Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: 2Nw61JIiyMAp+C9dJp3vGE3lmnr79QTbwlON1sjo9qg=
Subject key identifier: 9E:6D:54:C4:68:CC:BF:FA:2E:79:64:50:51:E2:0D:17:71:AA:44:24
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 019A2A4320030631C34605FDF7A97899785C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 10:00:33 +0000
Manifest this update: Tue 28 Oct 2025 10:00:33 +0000
Manifest next update: Wed 29 Oct 2025 10:00:33 +0000
Files and hashes: 1: eIuvCKiUKqnjxChjtjEAvL7JvnI.roa (hash: wyV3lMaUUP7vVQqM6FlcaWTPKvU8kW+p1xMsgVv6OJA=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: g6FR8cgqq12PxG20IVD7Jnz0nNsrZg76tOFPpNf8Vug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:20:03:06:31:c3:46:05:fd:f7:a9:78:99:78:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Oct 28 10:00:33 2025 GMT
Not After : Oct 29 10:00:33 2025 GMT
Subject: CN=9e6d54c468ccbffa2e79645051e20d1771aa4424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:4c:99:59:ec:c9:bf:df:4f:d0:08:10:37:
1a:2b:36:94:fe:9b:c6:4e:8e:47:6e:1f:80:50:f1:
5c:0f:fb:23:b8:b0:0d:7a:20:56:26:70:6f:9d:d7:
0d:32:f2:df:15:6a:82:13:4a:b1:41:34:44:64:32:
95:ca:e0:a8:e0:00:98:c4:7b:c8:9e:d5:b1:30:24:
b7:11:c0:da:10:28:0c:ee:db:bd:45:26:b6:d7:7f:
8d:cf:dc:c9:8f:9f:b2:91:aa:b7:da:ad:84:68:ea:
56:85:fc:47:f0:30:89:93:52:24:61:58:63:f8:09:
52:68:70:e4:a8:5d:dd:f0:0b:f5:ef:e2:1d:20:ec:
74:66:77:f0:e7:8a:d7:e8:d5:79:02:2a:11:93:b4:
b3:56:99:08:69:39:70:15:b9:09:be:28:2d:fd:cb:
a4:f0:4a:d6:19:b1:73:00:72:fb:77:6d:f0:22:43:
b9:31:4b:06:f7:b4:a3:bb:db:50:73:b2:eb:95:b7:
06:be:99:13:f6:63:b0:d0:b7:7d:a8:a0:b0:4a:ff:
e4:16:fb:81:db:22:91:ce:e5:00:bf:d0:78:18:3d:
ca:a3:97:43:ac:8b:f5:81:dd:2b:39:90:2d:cb:7c:
6c:df:d4:16:98:4a:14:79:2e:cc:1d:bc:71:95:2f:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6D:54:C4:68:CC:BF:FA:2E:79:64:50:51:E2:0D:17:71:AA:44:24
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ff:b0:02:54:48:1e:18:ab:d7:ed:95:47:f3:63:86:36:9e:
97:04:a7:c0:84:6c:2c:bc:89:6b:91:78:f7:3d:42:b6:39:dc:
51:8a:fa:b1:bd:2d:56:8e:ff:10:58:0c:88:50:30:e6:61:aa:
69:2f:ce:eb:7a:d0:ee:0b:79:06:52:b2:5c:54:a8:1f:44:aa:
6a:a3:ec:02:f7:55:e8:5f:de:c6:b8:71:33:06:7c:aa:06:16:
e0:db:06:f7:b9:c8:ee:72:ef:2c:0e:df:8c:45:1f:4a:6d:40:
b6:3e:55:67:35:43:fc:b8:4f:d8:25:97:1d:c5:e6:8d:ae:f6:
f2:d5:60:9f:ca:60:08:93:a2:2b:a3:7b:11:39:07:be:6a:c7:
9f:87:b5:54:e2:a2:bb:b4:af:b7:44:f1:d1:df:ca:11:44:de:
61:94:0f:a7:ef:9b:bc:28:82:cb:d0:03:f1:af:e1:06:ef:ac:
38:41:e4:e5:d3:5e:a2:8d:da:17:e3:35:3e:c7:34:e8:79:81:
ee:46:ce:d6:f4:79:b7:fd:62:8e:13:f7:82:4e:bf:29:53:26:
38:77:08:6c:d5:c4:8d:f9:1a:14:38:9b:a5:7f:95:b8:38:16:
01:1f:da:a8:3e:1e:8f:c5:13:f6:95:94:dc:32:3b:5a:91:30:
93:0f:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:19:03 2025 by rpki-client