Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
File: qXjDZVxaYJcS51UQDZiJKuHI5es.mft (raw, json)
Hash identifier: zAtiVVMaZcLeKlruyVUyPpYMBTf73rvU7SlD2sqEJsE=
Subject key identifier: 11:4D:C1:AA:FB:C7:3B:04:79:F3:1A:6D:08:0C:25:60:AF:E4:DB:C4
Authority key identifier: A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
Certificate issuer: /CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Certificate serial: 019A7301396953E8D4976134A59EA53CE85B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:00:51 +0000
Manifest this update: Tue 11 Nov 2025 13:00:51 +0000
Manifest next update: Wed 12 Nov 2025 13:00:51 +0000
Files and hashes: 1: Yumm02n0U4zsJjWwtlYyB2Z-w4U.roa (hash: AJmjRPnoBgkPh5HzaY6seqwxdSiWYHbug0JOYxi/OM8=)
2: qXjDZVxaYJcS51UQDZiJKuHI5es.crl (hash: RJsGxkxNTENKKwljtTeqclVfXZBSl0Jnolkg0w6+Uhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:39:69:53:e8:d4:97:61:34:a5:9e:a5:3c:e8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Validity
Not Before: Nov 11 13:00:51 2025 GMT
Not After : Nov 12 13:00:51 2025 GMT
Subject: CN=114dc1aafbc73b0479f31a6d080c2560afe4dbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:ed:e4:01:ec:3d:42:5c:71:82:0e:99:63:
8b:f6:2c:86:6e:70:fc:a7:d9:ba:67:a0:1c:85:9c:
8f:04:7f:59:37:57:90:e8:82:4b:ee:4b:e8:38:8b:
d4:0f:71:62:d3:34:74:92:db:57:f0:d1:25:eb:41:
dc:d3:0b:53:62:25:43:f7:5e:fd:86:9d:c2:9c:0c:
39:40:b1:b5:ba:b2:85:9c:15:bd:f9:31:57:49:b5:
13:7b:b3:dd:56:9d:cf:45:3f:18:d5:93:95:93:d1:
72:f9:d9:6e:ff:87:b3:fc:66:44:33:36:44:28:5d:
6d:6f:df:ea:1a:fc:bb:99:37:7b:f8:b0:e4:1a:0a:
a2:af:29:ec:ac:7f:1b:a7:8b:18:54:b3:2b:99:d6:
f6:5e:c1:f6:b5:b6:5b:6d:c1:7a:89:ee:b1:20:f3:
9f:ef:65:4f:84:1c:28:07:3e:78:c5:96:29:81:08:
01:3a:6e:e3:0f:64:c9:6f:e3:01:51:f0:1b:c9:5c:
24:59:ef:29:3a:4a:af:7c:d3:d1:ae:f9:74:d8:af:
1f:86:d6:35:ec:7e:cd:5e:87:36:6c:b0:5f:df:4e:
c7:06:3b:79:1f:87:99:27:05:66:8b:90:23:55:00:
cf:83:22:0b:a6:6e:61:57:7c:18:75:7d:4d:b0:c8:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4D:C1:AA:FB:C7:3B:04:79:F3:1A:6D:08:0C:25:60:AF:E4:DB:C4
X509v3 Authority Key Identifier:
keyid:A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:16:68:0e:ad:45:18:6c:70:5e:12:70:a5:ad:32:16:67:01:
07:59:42:d8:07:b9:1b:ef:25:d3:be:01:99:b3:05:f3:e6:88:
63:53:11:d3:03:e8:5c:39:1d:a2:d6:21:97:13:e3:5c:0c:1d:
b5:ff:29:0b:73:a2:5f:a2:65:61:9c:46:eb:2d:e0:7b:18:b6:
19:3f:0b:38:8b:b6:14:3d:f1:6b:e6:fa:a8:28:91:37:16:95:
8d:7f:b4:c3:0d:8c:78:3e:1a:a2:35:9c:71:7e:52:34:36:82:
2f:a6:18:66:c5:bd:3f:32:db:91:98:e3:2f:44:42:75:24:1a:
9c:e0:b2:24:aa:5d:c5:da:57:78:56:12:da:1d:91:24:4e:03:
a4:fa:a3:22:db:12:8a:93:b4:e0:eb:97:bd:5c:5d:91:c2:eb:
96:d0:64:de:6b:2b:d6:6e:bd:63:4e:db:b6:1a:09:74:04:18:
dd:52:9b:86:c4:5c:5f:6f:66:7e:7d:0a:e8:6d:07:2c:e4:fb:
ac:a2:43:7b:75:53:4d:1a:22:f4:2f:d5:27:a0:21:c6:7b:85:
39:4e:6e:2e:28:64:04:8f:d7:64:f4:2b:b9:eb:a0:c9:86:c3:
c9:9c:01:3a:ff:37:70:13:16:0e:22:75:79:12:40:20:b6:60:
11:99:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:07 2025 by rpki-client