Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: 4llKCc7MHL+cBmWz+fLmlGWVneIc2zaHbhEi2j74LSQ=
Subject key identifier: FB:0E:43:06:9F:63:B8:9A:C2:C6:25:03:D7:35:87:18:74:8F:47:B9
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 019A1B06FA98C3D43721D8AE5F4DA76FEDD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0B23
Signing time: Sat 25 Oct 2025 11:00:33 +0000
Manifest this update: Sat 25 Oct 2025 11:00:33 +0000
Manifest next update: Sun 26 Oct 2025 11:00:33 +0000
Files and hashes: 1: NNtuOH7Ss0GK2NCY4ASxIdJwy5M.roa (hash: XEhO+BECYJy48qc1PZIYHLHaFzNgbkvhwIUjzz8UOEI=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: BNTYJ6CAWAMCEBwATgs+1LG5iut6WJDp7ib9YPD/W8k=)
3: gZi_7JA5qziFqME_tDmOXyw7uR4.roa (hash: Wy99R19BlS4ZrdyS8rbKqkPBO49NC9ANSDY2e0Nh5LU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:06:fa:98:c3:d4:37:21:d8:ae:5f:4d:a7:6f:ed:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Oct 25 11:00:33 2025 GMT
Not After : Oct 26 11:00:33 2025 GMT
Subject: CN=fb0e43069f63b89ac2c62503d7358718748f47b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:cc:01:a0:6b:99:ec:ea:7f:40:95:c4:06:
62:24:23:ca:98:18:2b:81:1b:d5:ce:d2:95:f9:92:
2f:c3:6e:1b:82:b6:45:e9:87:0a:31:c2:22:2e:7e:
3c:a1:51:f4:eb:f0:66:dd:d0:b6:2f:ef:7d:af:8a:
9b:74:b1:7c:5b:73:28:41:99:38:97:fd:7a:aa:11:
c7:19:41:ea:cc:55:d4:e7:da:71:49:11:22:63:3c:
9f:f5:1c:14:18:60:f2:a1:b4:ec:86:64:2a:9c:25:
98:56:33:bb:0a:da:ef:97:f1:a3:9c:07:94:28:e7:
51:e8:46:30:db:2b:51:d4:66:19:9b:eb:ad:e8:45:
57:6a:33:41:e8:02:b9:72:2f:77:a8:3d:60:b2:72:
ad:52:7b:51:25:c5:ca:a1:9e:12:43:f3:23:9a:16:
82:31:8e:9f:f1:33:d0:61:a1:c1:86:6a:d8:91:18:
3e:38:4d:51:23:ab:38:4f:7d:45:4a:4e:d9:01:f6:
89:77:5a:11:f4:75:6c:d1:bb:1b:32:33:e7:2f:48:
b5:d9:3d:29:60:0c:95:88:2f:7e:61:23:f9:05:80:
8c:4d:f8:c6:98:e8:32:d8:69:7e:23:7b:0b:08:84:
01:3b:dc:3b:21:17:0a:be:e3:39:82:64:ff:3e:ee:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:43:06:9F:63:B8:9A:C2:C6:25:03:D7:35:87:18:74:8F:47:B9
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c6:36:76:08:a4:84:4b:08:c5:ad:1c:d9:92:c6:86:96:74:
02:22:bc:ac:c4:9c:98:6e:ff:92:9b:b6:70:d7:7c:94:ba:03:
6d:64:3b:84:45:39:67:90:b2:71:02:be:78:6e:56:92:8f:1a:
b9:f9:58:78:bf:85:98:c2:7f:2f:8c:c7:c7:0d:45:44:fd:b4:
61:5b:dd:ea:d6:08:3d:0b:0f:04:a8:a3:7a:77:1b:36:4c:bc:
36:77:1f:16:71:9e:35:b9:b4:f9:4a:94:04:e8:66:56:84:2c:
47:a1:59:a3:9d:be:3a:91:70:93:b3:40:5e:9e:75:bb:fe:7f:
38:26:aa:c3:0d:0b:8d:a4:55:d8:a2:1d:8a:19:df:25:be:58:
a8:d4:6a:48:78:b4:18:cc:7f:0a:61:17:5d:bb:1e:4d:e4:c1:
9c:74:fa:b4:0d:37:6c:8c:9f:cf:15:d2:36:23:41:df:88:83:
79:b5:a1:8f:4d:c9:2e:10:59:76:dd:e1:ba:22:6e:c2:2f:87:
37:58:86:4a:46:7a:b8:13:56:ed:83:20:a9:4e:73:c3:2b:b6:
f8:b5:66:9a:6c:03:98:f5:eb:49:d5:02:47:90:31:b2:55:b9:
a6:26:81:11:3f:2f:10:83:18:d9:f3:fd:32:7d:a9:7d:5d:6d:
be:d3:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:01:19 2025 by rpki-client