Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
File: QIyWuStsaY_TT6x9WB1MCQjczpk.mft (raw, json)
Hash identifier: c/HAD61osMbe41PRQTTlLNyobMgHkfxqq6zLVS1F3M8=
Subject key identifier: AA:21:49:3B:14:4F:E4:B2:57:AF:69:AD:B0:BA:06:62:0E:19:29:3A
Authority key identifier: 40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
Certificate issuer: /CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Certificate serial: 019A7225E826F527DE364CCD224AB15E4ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
Manifest number: 12EF
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: QIyWuStsaY_TT6x9WB1MCQjczpk.crl (hash: Af0whZjn5ih5a8vD+tXUZBX6e9iQ0mmU01d8JKMtgQc=)
2: o7v3w6s-TtM4FqHNx2KIzrdDfyg.roa (hash: E/bv9FlRfrfb8DUNG3s4m8ELhpH6SWFAZyVqbfxptQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e8:26:f5:27:de:36:4c:cd:22:4a:b1:5e:4a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408c96b92b6c698fd34fac7d581d4c0908dcce99
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=aa21493b144fe4b257af69adb0ba06620e19293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:02:ce:c6:9a:1d:57:9f:24:85:85:d1:cf:
3e:7e:8a:86:af:86:02:98:04:a5:00:08:cb:79:cf:
71:4a:a1:6a:85:3f:87:85:3a:44:28:81:dd:6e:70:
8d:fa:55:33:68:20:6c:f0:7b:34:92:cd:d6:5e:9b:
e2:86:a8:24:ea:ac:e7:18:3d:e1:9c:dc:9b:1d:97:
b1:83:c1:7d:af:81:32:f2:85:a8:ec:82:15:11:30:
20:60:28:93:eb:f5:fe:1c:f8:9f:54:9a:3c:88:98:
47:26:47:84:45:09:8d:d9:8b:e0:37:1f:3d:9d:3b:
31:14:e1:73:fb:be:4c:cb:06:fb:50:3b:fd:fe:46:
e7:b0:dc:4b:74:d8:af:c3:a5:6a:d4:d3:36:df:0a:
42:12:d1:64:e7:0a:87:f9:8a:a0:c0:d5:c1:c1:d4:
f3:03:b6:1a:bc:c6:c7:11:7f:e7:9d:6f:07:08:34:
5b:c7:4f:fa:d2:08:1b:e2:a7:aa:3f:67:b9:49:dd:
dc:c3:99:dd:7a:74:b8:1c:66:3a:84:73:12:6f:83:
a8:d1:ea:59:95:8d:23:40:f8:62:bd:22:89:05:2e:
82:a7:66:24:cb:d7:b1:1c:2b:8a:bd:93:82:2c:38:
d6:39:34:c7:d3:6f:86:2c:9e:aa:2a:92:5d:13:6a:
d5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:49:3B:14:4F:E4:B2:57:AF:69:AD:B0:BA:06:62:0E:19:29:3A
X509v3 Authority Key Identifier:
keyid:40:8C:96:B9:2B:6C:69:8F:D3:4F:AC:7D:58:1D:4C:09:08:DC:CE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIyWuStsaY_TT6x9WB1MCQjczpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/229fa2-32cc-4b59-9377-56bbf0beaf47/1/QIyWuStsaY_TT6x9WB1MCQjczpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:93:2e:a0:57:51:ee:f5:2c:3b:53:07:88:81:63:a0:84:ed:
75:b1:d8:ee:46:11:a1:2d:65:0c:73:fb:4d:12:57:96:d6:64:
60:5c:c4:49:e4:7c:f2:69:e7:95:19:3a:f6:11:79:60:d3:6b:
9d:83:7c:5a:b6:54:bd:24:f0:cb:0f:d9:49:49:49:6f:3f:6f:
98:9b:c7:7f:67:ed:b8:90:8a:42:6e:56:db:7d:84:c5:a0:35:
e1:df:40:71:6e:dc:19:35:07:5a:20:91:6a:78:f4:b6:18:4a:
6b:be:9d:c5:1e:af:a5:8d:f4:e1:aa:94:26:a8:41:67:6b:76:
1b:c3:c8:42:df:4d:e0:71:f7:3d:41:c5:f5:03:2a:3d:11:35:
fc:13:a4:a7:5a:79:04:4e:d7:6a:15:ca:5c:a5:5c:6f:80:bc:
e4:60:52:bb:06:a2:fd:0f:a8:a9:2b:43:0e:ab:fe:b1:af:82:
c6:30:03:ce:58:f3:53:ce:fd:f1:77:b8:75:19:b2:d9:87:9a:
0a:ff:2d:3b:24:ee:2f:53:f9:01:95:a7:88:a1:c4:fa:b1:47:
50:4d:4e:19:25:3d:23:e7:3b:ed:60:de:9b:9d:4a:7c:ea:c7:
9a:fe:3a:ae:6e:06:f6:63:bc:0c:bb:b5:c4:ff:6f:ec:13:f9:
9d:4d:8e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:02 2025 by rpki-client