Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: gtft4rD2/z4tb2335/rdh3O8dO8jnMAysOLVRgd7FAg=
Subject key identifier: 1A:C2:A4:34:F1:6C:33:B7:32:98:AF:E9:D1:64:35:76:60:9B:3E:53
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 019A71B8453334664AB40AB1DFC467C12745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:32 +0000
Manifest this update: Tue 11 Nov 2025 07:01:32 +0000
Manifest next update: Wed 12 Nov 2025 07:01:32 +0000
Files and hashes: 1: _apVPFDtoRumkOLoXwsvk68svtc.roa (hash: +ctIxD4w3ARboj6lSoUyjZFSq6bE6ZLRIPRMV/RgDGI=)
2: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: qpQcsRXqbwY3OLqHMuZvudLeQ6U2PxIkiOchAibNdFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:45:33:34:66:4a:b4:0a:b1:df:c4:67:c1:27:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Nov 11 07:01:32 2025 GMT
Not After : Nov 12 07:01:32 2025 GMT
Subject: CN=1ac2a434f16c33b73298afe9d1643576609b3e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:da:ca:1f:c8:36:6c:f1:01:01:27:fa:40:
68:a4:f7:57:2b:6d:5a:14:48:51:b9:40:f2:07:0a:
fc:b1:cd:6f:49:b7:19:fd:e7:31:83:01:64:d8:14:
f8:98:6a:37:2b:db:71:ce:59:31:c7:3c:f9:6b:05:
05:3a:5e:80:c1:06:96:a9:8b:b3:59:f7:fd:d5:8d:
c8:03:5b:db:62:68:2c:b9:fc:6f:85:19:d1:05:17:
7a:4a:92:7d:1d:22:e5:75:da:64:19:9d:c3:dc:09:
55:c9:f0:41:2f:9c:7c:67:a5:eb:3a:78:fc:6b:09:
85:8f:f8:1d:58:6b:50:8c:0c:20:87:68:aa:2f:e4:
a4:50:57:63:6e:22:24:ad:dc:f5:c3:36:08:f1:bf:
9f:aa:e7:a4:50:c7:b3:dd:20:0c:6d:70:5d:c6:86:
bb:90:41:7e:aa:fb:22:f7:d7:3d:93:f9:d2:cb:ca:
f6:01:7d:13:d3:de:e3:f1:4c:a2:01:61:d5:98:88:
31:aa:a8:37:17:1d:da:4c:21:5f:53:bd:37:1a:a9:
c8:2e:f8:16:d2:86:5a:5c:eb:52:11:e5:5d:6b:d6:
69:4b:65:d4:cc:03:c4:d1:9d:77:b3:56:1f:41:c3:
0b:54:90:5b:ff:dc:4d:1d:de:f1:6c:fb:79:42:6c:
e4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:A4:34:F1:6C:33:B7:32:98:AF:E9:D1:64:35:76:60:9B:3E:53
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:25:47:87:fa:bc:01:39:58:a1:e4:93:c5:2f:fc:5e:b8:db:
c7:36:01:86:a0:f8:be:00:4a:82:4c:ed:c9:77:2c:df:85:49:
4f:e3:5c:1d:19:b5:4d:97:0f:4b:8d:1f:45:1c:ce:5e:61:49:
e2:a4:1a:a4:d9:bd:e3:5d:72:e1:c1:30:8b:09:1a:1a:b2:e5:
a1:87:a8:09:b7:08:82:6e:22:33:c8:91:ca:ef:f5:0b:8f:86:
95:ab:22:14:cd:d1:e4:e8:c8:77:8c:cc:ec:7f:b8:fe:f0:f3:
e2:97:22:26:3b:9a:e9:67:75:62:b6:5a:09:48:5d:07:b7:99:
21:98:d4:4d:34:32:d8:cc:78:2c:c5:26:6f:6b:07:bb:0b:2e:
10:24:b6:8f:7f:f7:86:34:a0:8b:c0:39:c7:3e:e2:1e:30:98:
d1:c6:f6:e2:c6:e1:ba:21:f5:ec:1e:ce:d8:de:6f:90:eb:38:
dd:17:59:6f:7d:63:20:3c:74:21:20:8f:f6:d3:7f:b5:52:78:
ef:65:c8:0b:4e:89:a8:99:46:43:60:6d:8c:8d:09:fa:12:0e:
9b:47:98:0e:a5:6d:a6:9b:dc:37:6b:d1:10:9b:a9:3d:47:ba:
79:0b:0f:50:28:cb:e5:8e:58:07:fc:10:0b:e0:10:05:9d:20:
58:8f:97:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:38 2025 by rpki-client