Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: p4F+VP0oSJ6Lz8E8xAYarf3r+9IhgyYWMgbzht4+SoU=
Subject key identifier: 74:71:FF:B0:9C:86:20:B8:B6:95:9D:4D:CC:24:D1:19:88:91:6D:B1
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 019A71B898A35840BDC5CC62506A63FD80C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=)
2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: 2hlkwiWBt+1ZkXtGLo307oYLS1j6q792407jf6hslYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:98:a3:58:40:bd:c5:cc:62:50:6a:63:fd:80:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=7471ffb09c8620b8b6959d4dcc24d11988916db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:07:5c:49:62:23:54:b6:97:69:9b:90:a0:38:
3c:71:ed:90:9e:a4:17:9a:e0:1d:df:51:b9:94:0b:
4b:64:32:4c:4b:48:43:b8:38:e4:c5:a8:50:7e:9a:
6c:1c:41:d5:92:57:82:77:47:a4:73:b9:4e:e6:a2:
f8:78:ea:bc:99:f8:9c:f7:4a:96:0d:45:30:34:7e:
b8:e9:6d:0a:01:ae:63:97:8f:43:21:81:fa:65:8d:
63:4b:83:cc:39:db:7b:9e:c7:d2:d7:d1:16:2e:3f:
3a:75:8c:e4:a7:01:c6:ec:b4:57:f7:f2:a0:3e:35:
91:50:d6:07:c0:d9:3f:37:74:de:b8:aa:9b:71:89:
8b:f3:30:5d:8a:e7:70:8a:bc:a7:41:ea:c3:2f:27:
43:14:aa:79:06:43:bc:04:a7:14:72:f9:1f:24:0d:
9d:21:ed:1e:2a:dc:9d:63:78:c2:b1:b6:ee:0a:99:
39:c7:f7:96:3a:1a:f3:ba:b5:53:dd:27:0a:a1:5f:
b0:7e:52:0e:d4:c2:fe:9a:30:e2:ec:5e:fc:f6:29:
5a:ac:43:d6:c2:b0:d0:e9:80:2a:11:15:9e:21:15:
54:9d:c4:81:bd:44:9a:0b:45:c1:1d:8c:5b:91:b5:
88:72:d2:e2:7c:b7:08:ae:75:75:4c:bd:b7:7b:86:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:71:FF:B0:9C:86:20:B8:B6:95:9D:4D:CC:24:D1:19:88:91:6D:B1
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:cf:12:1c:a7:ff:b6:6a:16:26:aa:92:9b:a3:bb:f1:f6:71:
8e:1b:30:f1:40:5a:e5:fb:a6:74:38:d9:a2:ff:13:a2:18:ad:
d7:45:a4:44:37:f7:b5:64:64:23:af:30:22:06:7d:8d:22:6f:
d8:d2:c5:8f:22:2e:18:08:36:2c:94:69:4c:5e:8c:8c:d0:66:
3b:77:4b:1e:56:4d:de:4f:05:29:77:20:88:45:bd:02:3c:93:
7e:fd:98:ca:58:85:33:3f:c9:2a:9a:24:56:6d:fe:ea:0b:eb:
3e:c1:e5:4b:e4:ab:f9:9a:5d:06:83:76:b0:d0:28:80:46:9b:
b0:4d:88:81:18:a8:40:4b:bf:fe:50:55:eb:a8:3f:bc:bc:99:
2e:3a:dd:43:04:d8:42:9a:13:6e:10:a9:f3:39:1f:df:c0:7f:
c5:15:91:72:2a:29:7d:f4:28:17:b2:b2:38:10:a2:b1:98:b0:
74:31:3d:10:1c:4e:b9:f5:89:99:4c:0d:6a:44:93:97:cc:5a:
11:62:c9:1b:40:22:fd:14:b0:32:9d:0d:e6:e3:72:f9:bf:f8:
15:97:9f:75:28:db:7b:59:f7:b3:b3:5b:d5:22:e7:7d:f8:a7:
82:51:12:e4:88:39:21:1a:5f:e6:39:97:c2:77:a9:c3:4b:2a:
c6:48:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:22 2025 by rpki-client