Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File: QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier: yYnj5pJQGq/XQx/hOK3skLYRZqW0/tmBfNsOhqH0hm8=
Subject key identifier: FD:B3:7B:E4:BD:E1:F6:7C:CE:AB:19:C4:46:66:82:0D:DF:12:1B:15
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 019A7338059D924D19C688D70DDCA9F15130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 14:00:42 +0000
Manifest this update: Tue 11 Nov 2025 14:00:42 +0000
Manifest next update: Wed 12 Nov 2025 14:00:42 +0000
Files and hashes: 1: 0regBIVfBXFVABfEELXSK9SQr9w.roa (hash: t8fDSvJJKHgAS47tG86/SrIsfciaFuWs3jxHg3nM1HI=)
2: 3lX45zxcjM7CBQIUfA3UEiMkVKs.roa (hash: 75wNcopVtT2+GwpB80AS1hMx7vRPc9iXp8+PJ3UZxgY=)
3: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: XTZkvqXyqN1UjFu7ZPmrjHlvs8XsDoWEMPEWB+7hPdQ=)
4: Rx1WXEoXHQMpBNByR6D56N7x2Uo.roa (hash: cDPkgX6C1FbeC1cHjpQAZgyTLlKW00FBl5qWrTOC/Xk=)
5: uECfOQT7vP0-Onmmtd55wsXs37g.roa (hash: bNLu+S3LPmz+17Zanv3WTd/nL0fDWgnXheCwrU2SuV4=)
6: xbzoE1xi_XLBrDBqc5C9cd74KWg.roa (hash: tVIsK7K0TJ3bKB6dHKWty0ZUONupA8JOqTCuxpoXGxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:05:9d:92:4d:19:c6:88:d7:0d:dc:a9:f1:51:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Nov 11 14:00:42 2025 GMT
Not After : Nov 12 14:00:42 2025 GMT
Subject: CN=fdb37be4bde1f67cceab19c44666820ddf121b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:0c:f6:32:d2:f6:47:c1:5b:f9:67:e2:b7:
e1:00:24:54:17:55:b7:fc:6a:10:77:35:98:04:28:
f9:d9:48:e5:d3:1c:50:57:af:62:95:f0:a7:08:d6:
af:40:64:1b:2d:5d:b3:3d:00:47:c7:bc:97:32:27:
21:0b:6a:1b:31:cd:39:45:b7:4d:53:71:a5:67:b1:
68:cf:41:a8:4e:01:92:99:ef:7c:2f:a0:f9:0a:bd:
63:f2:ca:12:1a:9c:ff:d7:82:2c:85:86:f1:5c:86:
26:c7:af:a0:53:3a:63:b0:94:65:5f:2f:33:39:aa:
21:7f:67:f1:04:41:31:85:bc:d5:67:f0:32:0f:7a:
ae:74:c8:42:93:de:83:4d:68:b9:b2:79:9f:bb:88:
73:3a:7c:b2:62:d6:45:cb:04:d7:1c:3a:a7:7f:34:
31:ce:5f:24:6e:66:30:80:f1:e2:af:31:e5:06:e3:
16:16:13:34:2f:69:f9:94:e2:8f:45:e6:c6:0b:e7:
c8:0b:8e:40:f8:09:92:04:c7:79:cc:40:4f:37:ef:
e6:1b:12:f7:0c:af:b5:b0:0e:3d:43:4b:6d:53:ce:
44:0c:f1:65:45:04:92:75:21:c3:dc:af:1e:44:01:
ad:b7:c6:51:7e:a0:b2:c0:32:06:20:6b:67:48:6a:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B3:7B:E4:BD:E1:F6:7C:CE:AB:19:C4:46:66:82:0D:DF:12:1B:15
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9b:2c:3c:76:34:10:08:d9:73:3e:3b:b1:ed:84:92:65:3e:
95:f3:55:d2:30:8d:39:3c:87:c0:f1:3e:f5:a9:98:75:f1:71:
de:e5:0a:f2:a7:7d:12:fe:c1:37:a7:b4:e3:c4:3a:61:12:85:
00:71:85:81:10:af:0d:da:67:3c:8f:ee:05:0c:56:62:e2:4d:
9a:e8:3c:89:ca:68:aa:2e:58:ea:11:d0:95:02:ce:76:bd:d6:
55:ef:d4:b1:ab:d4:8c:8c:91:e5:04:bd:5f:dd:72:68:52:6f:
f4:56:d5:17:da:86:67:e6:ca:7a:af:c5:f4:62:18:9e:e5:ca:
15:96:37:c2:6e:d4:dc:7a:a1:d9:0d:78:ee:71:97:5a:4a:f3:
04:4f:7b:39:e1:be:16:ab:8a:73:0c:76:ad:2e:c3:f3:da:c8:
51:24:b2:e4:a0:1c:0e:68:d4:17:8c:30:0d:87:ae:27:ae:40:
66:79:61:5f:5c:ec:20:1f:70:0a:8a:0b:79:a1:f1:ee:d0:4f:
9d:93:40:1c:ba:30:3c:67:91:65:7d:bf:86:87:62:12:0a:43:
95:e4:de:37:d8:a6:b4:6a:df:01:ae:23:fc:93:34:03:ca:dd:
a6:f2:c7:64:8b:62:d0:fb:06:e4:d1:82:78:9f:a1:47:ae:60:
02:6c:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:13 2025 by rpki-client