Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: 3OI14p0amGO2TcuU7BQOMh3UoJK2hGHFvncphjl6a9Q=
Subject key identifier: 7C:C1:07:FA:ED:1C:01:7D:04:80:C5:BB:B5:05:91:8E:8C:AC:F0:97
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 019A70DC66D580C73BF3AA5CEEE017D3037A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 01BE
Signing time: Tue 11 Nov 2025 03:01:23 +0000
Manifest this update: Tue 11 Nov 2025 03:01:23 +0000
Manifest next update: Wed 12 Nov 2025 03:01:23 +0000
Files and hashes: 1: du9Q9bL5BOWedJK9qhvdrfuTC6E.roa (hash: yMHVcCfWCQ3tfd7XRi0bmpwcyLFeWTkztgI3BA0HK6Y=)
2: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: jXdeJTAxdmKcq+mqEXcr5Kfc7KhW/ElldtaYJf8FNbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:66:d5:80:c7:3b:f3:aa:5c:ee:e0:17:d3:03:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Nov 11 03:01:23 2025 GMT
Not After : Nov 12 03:01:23 2025 GMT
Subject: CN=7cc107faed1c017d0480c5bbb505918e8cacf097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:0b:80:64:cc:25:76:75:fd:c2:30:be:94:
f1:44:b8:32:66:cf:8e:c9:99:b5:b2:33:01:1d:72:
f5:5d:ac:c3:c6:29:fb:6d:19:bd:1c:a2:6c:4a:57:
0d:cc:03:9b:03:d6:a8:55:28:3e:15:33:1f:ee:e7:
a9:f5:aa:a6:99:95:50:cb:76:c7:b3:29:e1:96:4b:
9e:36:06:43:51:63:c0:db:a9:8d:90:14:b8:94:18:
e7:73:dd:ad:27:75:bf:33:78:9c:37:37:9c:a9:76:
d0:81:06:7a:8d:13:74:30:e9:f2:d8:4f:8d:e4:ba:
e7:08:3e:d4:20:77:2d:19:95:28:3f:c3:fa:c7:12:
71:29:e9:81:6f:83:84:ca:d0:78:72:d8:1e:b4:10:
93:b8:24:9e:1b:e1:ba:c8:6b:fe:d6:5e:85:f8:e0:
ac:d5:b3:fc:f2:9b:16:2a:e3:8e:34:4c:3c:f4:8b:
34:fd:c1:85:11:78:51:18:c2:4b:06:c8:f0:6f:74:
ea:6e:fa:37:1c:eb:ce:d8:cd:80:da:d2:be:d7:55:
66:9a:ac:f7:7b:cb:c4:e4:ec:b0:b1:1a:6e:02:76:
bd:e2:9a:a6:f9:e5:08:72:6a:2d:ec:15:a6:49:ae:
74:2b:9f:9d:62:b9:41:82:62:39:c6:fd:3d:2a:b5:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C1:07:FA:ED:1C:01:7D:04:80:C5:BB:B5:05:91:8E:8C:AC:F0:97
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5d:33:40:15:a9:ea:c1:dd:40:83:29:c7:6c:b4:cd:6a:79:
26:37:75:be:80:b4:3f:0c:0e:2a:fd:36:f9:64:78:ab:1c:15:
9c:eb:bc:f6:36:93:db:48:d0:5a:f7:67:68:89:ab:e3:13:b0:
a4:0b:b0:27:25:06:2f:53:ce:d8:4e:f8:b0:96:a7:b6:24:77:
88:f1:ad:67:51:2d:c2:3e:97:f0:e5:50:ec:f9:38:ec:55:19:
80:ca:66:d8:ac:f8:e5:8a:08:72:3f:6e:1c:60:0d:76:c9:18:
57:75:ef:54:6e:0f:54:75:f9:e3:98:ad:30:29:17:82:24:c4:
d1:da:ba:2a:26:a4:bb:7c:3d:b0:c1:9a:49:83:55:d8:ef:96:
b9:2a:92:63:bf:38:a9:fb:cc:0e:98:3f:bb:36:42:3f:e1:1b:
d6:47:bb:dc:df:c8:d1:47:8d:c3:8b:7b:f1:d9:1b:ea:cf:d7:
f1:51:dd:9e:0d:47:2e:fc:a2:24:d8:79:2e:31:2b:7b:ca:2e:
8f:bb:2c:04:c9:e0:2f:da:b3:23:ed:fe:b4:97:ed:33:a8:a6:
92:7d:f6:24:ae:fd:f6:21:c4:67:82:e8:f3:58:97:a9:40:90:
e3:3a:3c:55:ff:71:f2:75:f0:ba:73:22:fe:0d:52:e6:7e:0d:
48:dd:cf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:53 2025 by rpki-client