Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: +XRXnUW/mXNid2aLpEWMNafA89prYufogCHf5P9ExAQ=
Subject key identifier: 10:B9:A0:EF:4F:E7:CF:1C:16:02:F3:D2:78:64:77:5B:71:F2:61:9B
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 019A0FA74D399CDED48C8C0E635F478DEF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 05B5
Signing time: Thu 23 Oct 2025 06:00:13 +0000
Manifest this update: Thu 23 Oct 2025 06:00:13 +0000
Manifest next update: Fri 24 Oct 2025 06:00:13 +0000
Files and hashes: 1: 49r3EiPqYIwA3FVnQ3pruyaEeaY.roa (hash: S4fah+Hi++9D/Vhg9/JWPzVOXskqt4CfJ/0z6MaI0ok=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: jP/1DWml8zw+G+CV4Ig0EvXTcNH6sRPJEyZhe8VYqlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:4d:39:9c:de:d4:8c:8c:0e:63:5f:47:8d:ef:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Oct 23 06:00:13 2025 GMT
Not After : Oct 24 06:00:13 2025 GMT
Subject: CN=10b9a0ef4fe7cf1c1602f3d27864775b71f2619b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:b7:c9:59:1b:9d:a8:bf:2a:47:2b:a8:f6:
12:1c:92:b6:e9:0f:2e:77:2a:68:b1:f7:9f:af:91:
51:fe:72:1e:aa:e9:2e:f7:b8:c9:b8:44:70:17:5f:
63:6f:60:82:91:72:89:23:20:b2:e7:fe:7d:78:a9:
8a:4c:00:69:de:e5:62:2b:d1:d9:cb:15:9a:29:c6:
93:1b:6b:1c:61:c1:27:05:0e:61:82:b9:e7:69:fb:
d9:3b:a4:51:4c:66:67:56:3b:af:8c:18:73:c3:cd:
9f:51:6a:7f:c4:df:29:d6:82:96:51:1f:f9:b1:24:
8b:3d:56:93:a2:a1:6f:97:ab:48:d9:72:fe:56:1b:
1c:2b:e9:51:da:01:b2:f3:24:0e:30:2c:98:20:85:
5a:77:df:4f:51:bf:10:e6:24:cf:9a:f8:92:9a:b0:
14:a4:1c:4d:75:14:58:b4:8f:67:1c:c5:b4:10:5c:
a4:f6:f5:ca:f5:55:06:b9:8e:bc:79:75:29:b0:a0:
00:78:3b:6b:e3:61:42:7b:b2:4b:6c:75:b5:d2:c8:
6b:cd:d8:00:e5:00:ab:bc:ea:d3:5d:b6:43:bd:79:
d9:e0:3d:e1:96:d7:12:38:3e:75:af:2a:73:79:28:
a8:6e:a2:e8:92:6f:b8:62:5a:7d:67:18:7d:42:ae:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B9:A0:EF:4F:E7:CF:1C:16:02:F3:D2:78:64:77:5B:71:F2:61:9B
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:24:42:78:b6:01:4b:c0:25:43:bb:9b:6e:3d:1e:8b:1d:73:
c7:b3:82:c9:9a:65:b6:b5:c4:7c:08:c9:c7:34:23:b1:e7:ba:
ec:60:91:7b:39:b3:8d:dd:e0:23:59:0f:bb:b0:64:f7:01:53:
1d:8a:ee:94:cc:a8:22:0f:b7:98:52:8e:29:86:aa:7f:6d:7b:
41:97:63:5e:4b:13:4a:0e:ff:13:0a:b5:ca:a8:cc:5a:7b:a7:
6c:30:40:f7:32:bd:9f:58:be:1d:8d:7b:74:fb:69:bf:6f:21:
5b:fc:e0:04:98:45:dd:b2:93:13:fc:4a:dd:56:69:62:7e:8e:
1c:95:d1:75:5f:43:a2:e7:06:45:b1:a7:5c:91:a5:f1:32:16:
c3:04:5f:55:0f:e4:42:89:b6:ad:c0:4b:13:7f:cd:c0:87:66:
3a:7f:3a:f3:69:f3:66:c2:5e:de:87:45:7f:74:a1:70:01:ed:
03:c5:b1:72:ea:38:80:45:51:99:43:a5:82:64:a8:bd:f6:cb:
df:31:21:cc:14:2d:83:27:55:dc:bb:ef:a8:ef:f9:ee:89:6c:
1f:32:1d:12:cf:9c:c8:ea:b3:4e:dd:e9:ec:10:ce:d0:be:42:
50:4f:24:79:c0:8c:24:11:85:38:a5:ef:c3:15:34:db:23:37:
26:6b:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:47:10 2025 by rpki-client