Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: xJXPZmjCf33+fPQKyQ/5lGzEQi6nDuna6iaVWoCw1Zk=
Subject key identifier: 72:E5:36:BD:2F:D8:54:57:5D:AF:31:58:1A:78:3F:2E:AF:B0:46:67
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019A28C3225C0E38C9E95260B9978DB19D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 13D8
Signing time: Tue 28 Oct 2025 03:01:08 +0000
Manifest this update: Tue 28 Oct 2025 03:01:08 +0000
Manifest next update: Wed 29 Oct 2025 03:01:08 +0000
Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=)
2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=)
3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=)
4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: eLW92/G44Pl7SNPVaKFkut7dolWLiYW8YKNiPezSuf8=)
5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c3:22:5c:0e:38:c9:e9:52:60:b9:97:8d:b1:9d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Oct 28 03:01:08 2025 GMT
Not After : Oct 29 03:01:08 2025 GMT
Subject: CN=72e536bd2fd854575daf31581a783f2eafb04667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:f1:1a:cd:b2:cf:48:58:18:29:40:2d:7b:
32:3e:5d:4f:ad:0e:ed:9c:90:43:ec:27:4c:1b:ff:
1d:51:38:11:84:be:70:9c:92:e3:c9:10:62:41:b1:
e0:f6:5a:17:d7:80:f0:17:72:b0:df:74:46:08:6f:
db:0c:01:be:31:59:d8:20:1a:fb:ce:ed:91:96:8f:
86:d5:e9:cf:07:9c:86:09:52:5a:69:39:49:5d:f1:
1d:d0:4c:99:9d:d4:4c:3d:91:22:ed:8e:62:a9:b4:
49:0c:72:e0:99:9c:f9:ec:73:5c:2c:eb:c4:53:68:
f6:0b:d7:d0:9d:d2:bf:9b:d7:f7:cc:1b:38:02:c0:
65:8a:8f:76:45:27:c1:88:7c:f1:8d:89:38:25:fd:
23:4c:ea:6f:fe:84:c4:f6:e9:cc:f8:df:a6:1a:6d:
33:6d:d3:88:3b:61:41:f6:d3:2f:6c:e4:53:29:f2:
87:02:7e:96:35:04:e7:74:0e:64:83:23:22:cd:f9:
37:32:a5:5e:41:a4:dd:1e:6a:54:11:48:29:97:33:
9f:84:52:dd:e7:91:4b:1a:c8:e3:0c:10:f1:cb:1d:
5f:ba:e5:03:c4:98:ff:5b:29:ea:7a:02:34:8c:24:
f7:34:d8:f1:fa:03:b1:02:fb:37:90:64:0a:34:6c:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:36:BD:2F:D8:54:57:5D:AF:31:58:1A:78:3F:2E:AF:B0:46:67
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ef:6e:62:06:32:36:84:99:d5:c0:ac:24:4e:63:3d:3f:4d:
73:23:c3:2b:30:1b:9b:a0:5e:75:dd:9b:d7:98:42:28:bf:7b:
b2:a1:96:29:a7:ac:8a:a8:f7:c5:a4:4c:7e:5f:93:98:76:a3:
99:c2:f5:ac:21:8a:67:c7:bf:da:09:a0:b2:44:d6:1d:58:48:
cc:0e:fe:dc:b8:6d:4c:1a:62:17:0f:1a:eb:16:54:be:51:43:
26:b4:51:5f:85:8e:10:cd:47:fd:b8:1d:ce:0a:2b:9a:88:70:
8b:eb:4d:b9:ff:1e:e8:87:e9:c3:b6:30:7f:ea:95:c0:a1:fb:
19:fe:14:09:b0:7c:0c:9b:78:ba:7a:e6:1f:6a:31:c8:60:fb:
82:8f:c8:52:16:35:c9:ac:38:18:f6:b6:da:67:c1:c1:4f:5a:
19:25:6a:89:88:29:29:1d:d1:35:3e:dd:0f:ae:e5:11:fb:ef:
e5:9c:80:71:7c:3b:8f:c5:b4:c6:9a:31:92:32:8e:74:2e:20:
89:ba:bb:7f:a5:26:6d:57:1f:a3:13:fc:4b:f7:3a:57:2e:d2:
d8:d0:6a:4e:12:a0:a6:ea:5e:f2:ec:26:1d:bb:8e:4b:42:6a:
03:2b:ea:af:30:28:31:80:c9:aa:0b:d6:d4:09:03:ea:fd:79:
da:44:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:51:51 2025 by rpki-client