Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
File: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft (raw, json)
Hash identifier: uQZJkQWzMD7FnxcW8QYJWNenAFomvtgZsPZoaBffgZU=
Subject key identifier: 8A:F8:FC:35:14:53:33:5B:61:44:23:CB:03:E0:AD:4E:35:6B:BC:17
Authority key identifier: 41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
Certificate issuer: /CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Certificate serial: 019A71B7FD84D0FF68CD6257FD672D26D285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
Manifest number: 0FF7
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: OWE82AJ6XMkETtg5SeVok5RbVMg.roa (hash: 61UYmcPzIK3gYtRzlZnCzxd39wiKKzN3mE1c8vnojHQ=)
2: QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl (hash: 4GUvsfEwBz3WS9cXaOg4R67XdJlGoBFgTHB7RNGn2Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fd:84:d0:ff:68:cd:62:57:fd:67:2d:26:d2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41274f2c5beb9999b8673c760743c7e7d31cd673
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=8af8fc351453335b614423cb03e0ad4e356bbc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:24:9f:40:df:d3:71:cd:d7:ab:6f:4c:aa:
1f:96:4e:5f:cf:72:f5:89:ca:9b:84:a7:1d:e8:be:
b7:b7:3f:3e:fd:f4:51:1d:81:58:b7:18:0c:85:a2:
8a:e1:55:b5:9c:d1:15:00:9e:3c:d1:ae:7e:a2:e1:
69:44:90:2e:c7:02:66:ee:55:3a:0b:75:47:47:aa:
ac:4c:e0:b3:14:7b:d3:20:cc:24:44:7a:18:9b:54:
df:82:e4:c5:96:29:6a:07:10:81:75:89:92:89:87:
52:86:c4:1f:7c:a6:e1:8a:36:3f:99:da:95:c6:dd:
89:7e:66:49:43:61:0d:ff:c0:6f:e9:c8:2b:32:a2:
6c:69:32:6a:ab:ee:22:25:8c:d8:ae:fe:e3:1a:03:
07:e4:09:e2:2a:6d:e5:d9:60:a1:e0:6b:22:fb:b6:
bd:e6:28:71:73:61:e5:c4:18:5d:5b:67:45:4a:1a:
16:2c:1c:12:8e:31:30:2e:87:4e:9e:66:ff:1b:44:
c9:bd:82:6c:77:3e:ff:be:99:ed:28:0f:1c:ba:88:
3f:9a:ed:e6:51:2d:f4:ff:49:ad:aa:c8:a7:c6:ad:
81:d4:8b:6b:53:94:7e:c7:3b:04:07:14:1b:30:97:
63:9b:e9:ea:c8:be:1d:48:b6:37:05:13:4f:d0:1a:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F8:FC:35:14:53:33:5B:61:44:23:CB:03:E0:AD:4E:35:6B:BC:17
X509v3 Authority Key Identifier:
keyid:41:27:4F:2C:5B:EB:99:99:B8:67:3C:76:07:43:C7:E7:D3:1C:D6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5faff5-629a-4d2f-b102-a48752b804c7/1/QSdPLFvrmZm4Zzx2B0PH59Mc1nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0e:00:55:bb:e2:96:2b:c0:e0:dc:ca:75:5b:5f:04:ee:73:
8b:f0:cb:ad:8b:38:4d:d9:a3:7d:6a:91:e0:c1:a8:5b:12:e7:
0d:bd:70:1f:9f:5b:e3:f6:15:ae:c8:79:c5:52:69:1f:a4:24:
7f:2c:f0:11:16:e0:f2:59:a4:95:11:64:0b:0d:a0:1d:58:78:
c6:a2:05:64:54:b0:04:48:63:99:98:69:31:47:fa:ab:dd:d3:
4e:36:bb:d8:64:6e:d7:ca:a7:70:1c:e9:9a:25:89:bb:00:dd:
d6:c9:61:14:31:45:40:a2:70:a6:43:c8:ce:6a:b6:a1:a2:35:
88:f1:39:84:6e:ce:f1:a6:9a:b9:f4:91:60:fc:a1:a5:98:ed:
a4:0b:15:97:ac:3e:12:3b:2f:9f:cd:2b:c9:f5:ff:14:2d:28:
c1:16:41:d3:1d:43:4e:f9:4a:82:60:9f:e6:90:f1:05:9d:2a:
be:4d:9f:42:1d:5d:4d:32:05:bd:17:e3:c6:cc:40:e9:e8:e4:
e5:e5:ef:51:f2:87:d2:c8:f5:01:62:df:b4:df:d6:44:65:96:
e6:9c:75:91:6b:09:60:53:f3:2a:1d:e7:cf:cd:e9:ea:07:b9:
0f:ef:4e:a9:d9:d4:df:bb:1c:48:c2:1d:8b:a5:da:0b:59:6b:
8c:f8:fa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:10 2025 by rpki-client