Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: 8hZ1RBUwse1xrx38fuzrVS/DgjSyvD9nDq6qYpVjEW4=
Subject key identifier: E6:F4:4F:DE:16:30:E6:4D:F4:32:5A:1F:D3:75:19:F5:09:20:BA:DB
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019A4B4EC5E8135A817395C593969C0D8580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 1411
Signing time: Mon 03 Nov 2025 20:00:44 +0000
Manifest this update: Mon 03 Nov 2025 20:00:44 +0000
Manifest next update: Tue 04 Nov 2025 20:00:44 +0000
Files and hashes: 1: CLemqr75Yb48Km-cD1hApiGwC9E.roa (hash: EAtUhRgJzB5CWn94r1qk7eU5voV0S7bWsYXXanEEayY=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: txIoxaP8wbW7I2jb4VEreeBiFbn1mWN+wUZzujHgczo=)
3: yEsMSFNm5dJ-A_JpG2DXLz7wI-Y.roa (hash: 8AHka5aF5G+PfLY03Vs1HshDxFgYYrha9TXGX/Fcp3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:4e:c5:e8:13:5a:81:73:95:c5:93:96:9c:0d:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: Nov 3 20:00:44 2025 GMT
Not After : Nov 4 20:00:44 2025 GMT
Subject: CN=e6f44fde1630e64df4325a1fd37519f50920badb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:01:df:89:6b:29:59:61:e2:78:32:bd:14:
15:87:ec:59:c4:2c:89:15:d5:a9:08:21:e0:55:fd:
df:35:d7:44:cf:b5:e5:4e:16:36:f2:50:08:34:c2:
c6:af:1d:ac:42:66:7f:3f:a9:d7:be:7e:de:33:49:
25:3d:d3:8f:0d:11:de:0b:51:ff:36:a0:a8:20:7f:
91:be:49:f0:b7:6d:a5:d0:45:40:5f:11:b6:04:68:
57:f0:7a:18:44:95:14:1c:ca:c3:f9:3c:41:21:20:
fe:f4:1d:fb:9b:da:73:02:10:27:a8:a9:04:92:d4:
7b:ae:03:3b:32:a0:ef:c5:3c:eb:4e:c4:19:25:07:
78:3f:ac:d7:58:b9:66:a0:b9:ab:dc:9d:07:6a:13:
b1:0c:cc:17:5a:c5:dd:95:6b:a9:7b:08:17:be:11:
17:97:84:91:24:cc:38:6d:e9:d2:4f:94:c4:3d:7c:
59:5e:09:82:85:d8:1f:f3:58:83:e8:42:1a:9a:78:
90:a1:6e:29:20:03:3e:9c:61:5c:83:2d:9e:dd:1c:
9e:f1:fb:19:8d:d5:1e:4d:55:84:e5:76:5e:3f:ed:
0e:50:66:0b:f2:2d:2a:be:c4:d5:dc:d1:2a:dc:e6:
ca:3e:1f:e5:91:d0:fa:6d:da:1a:3b:1c:22:db:b0:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F4:4F:DE:16:30:E6:4D:F4:32:5A:1F:D3:75:19:F5:09:20:BA:DB
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:2b:96:7f:df:07:67:2e:4d:1d:18:0b:eb:5b:7e:a6:db:
fc:b4:d9:e4:34:4c:c0:e1:9e:1d:30:58:d7:75:dd:df:91:0a:
f3:68:35:e0:d7:41:dd:ea:53:50:b7:a7:bb:04:12:3d:02:3e:
f5:cd:8e:11:11:e8:27:37:f4:0d:90:cc:d2:4c:99:a5:6f:8d:
80:0b:c7:76:10:14:af:f0:4d:20:59:05:34:eb:e2:67:7f:17:
f3:33:1b:b1:0e:c8:f6:19:ae:11:80:d3:56:b4:9f:36:23:aa:
86:da:ee:61:11:0f:69:b4:31:89:ae:ac:9d:bf:5d:a5:c2:79:
0f:57:83:c8:88:d8:6b:58:86:27:87:88:db:e2:de:90:07:14:
e7:59:65:4a:ca:ac:1d:e5:f8:9b:ee:5a:23:f1:71:66:35:06:
d3:27:2d:de:54:6c:d0:b6:72:8f:46:6f:1f:98:33:be:b0:18:
ba:b8:58:0c:ad:0c:c8:e5:2c:99:91:57:3f:c2:9a:03:cd:38:
63:2b:5f:7c:6a:c5:33:ed:b8:3e:cf:b4:c0:d5:29:0b:1b:42:
df:c4:10:05:6f:35:18:15:77:de:e2:e1:11:53:0c:59:6e:2a:
f4:66:c4:39:89:1d:8f:b7:c9:49:17:53:19:30:7e:c1:91:98:
76:4c:38:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:22:51 2025 by rpki-client