:bb:3a:b2:
c1:5b:87:f5:38:ac:d3:47:1a:43:32:db:4e:bc:52:
c7:01:d1:43:56:6f:d3:dd:c0:41:91:57:06:91:5f:
c7:f2:a5:fd:42:28:57:4f:0a:d7:71:0a:0c:3b:74:
68:bf:fc:40:a5:af:41:c0:8e:40:4b:08:18:bb:af:
80:be:c5:03:ea:fa:cf:06:35:95:e6:f6:53:d6:1d:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5B:55:88:E3:E7:FE:E9:45:A5:B4:E9:86:56:72:1B:FF:95:C1:C0
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8e:84:0d:29:b7:14:9c:ed:fc:8f:75:6b:e5:be:0b:91:a5:
15:5b:f1:f8:1f:5b:ce:c2:51:82:79:9a:6d:b3:cf:5e:b1:a9:
4f:9f:4c:2f:4c:18:4f:f5:57:b9:22:bb:8a:2a:27:1d:6a:a0:
f6:a5:50:84:12:bf:ca:01:fa:ec:9c:2a:92:db:78:69:94:06:
8f:58:77:71:1f:e1:37:29:9b:3d:30:65:19:8e:13:be:3f:b6:
8a:9c:81:c6:a0:e6:78:37:14:5c:09:b7:60:1a:af:72:85:3f:
dc:d9:bb:c5:49:aa:68:51:3f:13:d2:cc:5e:2a:8f:0e:5f:01:
c9:48:fb:de:e9:f2:67:04:3a:ee:5a:cb:9c:2e:1c:fd:6b:70:
0d:2d:30:2a:f2:eb:c3:c9:1c:b5:f6:79:02:7e:74:66:03:9e:
70:e4:a9:28:9b:0a:49:5e:4f:5b:1c:f6:bb:93:59:e5:05:72:
8a:1d:ee:12:74:a1:83:bd:2c:ac:4d:42:a9:0b:77:4d:5f:52:
9d:cf:e3:1c:2a:c3:9d:1f:a6:0b:9a:37:4a:4f:73:71:96:c0:
49:ca:f1:6e:df:6c:63:f6:d4:4f:46:6b:49:7f:11:12:af:df:
33:99:05:6f:92:ee:77:c0:6f:88:23:1c:86:85:9e:da:00:c4:
fb:c1:12:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:27 2025 by rpki-client