Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier: t3YyIDphK3f8fUefzghSS5v65Ey9k2DzwmhnCceoTfU=
Subject key identifier: D8:26:9E:70:CB:AD:A2:98:53:AD:E2:B7:CB:87:12:A5:EB:B2:6C:D2
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial: 019A72257A739E58482AF4901211312454F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:00:49 +0000
Manifest this update: Tue 11 Nov 2025 09:00:49 +0000
Manifest next update: Wed 12 Nov 2025 09:00:49 +0000
Files and hashes: 1: Dct1KnHlMjQEBf8FzrUaVj8hNPo.roa (hash: GFTblhcJpBtD5bZfbGwg+0xfnKk6qwYm9g5i1rXxbnw=)
2: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: zjEJiWxln8AaX5PTsk8AT20CbRwumxi9/Y0D1+Wh6jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7a:73:9e:58:48:2a:f4:90:12:11:31:24:54:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Validity
Not Before: Nov 11 09:00:49 2025 GMT
Not After : Nov 12 09:00:49 2025 GMT
Subject: CN=d8269e70cbada29853ade2b7cb8712a5ebb26cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:5d:df:94:65:ff:e9:55:57:4b:7b:fe:75:
a6:2c:f5:90:2f:7d:fa:d0:75:a0:94:00:78:84:96:
ea:4f:a5:d8:35:a0:f1:74:53:7f:50:4c:e5:ac:4f:
17:69:f6:d2:d3:45:96:1b:9d:ba:a8:3e:f0:b4:5a:
d4:8b:81:0b:6a:61:b0:ab:5e:63:60:59:f1:df:03:
d2:ca:09:bc:64:f6:4c:11:4f:1a:2a:bc:fd:17:28:
6c:af:d6:4c:41:84:3d:31:83:a6:36:1e:40:a7:08:
50:f4:1b:dd:21:06:50:5e:95:a8:be:49:9d:fd:7a:
46:d1:9e:d2:65:86:7b:08:c2:74:6a:71:cb:56:16:
fa:47:bf:26:e6:86:38:ef:69:c0:e9:f4:f4:14:a6:
7e:6a:1c:b7:e2:42:70:09:3b:7e:f1:cb:39:53:9a:
a1:be:7d:01:d1:94:af:75:95:16:bf:a4:46:9f:5e:
ce:72:47:f6:ee:09:6f:af:80:8b:c4:e3:aa:28:8f:
19:e7:4a:7a:7c:32:34:b8:df:46:5a:88:9a:9a:52:
8d:9d:a6:10:65:d2:b6:74:6f:a7:36:6a:28:0c:5e:
2a:b8:fe:9c:c2:13:82:9f:db:d6:99:92:7f:b9:29:
76:db:19:07:d7:7a:08:9c:6e:b2:ad:f9:06:d0:4f:
08:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:26:9E:70:CB:AD:A2:98:53:AD:E2:B7:CB:87:12:A5:EB:B2:6C:D2
X509v3 Authority Key Identifier:
keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e7:94:cd:b6:52:5e:5f:c4:f3:24:0e:07:1b:a4:a4:08:b3:
64:a8:3b:56:51:61:4a:a2:35:3d:55:f0:79:56:d3:89:14:9f:
29:3f:ce:71:15:18:d9:18:1b:07:97:1d:df:03:48:59:75:c0:
04:1b:da:59:78:05:63:04:f5:9f:78:9e:f3:8e:95:5d:8b:fc:
5f:c3:5c:de:b5:85:13:73:a3:08:17:25:0d:a0:e7:cf:d5:63:
07:12:0d:c7:a4:6c:dc:8a:5a:b8:2b:e8:3c:aa:4b:f6:49:0b:
ab:38:73:ff:ce:38:53:ec:03:aa:58:41:cd:4d:0b:ac:ce:ea:
13:cf:78:99:6e:63:fc:e7:9a:15:2c:1d:a0:cd:ca:ef:52:a1:
19:59:3a:0e:72:e2:ae:8d:dd:75:b0:83:a6:5f:88:d5:93:98:
38:7b:45:4e:49:3f:d1:52:8f:2d:60:ad:27:f1:3a:5c:8a:cc:
c7:fb:27:37:07:50:95:81:24:2d:1f:33:8e:d3:b5:15:4b:dd:
54:47:76:db:80:57:1d:75:18:69:a1:e6:78:67:fc:a7:76:21:
70:a0:21:61:ff:f3:67:59:99:50:8a:88:b0:b7:34:a4:9a:81:
b4:af:9d:bd:40:e7:66:e9:04:c6:40:d2:83:72:3d:5d:4d:e4:
a8:50:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:19 2025 by rpki-client