Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: On6vaG0AZmNU7MRWMZRmcCTj7LV08OE32y4+JfxG/mM=
Subject key identifier: 16:70:90:C5:49:D8:E9:F8:4C:27:68:3B:D9:2D:44:E7:30:7E:80:0F
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 019A71B8B5E6993DC9948CCE8C4413F51D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 03A9
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: EpeCh_PHvVwvR1jtfMGPQVrMsrQ.roa (hash: XKVWPCeZYhwf3z1v0hUSbNv7x/hm4cVMh5YcJnXqtvg=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: Kf36gZwzejcEE9E5EnALYJ1nnO/STwnyDvee2DoFhWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b5:e6:99:3d:c9:94:8c:ce:8c:44:13:f5:1d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=167090c549d8e9f84c27683bd92d44e7307e800f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:a3:51:bc:ba:c6:55:67:8c:d4:45:f6:77:
bd:97:f0:83:7e:ab:48:08:4c:c5:7d:04:c8:82:c7:
7a:dd:7c:36:de:13:37:4f:f7:c2:55:b9:9d:28:28:
39:83:c9:90:c2:90:fe:ca:86:46:b8:7d:82:a4:3a:
3f:a2:88:c0:1a:54:53:4b:fe:ca:14:67:eb:3a:3f:
40:1e:e6:61:41:06:39:8e:ae:5a:34:28:38:8d:fc:
3f:43:77:38:58:af:70:32:31:66:a9:52:4b:d5:a9:
f2:ba:66:ac:44:67:85:1e:f8:bf:4a:4a:f1:7d:f7:
3e:d7:29:58:8f:d3:42:af:93:0a:c1:32:3f:9e:53:
41:1a:ba:95:ee:50:e3:8a:e2:73:41:fb:78:ce:34:
aa:eb:a8:9d:41:f0:31:26:50:ff:87:7a:b3:c2:d5:
cd:48:84:3e:53:42:93:39:ee:d6:6d:a9:f4:9f:c5:
b5:37:8d:0d:06:de:f3:58:98:09:fa:9c:15:08:1e:
c9:22:f9:1e:ae:3a:13:43:fb:c7:38:28:7b:94:32:
06:c3:b9:c9:2e:6e:08:04:9d:2a:5f:52:8b:19:c9:
6a:ba:89:ff:fd:d9:3f:18:6c:ce:dc:00:9d:ad:c5:
4d:a6:3c:21:8c:a1:8d:bc:32:26:74:21:df:ff:28:
c8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:70:90:C5:49:D8:E9:F8:4C:27:68:3B:D9:2D:44:E7:30:7E:80:0F
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:21:45:1e:61:00:43:98:d0:72:b1:dd:a1:dc:33:c8:13:da:
48:ef:b7:14:89:da:d1:74:aa:06:fa:da:95:ea:12:eb:11:d0:
a7:d4:3b:94:d0:f4:57:ac:2f:15:09:4b:b8:7d:5a:1d:7a:38:
a5:70:cc:56:35:e7:6a:48:91:db:7b:93:83:8a:66:c5:41:c5:
cd:e6:1f:cc:0a:fc:eb:26:b0:1b:dc:e5:d2:b8:f8:a4:5a:52:
86:68:83:42:62:f0:6d:36:30:51:a1:4a:f8:a3:23:f4:fe:ca:
33:33:7a:7a:1f:ca:36:61:78:1b:b8:a0:cc:0c:b8:77:b7:dc:
d2:60:c7:eb:a0:4e:d0:8c:40:90:1d:d4:b7:ee:11:4d:27:a2:
39:ee:6b:e3:1c:b0:2d:ef:b6:3a:95:c2:ee:6c:e0:71:35:8d:
84:b1:54:a4:84:bb:b0:05:27:c3:22:57:06:57:5a:65:e5:19:
ff:48:7c:19:98:50:24:9e:7d:ba:04:f6:e7:bd:22:a2:12:68:
f0:40:18:c3:cf:5b:cc:81:ac:99:72:91:72:ad:a4:0e:cc:01:
fa:1e:e5:0b:31:8c:0c:04:ef:5a:d9:2c:81:fa:73:0a:e8:64:
11:93:c5:a0:ae:f2:9b:04:ba:77:42:43:d1:70:65:d7:8f:c7:
d1:33:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:01 2025 by rpki-client