Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: RuThjvgzNN+2+riQS3XicQ6BtsSOj33tNE4AIqyO27Q=
Subject key identifier: 00:62:CB:19:B3:83:C4:B0:BC:15:D8:70:EE:9E:4B:64:DA:02:3F:6C
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 019A722640E00FBD5BCCE750FF6EC679FB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 0406
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: OAfGDXkwAZvnqIxZCZepBQZTqVMkvNb+yPlMUxpUYAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:40:e0:0f:bd:5b:cc:e7:50:ff:6e:c6:79:fb:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=0062cb19b383c4b0bc15d870ee9e4b64da023f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:6c:b5:93:ed:63:42:93:fb:b1:d8:50:be:
49:18:94:f6:ec:5a:66:3e:87:3d:2c:72:55:df:e7:
2b:e3:d8:cb:21:dd:f4:b8:66:90:58:a9:72:9d:9c:
99:37:33:95:4c:28:60:7f:b6:bb:1d:4a:8f:b8:f9:
35:fa:cf:91:27:3a:c6:4e:bc:74:0a:6b:00:c7:69:
a5:6b:88:09:25:ab:bc:c9:f6:d4:56:b0:05:9a:fc:
ef:3d:82:02:c8:f4:ed:7f:c0:31:ab:35:45:58:01:
33:ec:2e:b0:34:b3:5c:17:af:77:4c:75:cd:51:bc:
96:cc:04:af:a6:10:d3:2c:a6:ec:59:bd:bd:55:df:
d2:e1:22:32:e9:91:ab:32:4d:23:14:55:50:8e:5d:
63:c2:5f:a0:3a:39:05:27:13:59:62:5f:1f:5a:93:
68:05:f0:bd:41:9d:98:e4:39:8e:1b:b1:94:87:1b:
ad:a2:43:69:a3:dd:b2:4a:38:d3:80:23:7a:7d:75:
dd:7c:7d:d3:a2:43:84:ae:90:a8:f7:12:56:32:26:
1b:8b:e0:49:1e:4d:0c:a7:e1:ba:1d:08:ed:b6:16:
64:53:b3:2b:70:5d:7f:65:e1:98:ca:a1:d2:75:56:
91:a4:f8:fd:12:21:1f:25:53:69:8d:72:84:a0:fc:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:CB:19:B3:83:C4:B0:BC:15:D8:70:EE:9E:4B:64:DA:02:3F:6C
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d1:1a:d7:c3:be:bb:d7:ee:92:19:f5:cf:79:ae:fb:8c:96:
ba:44:05:4c:d7:08:e8:b7:ac:2a:88:51:5b:79:11:62:a5:7b:
79:d3:d6:aa:42:83:34:88:55:cc:c9:f7:cc:a1:c9:20:39:82:
c2:79:3c:c1:c3:67:cd:49:b8:c6:f0:b4:bd:d3:a0:68:0d:32:
d7:24:16:18:64:a6:96:b3:e0:57:59:bf:46:df:22:36:d9:d7:
88:0f:25:1a:e4:73:ea:84:6a:7d:38:95:e8:b1:a8:75:00:5e:
dd:2c:a6:67:d7:85:5a:35:fc:d5:4a:ad:62:6a:e4:28:66:b6:
d8:2a:e2:a3:d5:ed:93:72:d7:41:68:f3:cc:36:16:06:85:d7:
cb:d5:0f:b2:ae:54:04:66:b3:75:a1:f8:fd:b7:ef:e8:89:61:
25:d0:49:b7:96:5a:45:d7:61:b2:d7:c8:2e:aa:4f:d3:d3:50:
5b:f5:33:7f:52:b8:5e:ef:95:09:d8:75:ec:33:d6:b2:76:25:
69:89:c9:9e:ad:6f:92:85:eb:b0:f8:c6:c1:c5:7a:1f:bc:66:
bc:62:da:ce:34:c0:c6:44:9b:21:78:e9:4d:19:d0:b1:05:96:
06:ae:e2:c5:39:cc:aa:62:1e:fd:54:15:45:7b:5d:5a:80:8b:
d6:46:83:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:32 2025 by rpki-client