Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
File: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft (raw, json)
Hash identifier: 3P6Z831+87pVot3z8aC0f8n8c1qEiMNHWQi8kdN6y90=
Subject key identifier: A0:6C:00:A8:2D:FA:75:A2:C8:A3:CD:AD:A3:1F:E9:98:72:80:59:97
Authority key identifier: 42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
Certificate issuer: /CN=429196310a7f7dd9999ec43e938fd906985a3f87
Certificate serial: 019A711380623608903EFB8284EFDADA25F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
Manifest number: 0C7B
Signing time: Tue 11 Nov 2025 04:01:34 +0000
Manifest this update: Tue 11 Nov 2025 04:01:34 +0000
Manifest next update: Wed 12 Nov 2025 04:01:34 +0000
Files and hashes: 1: QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl (hash: 4KiINC7Jgn30HkBJMUXWut6+uRR7CWhlPzfakvqbgmk=)
2: wqLf4HxTBxblmV7dYjywZ9LSO_g.roa (hash: xrazM8n3J2DoAIHJJglhb+L4RSIj7Z+1Mi/FtQpdckQ=)
3: yy37HnfCaW61gwGyu1dsgubo12s.roa (hash: iEoXay/v6I8F/MG3qHjPe1FvicHR4Thx5PSijnoSoog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:80:62:36:08:90:3e:fb:82:84:ef:da:da:25:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429196310a7f7dd9999ec43e938fd906985a3f87
Validity
Not Before: Nov 11 04:01:34 2025 GMT
Not After : Nov 12 04:01:34 2025 GMT
Subject: CN=a06c00a82dfa75a2c8a3cdada31fe99872805997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:e9:a1:21:56:2f:6a:09:38:ed:52:dd:99:
25:ff:88:95:cd:e1:9d:d7:38:0b:36:2e:10:8c:68:
cd:f8:08:14:d7:dd:23:4e:4a:12:28:43:ab:84:07:
c9:a1:8a:59:38:e1:36:53:67:07:2b:91:1d:78:9b:
85:f8:cf:c4:b5:a2:1b:bb:d1:b7:5c:c1:f2:c7:b1:
9d:64:c2:8f:75:57:c4:8f:79:e1:67:db:5c:ac:2f:
ad:ee:e8:2c:58:7f:c6:4c:9a:3d:e8:65:0a:d7:1a:
74:64:17:b0:63:d8:a8:7b:ba:b8:38:cd:02:3d:0d:
33:de:b0:68:fe:49:19:e2:24:01:1d:76:81:c4:36:
46:5b:4b:7b:ea:8c:97:5a:88:c6:9d:35:b5:e0:cb:
9f:13:18:30:a9:a6:cf:e8:a7:86:0d:05:56:7e:45:
51:49:1d:91:6b:a1:65:b8:71:a0:cd:fb:db:80:6c:
58:26:6a:40:2b:c4:4f:c4:20:ae:86:4e:61:0c:87:
32:9f:f0:f2:4e:50:09:92:99:46:64:1e:69:72:ac:
ad:4d:cf:35:2a:d6:20:7a:cf:a5:bb:dd:db:5a:f0:
eb:61:bb:e4:53:66:81:6e:7c:2e:5e:a6:54:0b:7c:
8b:1d:32:e3:5c:59:4e:b8:52:a6:36:e2:7f:07:17:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:00:A8:2D:FA:75:A2:C8:A3:CD:AD:A3:1F:E9:98:72:80:59:97
X509v3 Authority Key Identifier:
keyid:42:91:96:31:0A:7F:7D:D9:99:9E:C4:3E:93:8F:D9:06:98:5A:3F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc6892-1779-457c-9214-0aa9d97c8c98/1/QpGWMQp_fdmZnsQ-k4_ZBphaP4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ae:81:a5:20:67:ce:c2:99:8f:c3:99:93:8f:04:7c:a2:d3:
16:50:3a:6b:e4:40:4c:12:fa:2d:0c:d3:ea:c5:03:99:9e:e6:
9f:2d:2d:88:50:08:78:ad:72:fd:d9:d0:f8:c6:d2:f7:bc:72:
e0:ff:24:3b:27:f2:40:35:e6:90:ba:4f:7a:dc:02:cb:31:4a:
e0:ce:75:72:f2:8e:39:65:36:81:59:d0:90:62:70:95:7c:d8:
9b:b3:a9:04:f0:18:38:31:0b:05:81:f1:b8:ad:95:5c:26:51:
fb:58:a3:e0:ea:63:b3:f3:14:d6:f3:0a:62:73:01:ba:47:2c:
3a:ad:34:1f:fa:5b:36:fe:99:98:06:20:8e:e7:0a:3d:05:f4:
a4:7c:9a:1f:3d:ec:c3:6a:f7:bd:b7:68:b0:4f:e7:25:cf:4a:
ff:94:da:82:6c:08:69:5b:a6:f5:71:cb:4e:6c:6b:39:bf:ed:
87:0b:66:f9:6d:5f:6f:ef:22:ff:59:9d:42:77:22:46:17:84:
49:46:3c:8b:8f:80:d6:8f:00:23:c0:b5:a6:f1:a9:31:2a:27:
25:6c:27:47:3f:a3:16:59:d2:cd:42:7d:52:d9:22:04:fb:ff:
79:73:5f:e3:a9:63:85:cb:a9:51:4d:2b:69:a3:9b:6f:70:47:
0e:4c:b0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:58 2025 by rpki-client