Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File: qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier: E6FJbhCIdztqzMUkqC3dv+8+yk1Xxzrv264/wxuI920=
Subject key identifier: E9:A3:35:1E:C4:48:94:A9:B0:76:C1:DD:41:8A:C0:43:CA:29:EE:6F
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer: /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial: 019A722599761B9B0ED15167069F61AFEE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=)
2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: 8CA6Y30dTXDk6LIJsvaHe+q4zWgjTZ0DxZRCGz/WJ6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:99:76:1b:9b:0e:d1:51:67:06:9f:61:af:ee:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=e9a3351ec44894a9b076c1dd418ac043ca29ee6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:46:c8:e7:b1:80:4c:3b:e5:ab:8e:ca:b5:a8:
6b:28:2f:cf:17:fe:a8:45:8d:8f:77:30:de:c3:a7:
b3:73:6b:ff:a1:53:e5:3a:8f:0a:ba:a6:0e:a2:fd:
c9:dc:38:16:cb:73:da:fe:17:b9:a6:a6:85:55:d6:
e5:b2:77:ec:5a:60:8b:f6:57:59:21:0c:78:6a:a7:
fa:6d:86:20:d7:03:f7:83:32:41:36:86:61:78:92:
c1:03:78:60:64:63:e4:29:7c:81:a6:c7:c4:b4:13:
50:fe:fb:74:74:7c:ad:2c:66:14:b2:7a:e5:ac:d1:
70:cc:06:5f:84:1e:1e:d2:d0:35:5d:e7:68:04:11:
93:50:ab:a3:79:0d:f3:0b:3c:61:f7:d6:26:47:e4:
ae:bf:83:c6:a5:c6:46:6a:3c:6f:8b:87:0b:72:7d:
cf:57:d6:18:67:60:e5:4e:5e:39:4c:a0:57:b3:04:
1b:39:f6:6e:3c:5f:7b:39:0e:bf:e2:c0:ec:6c:c1:
06:ee:96:60:3d:86:00:93:ba:d2:16:96:5a:f0:5f:
42:76:30:e9:dd:fb:4f:d3:28:4f:74:d3:7e:05:69:
e9:86:4b:6d:41:ab:10:1f:04:93:c5:7e:cb:2e:44:
ca:f8:94:52:e9:0c:e3:fb:16:9b:56:e3:fa:e0:f2:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A3:35:1E:C4:48:94:A9:B0:76:C1:DD:41:8A:C0:43:CA:29:EE:6F
X509v3 Authority Key Identifier:
keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:58:84:f1:01:88:df:9d:c9:b0:58:24:62:2f:5a:8e:8f:a1:
37:5f:ed:58:ec:a2:f3:12:87:09:93:21:e5:92:b7:d4:a3:1d:
97:3e:95:60:6c:77:f2:98:5b:63:32:8b:81:f2:ee:82:8d:84:
77:75:5e:36:5d:0c:ab:c9:55:30:52:77:5b:f7:00:40:64:9a:
2a:8b:24:76:c3:7a:ba:7d:7c:15:9a:0b:cc:06:c0:c2:5c:6e:
eb:4c:da:25:f1:f5:f1:df:d5:3d:ee:7b:a5:e5:b5:49:33:4d:
1c:d8:dc:e1:f0:aa:17:71:8b:af:a6:b8:0c:8b:a1:a2:44:b6:
37:27:1c:94:da:5a:ec:39:fa:64:80:f2:e2:8e:d3:0a:32:40:
1e:81:a0:0f:9b:dd:e3:c8:60:e6:03:e6:0a:2d:41:94:44:2a:
df:bb:97:9e:82:81:92:7c:ee:87:a2:13:99:e6:8d:89:91:d2:
08:f2:d4:59:8f:29:35:04:0a:85:80:62:7f:de:b5:d6:eb:de:
a5:93:14:76:97:a4:d9:98:5e:16:02:f5:1d:36:69:26:f1:45:
a6:9f:c9:11:5d:14:f8:d4:00:f1:c1:6d:21:f2:98:87:d9:9a:
f1:1d:15:41:31:1f:88:d9:88:48:de:1e:35:00:ac:a5:35:7a:
b1:5c:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:47 2025 by rpki-client