Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: D4LeV7L+cP7DWWVAc3oloj6KOx92Ye/mN4GSLOgWc9c=
Subject key identifier: 87:45:A2:21:27:DE:CE:67:53:26:59:93:15:5D:25:69:E3:3F:5C:22
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 019A71EEBEE1658C5D99674F3301B3F12D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=)
2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: apnGiD/m6TxP0VdqhuaJdn3+lP5m26JBa5Iew0zIvDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:be:e1:65:8c:5d:99:67:4f:33:01:b3:f1:2d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=8745a22127dece6753265993155d2569e33f5c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:5c:5b:1a:a3:a5:3d:b9:98:91:d6:ff:a7:
50:a8:28:64:88:3a:e2:3d:cc:a4:36:3f:9a:cc:5d:
c6:4c:05:26:5f:4d:98:d1:cb:3d:57:d2:6d:5d:73:
47:8e:94:b9:e2:a8:41:80:38:60:4d:8c:60:10:6c:
56:d1:a3:05:02:ac:97:1f:91:c6:67:76:d1:c0:38:
e4:42:f2:f3:61:d9:48:c0:88:0e:2d:8e:1c:c6:f9:
7e:56:28:d9:25:c3:8d:cb:59:74:ed:ec:dd:74:f2:
9c:4f:15:1c:77:55:0a:3a:15:15:7a:84:26:39:8f:
31:a8:82:58:a2:ec:aa:1b:7f:91:5a:8c:0b:f0:25:
95:ae:1e:7f:d6:da:d2:71:95:12:9c:46:09:6e:7f:
ad:7b:d8:a4:14:44:dc:f8:18:fa:9b:ba:f3:69:6a:
60:44:87:18:b3:ee:61:9f:df:ee:43:c5:de:64:56:
14:6c:04:a8:2e:5a:f4:03:09:77:e4:56:e2:95:b9:
da:2c:3e:d5:2c:8a:93:91:47:0a:59:a3:f4:fe:1d:
84:17:b1:69:46:e4:99:a6:42:41:a4:35:07:ff:db:
84:c6:9b:c4:0f:7a:a0:8f:b2:a3:f6:9b:bf:70:44:
de:c3:41:af:4a:28:f0:bd:b6:6c:59:4f:18:09:c5:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:45:A2:21:27:DE:CE:67:53:26:59:93:15:5D:25:69:E3:3F:5C:22
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:8f:a6:54:41:e5:5c:fa:ca:d4:a7:ec:af:6f:fc:6b:5a:ac:
26:ab:3f:86:fb:4e:dc:9e:19:64:c5:8f:38:ca:98:ad:a6:98:
16:ec:fa:61:41:e7:f1:b8:f4:68:4b:7d:fb:a7:e5:24:37:54:
c0:1f:d5:ff:de:5e:9e:7e:e3:80:9c:b8:da:b2:1c:04:eb:ad:
e7:7c:8b:a8:79:20:ea:c3:00:f8:be:d8:b4:99:40:f7:f1:9f:
b3:46:33:4a:3c:1e:1f:9e:ac:4a:2d:7e:40:fd:7d:5f:61:69:
7f:14:a0:ea:24:c3:38:f8:1a:8c:8f:f2:09:85:51:9b:e3:4a:
f4:7d:a7:40:07:6c:86:5f:e5:81:c7:3d:87:a2:6d:b2:66:86:
d2:3d:26:e4:42:9a:f6:f1:9c:01:4a:05:10:a0:91:56:8a:e1:
c5:68:f5:fe:fc:eb:da:5f:10:88:26:dc:e9:6e:67:42:38:75:
a2:c6:08:64:fe:2d:f1:01:8b:76:66:ae:88:98:a1:ee:e0:53:
76:34:65:89:06:92:da:7c:31:29:69:41:76:8c:b8:b2:b9:6e:
11:81:60:9f:a6:e7:42:86:90:ca:b5:e1:02:33:71:b1:0f:04:
36:73:e2:81:9e:92:a5:6e:50:dd:3b:13:5c:79:5a:f0:43:ea:
4c:b5:98:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:12 2025 by rpki-client