Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
File: QZs3miRkEoEOioBSpio5aIyjRXk.mft (raw, json)
Hash identifier: UB8KCfvzomURwPxiiGGbeYclIMmxVMHBUg+pcdoevFw=
Subject key identifier: 98:14:EA:43:93:86:36:23:39:8D:3B:CC:37:00:6F:D7:43:74:8B:A5
Authority key identifier: 41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
Certificate issuer: /CN=419b379a246412810e8a8052a62a39688ca34579
Certificate serial: 019A71B7706F45A572B10A4BD9083033CA77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
Manifest number: 04CA
Signing time: Tue 11 Nov 2025 07:00:38 +0000
Manifest this update: Tue 11 Nov 2025 07:00:38 +0000
Manifest next update: Wed 12 Nov 2025 07:00:38 +0000
Files and hashes: 1: 2TZgxnjJF7qDIIxEY-THpPbZMQA.roa (hash: 0yx1MB4qhr47LhIlbMqbHpvd6J1nBsWh1WvKzMD4atk=)
2: QZs3miRkEoEOioBSpio5aIyjRXk.crl (hash: wkaZRH1Gmp4K9eg0ai3bMVvpSYSjL4CIM8ENoX+BB/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:70:6f:45:a5:72:b1:0a:4b:d9:08:30:33:ca:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419b379a246412810e8a8052a62a39688ca34579
Validity
Not Before: Nov 11 07:00:38 2025 GMT
Not After : Nov 12 07:00:38 2025 GMT
Subject: CN=9814ea4393863623398d3bcc37006fd743748ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:da:9f:3b:84:5a:4d:34:71:27:e5:d7:9c:27:
11:e7:42:f5:69:eb:7a:dd:00:bf:d5:95:9d:c0:01:
9c:15:ef:a2:97:f9:15:75:b2:7c:0f:d3:98:06:33:
1a:84:a7:fd:40:8e:25:ca:9e:ae:e5:a1:df:ef:67:
24:21:4c:22:1e:3c:7f:7c:52:93:2e:fb:54:fb:a0:
ae:c8:4e:9a:7b:2e:14:57:68:d7:de:39:45:b3:de:
b8:be:b8:2f:1d:c0:1d:05:b0:24:54:5a:bb:f2:a8:
ae:a8:c0:c5:f4:51:93:49:5b:12:20:11:49:72:0f:
42:8d:26:fe:5f:b5:3c:df:8c:5b:f0:34:3a:41:43:
72:1c:d1:3f:71:a0:f0:ab:0b:f0:93:e6:38:e0:da:
d6:68:0a:f3:b8:1d:ef:70:8b:ee:ab:48:3e:c9:3c:
40:29:ec:dd:7e:2a:12:35:02:a7:ca:5c:5a:2c:0c:
10:40:11:14:a2:0a:84:c2:38:08:d2:74:02:56:a7:
9a:9a:4e:f2:e5:19:4c:63:fa:93:a1:93:7e:f4:d4:
2e:13:54:26:8a:60:a7:8d:2b:5f:22:2a:55:fe:c9:
a3:f0:88:b2:38:a3:63:fc:62:a5:e0:75:4f:34:2a:
ff:bd:22:64:2c:6d:27:74:a5:53:0a:3c:24:df:ac:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:14:EA:43:93:86:36:23:39:8D:3B:CC:37:00:6F:D7:43:74:8B:A5
X509v3 Authority Key Identifier:
keyid:41:9B:37:9A:24:64:12:81:0E:8A:80:52:A6:2A:39:68:8C:A3:45:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZs3miRkEoEOioBSpio5aIyjRXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/20256e-1e03-400a-9878-fcc89ece5906/1/QZs3miRkEoEOioBSpio5aIyjRXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:06:13:3f:5e:ff:cf:7d:dc:30:2e:28:d0:3b:57:5c:d6:f1:
92:b0:14:cc:a9:1d:51:10:3e:b8:9e:ed:23:0d:e3:75:db:26:
1f:7c:a4:49:b0:bf:94:42:4a:60:b8:0f:ac:22:67:4f:35:44:
91:80:76:b7:b5:e8:39:ef:a5:85:c8:60:63:44:7c:c4:e9:81:
e9:b9:08:b5:71:8a:76:ba:57:e7:14:9a:0d:2d:47:67:55:f6:
7e:76:b9:3a:bd:7f:28:4b:ad:79:d0:76:0d:ca:ff:ac:a2:19:
39:1c:4b:a4:dd:74:3d:3c:1b:00:fe:8c:a3:46:f2:33:dc:3c:
ca:8a:5b:63:e9:dd:c6:19:0b:0c:7d:eb:f4:e9:bf:36:c7:c7:
61:0a:c3:ae:f1:11:bf:76:7a:ed:53:85:4d:17:fb:25:28:a4:
61:61:ad:65:0a:b5:ac:46:b7:be:5f:1d:14:2c:5e:e1:37:e1:
0a:f1:84:aa:37:92:19:1a:46:c6:0c:48:c4:29:78:e7:13:81:
d4:51:2a:a4:e2:63:2a:e1:42:15:8e:ed:cf:29:a8:4c:12:09:
9d:6d:e1:52:46:12:36:7b:05:09:64:43:b0:fa:f8:ae:05:40:
ae:e3:1d:86:9a:ab:42:15:ea:a4:d2:55:f4:63:02:f5:5f:eb:
3e:4b:b8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:09 2025 by rpki-client