Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier: AJ7Bn/w9xn3v+mxRbMUxm7CXLtZ2i9CcvIuQLnIXfO0=
Subject key identifier: 65:2F:63:C3:D4:E0:25:13:E7:C5:48:D9:B1:75:AA:DE:62:33:7F:A0
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 019A27B01D5A35EC91D0458A00BCC0AF950B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number: 16FF
Signing time: Mon 27 Oct 2025 22:00:44 +0000
Manifest this update: Mon 27 Oct 2025 22:00:44 +0000
Manifest next update: Tue 28 Oct 2025 22:00:44 +0000
Files and hashes: 1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=)
2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: 31enayz+OUob3B4mbjHyH693rcJySLSAooeAJhxlzMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:b0:1d:5a:35:ec:91:d0:45:8a:00:bc:c0:af:95:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Oct 27 22:00:44 2025 GMT
Not After : Oct 28 22:00:44 2025 GMT
Subject: CN=652f63c3d4e02513e7c548d9b175aade62337fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:ff:9e:2b:7e:4d:8a:6f:85:dd:58:19:23:
83:bd:2b:59:c3:44:5d:70:df:5d:49:ed:e5:7f:3c:
fd:91:9c:88:52:e5:51:a8:62:ed:87:1e:b5:6b:20:
2f:c9:bb:f3:71:c6:c0:1f:56:d2:57:bd:51:10:3d:
c2:b9:fe:35:14:19:20:9a:74:eb:ec:68:bb:34:03:
f9:dc:88:6f:04:8b:f9:1e:0b:a8:17:dd:d8:4d:24:
a7:e4:89:3a:aa:19:c8:10:f8:9b:9e:02:21:56:aa:
be:b4:bf:9b:4c:44:13:1f:2d:93:b2:b8:2f:10:2f:
e7:69:30:03:18:67:b7:7e:4e:f1:0b:84:a8:be:f6:
68:27:db:11:4d:68:c6:8e:49:81:66:72:dc:bc:f6:
92:a4:43:6d:cd:35:dc:ac:79:a6:55:96:e2:d0:1e:
02:a4:0b:fd:fd:e8:c5:69:85:6e:e0:bd:62:60:d3:
de:17:97:81:41:e3:8a:36:f7:19:bb:9d:9d:10:a7:
0a:d9:73:49:d6:8c:a5:3a:a0:52:24:26:99:9e:89:
4d:3b:42:bb:78:b2:d7:ca:24:a6:49:ee:cc:26:79:
be:69:7a:34:ab:a6:96:db:84:0f:fa:e0:6b:2f:9d:
4f:eb:58:87:5b:a9:c1:49:25:37:38:f1:31:3f:3b:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:63:C3:D4:E0:25:13:E7:C5:48:D9:B1:75:AA:DE:62:33:7F:A0
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:12:94:0d:51:78:f1:6f:6c:d3:db:b1:84:cf:87:0b:06:ba:
42:18:a3:13:f8:a3:fe:48:00:c5:85:d5:49:c1:12:7c:38:29:
f8:01:3f:f4:4e:82:59:8a:6b:e3:5f:b5:93:0d:ab:2b:6e:97:
f4:f5:7b:f5:db:68:fe:26:98:12:f8:d6:48:09:7f:17:df:fb:
20:1c:99:cb:59:0b:d9:89:3c:85:ac:8d:fe:3c:65:09:c7:2a:
ad:d4:5f:c8:fa:5f:6f:fa:89:7c:ca:05:9a:a7:39:4a:58:55:
7c:bf:fb:2d:b9:8a:8b:08:25:b3:6c:ac:2e:ed:6b:ed:9d:99:
a3:8d:d5:19:54:7e:b5:51:68:0c:4d:86:90:0b:a3:ad:60:de:
df:b7:43:58:11:35:f1:3e:46:ee:dd:f0:c6:fb:5a:85:2c:5d:
80:4b:05:b8:ae:ca:21:f6:5b:78:b8:25:4e:d6:dd:11:d5:9b:
4e:7e:72:dc:0e:3d:be:17:de:a8:ea:af:0c:f4:fa:db:33:cd:
79:ce:87:cb:81:bf:33:d5:da:fd:70:bf:89:9c:d1:4b:ad:01:
02:e6:0b:61:d2:0c:c3:9b:7b:2b:04:b9:9f:c8:12:32:d8:da:
72:2a:d2:05:eb:82:7a:a8:f4:b0:37:35:bb:c5:66:5e:d9:8e:
93:6f:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:59:51 2025 by rpki-client