Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
File: qX_5V51boEXbuQGijCxRWI0E_RE.mft (raw, json)
Hash identifier: 0lRq2byEJXF4eEBv50WPkVa5RgzNMPjlVHkUCQEtH4Q=
Subject key identifier: F1:CE:04:9E:90:C9:E6:0E:52:6D:F7:4B:23:5D:D0:D6:E2:43:3B:99
Authority key identifier: A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11
Certificate issuer: /CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11
Certificate serial: 019A70A5562BE3680A6689A726E5960D8A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
Manifest number: AB
Signing time: Tue 11 Nov 2025 02:01:14 +0000
Manifest this update: Tue 11 Nov 2025 02:01:14 +0000
Manifest next update: Wed 12 Nov 2025 02:01:14 +0000
Files and hashes: 1: iUuETCEbGtwWmtCdQKzT9MtsuME.roa (hash: MRtjhtm+DjeKhdCjunhlsOl8ue7lCEfAuSo2rForAtw=)
2: qX_5V51boEXbuQGijCxRWI0E_RE.crl (hash: +D3LQs+aewm9qXsnroZgOnpiNf7brlz0BPzYtPeypuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:56:2b:e3:68:0a:66:89:a7:26:e5:96:0d:8a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ff9579d5ba045dbb901a28c2c51588d04fd11
Validity
Not Before: Nov 11 02:01:14 2025 GMT
Not After : Nov 12 02:01:14 2025 GMT
Subject: CN=f1ce049e90c9e60e526df74b235dd0d6e2433b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:00:a5:4d:07:88:c5:21:4d:62:0d:b6:92:
44:f0:fb:f9:50:e6:d3:e8:2d:c3:33:c6:a8:02:9a:
e4:9f:cd:71:ec:e9:f3:99:ee:ed:7e:14:4c:09:10:
b6:35:78:1d:1d:4d:2b:f4:80:18:70:aa:78:dd:c2:
d6:c5:ec:bf:7d:c2:2c:02:9a:91:f0:3e:3a:61:ab:
9e:61:86:94:c8:36:37:70:89:39:4d:7f:52:51:f8:
39:a9:35:ab:78:82:87:c8:81:ee:e2:ec:19:e0:15:
eb:eb:4e:92:38:8e:13:65:9a:bc:86:bf:3b:3a:22:
81:55:f7:bf:74:78:14:b3:db:37:e6:14:a6:b4:e5:
53:b0:eb:d0:c7:57:75:e0:e9:e9:15:d5:6b:d5:da:
c7:5b:3c:e6:7c:ab:6c:b7:65:54:14:82:18:06:5a:
fb:10:b9:94:f8:e0:8e:a5:08:af:7d:23:6f:d2:e2:
02:30:0c:ec:d1:98:24:f7:85:f3:5c:27:de:f6:41:
ea:2f:fe:b0:d0:8c:11:ca:7c:17:cc:04:09:43:b2:
75:41:cd:bd:7f:92:ec:8f:d8:0a:e2:14:14:24:47:
82:ed:fe:03:f5:23:3b:3e:77:e0:77:35:d4:57:10:
dc:bf:43:4d:11:a6:6e:88:b7:f1:25:ae:3e:a1:f0:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:04:9E:90:C9:E6:0E:52:6D:F7:4B:23:5D:D0:D6:E2:43:3B:99
X509v3 Authority Key Identifier:
keyid:A9:7F:F9:57:9D:5B:A0:45:DB:B9:01:A2:8C:2C:51:58:8D:04:FD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX_5V51boEXbuQGijCxRWI0E_RE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe46bd-67da-4dfe-9cb4-e25d38f5c930/1/qX_5V51boEXbuQGijCxRWI0E_RE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:20:eb:42:e5:cc:7a:68:2d:f0:83:94:11:58:ee:f6:7e:f6:
b3:7f:23:4d:28:8c:cf:dc:6c:ca:33:cf:69:1a:a1:f0:c7:cf:
cd:b5:90:99:14:9f:19:95:74:7c:1d:a8:97:5f:79:a6:fa:b1:
b0:75:55:7b:20:25:ad:06:98:16:2b:39:89:60:46:06:44:7a:
b7:1b:8c:33:9e:d7:4a:fe:62:06:7c:a2:44:6d:75:72:c3:9d:
d5:ef:f3:23:1d:b7:4e:7b:55:c6:b1:8b:72:06:20:96:9d:28:
a4:5c:7f:a6:cc:e4:ee:79:9a:f0:be:91:9b:f3:f2:aa:ec:6a:
29:22:ec:2a:55:c3:34:7c:be:6d:06:e1:af:2d:58:63:72:5c:
ea:f0:eb:e3:4b:54:43:0d:d6:a5:4b:ae:46:77:85:97:87:46:
fe:72:b4:7a:8e:8f:57:58:b7:d4:cc:65:2c:33:5b:0c:b8:cd:
25:08:1b:fa:1e:99:4c:47:31:46:c5:7b:c1:21:31:98:18:f3:
08:7f:10:f6:93:bd:42:4d:c7:5d:bd:87:e3:6b:c8:9c:3f:d2:
2a:a8:48:f7:33:e2:04:c9:ae:d3:04:f2:e6:02:49:85:8f:dc:
77:48:a0:ba:33:08:54:a4:25:15:e3:40:36:f6:e3:0e:ad:5b:
65:a1:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:17 2025 by rpki-client