Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: vi4JGUwwuVtQDs9seKXHidvMmJwEEvpeJiANBGqNKEY=
Subject key identifier: E7:20:1E:78:25:5F:21:B5:74:C8:0F:CF:ED:8D:14:44:1D:2E:02:A5
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019A25C189A5E6D9227C1E6BB7D26F78D7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 16D0
Signing time: Mon 27 Oct 2025 13:00:31 +0000
Manifest this update: Mon 27 Oct 2025 13:00:31 +0000
Manifest next update: Tue 28 Oct 2025 13:00:31 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: 4pMX9WE80qqoxEjQvZMHly1u4aEFz57GqDpfEq/R0Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:89:a5:e6:d9:22:7c:1e:6b:b7:d2:6f:78:d7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Oct 27 13:00:31 2025 GMT
Not After : Oct 28 13:00:31 2025 GMT
Subject: CN=e7201e78255f21b574c80fcfed8d14441d2e02a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:73:e5:ae:1e:2b:eb:c9:5f:b3:0b:d4:c3:
84:bf:47:0a:5b:3b:9d:c9:ae:68:bc:2d:ea:6f:40:
85:1e:c7:e9:00:d7:f8:b6:1c:45:ac:63:12:5e:8d:
da:04:5d:8f:a9:fd:7e:85:57:c9:d3:cb:fc:c7:a9:
df:5f:d7:7c:2c:38:3b:9a:32:19:e7:a6:96:65:8c:
c6:6c:40:66:77:cf:dc:39:c5:51:e9:62:9e:12:a0:
96:97:4a:86:50:90:1a:37:85:6c:54:99:1a:d1:e9:
85:3f:ed:24:31:81:d3:50:3e:33:ff:dc:4e:2f:81:
04:e6:fd:38:e3:84:7c:4e:6e:93:54:10:e1:69:20:
6e:9c:d8:a8:ea:6c:29:e5:eb:a3:f2:08:1a:67:45:
e2:f7:7a:3a:f5:59:5d:16:d7:63:48:d8:d2:70:e2:
53:5a:ac:38:60:1b:48:e7:cf:2f:10:8e:3c:b8:80:
42:20:f4:a5:09:c8:64:4e:e4:4e:e9:e0:b9:ac:38:
b4:8e:4a:62:b0:b3:3c:fe:96:a6:74:2d:70:66:65:
dc:ac:59:ef:16:b9:d4:dc:d4:82:44:0e:ef:e5:e2:
05:bd:25:e1:11:53:6e:2e:1c:60:cf:ac:04:90:52:
b1:fe:96:1c:0c:85:48:fa:7f:3e:81:35:9a:51:ef:
83:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:20:1E:78:25:5F:21:B5:74:C8:0F:CF:ED:8D:14:44:1D:2E:02:A5
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e5:e7:ff:0a:56:14:38:af:18:05:c3:c1:46:7d:a7:59:a9:
a2:58:a4:94:96:c2:e4:e4:0c:1b:94:cd:fa:c3:13:82:75:91:
f0:5c:10:bd:e8:61:ac:52:ab:77:fe:32:7d:70:66:62:a2:e1:
68:ff:7d:15:0c:ef:96:41:92:9d:01:1e:07:54:1c:eb:a9:d4:
a4:3d:9d:0b:3c:08:05:d1:d6:52:08:bf:44:b3:96:15:e7:e9:
f9:b1:3e:a1:45:85:19:04:c1:91:ad:67:03:8b:9e:23:32:0d:
a4:c0:49:21:c7:c9:6d:61:3c:c2:96:98:19:cb:95:5f:9a:1a:
2c:de:2e:4a:1b:d3:fe:16:97:b0:56:83:f1:a0:c9:7e:5e:70:
20:6d:d8:df:f2:17:f0:6a:43:b1:db:a1:4a:b6:74:eb:d7:ba:
1f:53:26:2c:38:1b:15:31:f5:01:90:d2:db:15:33:34:b5:7d:
d3:ea:35:ca:ea:07:4e:63:77:19:e0:15:2e:c2:75:e2:c4:aa:
4b:fd:09:13:c6:a2:2e:f3:2c:d2:d5:77:ad:26:c3:db:ec:e1:
86:c0:61:04:89:3d:0a:a9:fa:c4:71:2c:0b:0c:64:21:c8:2a:
27:ef:b9:13:33:dd:be:63:58:53:80:8d:ad:f9:ed:2d:8e:66:
3e:22:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:20:11 2025 by rpki-client