Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json)
Hash identifier: CWFwvYPYHbCDuYhq8JJrK6Gsid+uORlcicYuRqSeYlQ=
Subject key identifier: 47:C9:90:39:6A:5C:50:4E:32:22:A8:6E:C0:89:25:0D:1C:C3:8E:74
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 019A73017CA2239615CB5A0BC46CA4F81245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
Manifest number: 09F9
Signing time: Tue 11 Nov 2025 13:01:08 +0000
Manifest this update: Tue 11 Nov 2025 13:01:08 +0000
Manifest next update: Wed 12 Nov 2025 13:01:08 +0000
Files and hashes: 1: TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa (hash: a1F6oMMLvEFRIYoQInrH9FMRLmJcoCgIJF0JoxM2u7Q=)
2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: ph73oX1LPr0xVolNbsGhooxuad++IMYL6o0Er8PN7BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:7c:a2:23:96:15:cb:5a:0b:c4:6c:a4:f8:12:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: Nov 11 13:01:08 2025 GMT
Not After : Nov 12 13:01:08 2025 GMT
Subject: CN=47c990396a5c504e3222a86ec089250d1cc38e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:2b:48:2e:cc:94:c1:ae:ed:a3:05:01:e2:
e1:91:98:2d:0b:b1:c0:a2:85:bf:7c:05:a8:82:09:
2c:83:7c:aa:0e:50:54:65:b5:12:95:1b:5c:4a:e0:
84:e2:be:7c:27:4b:7a:ea:40:70:da:9d:1c:74:dc:
58:ee:5c:fb:44:8c:fb:e7:8a:7d:29:2c:33:21:e5:
10:d8:fa:68:60:9a:56:8a:03:b7:e0:1e:6f:3b:74:
1e:6b:b4:1f:41:0f:63:41:dd:3a:1a:99:5b:0a:95:
ab:31:a4:57:9d:2a:53:79:39:97:2a:c2:08:d4:73:
ec:09:f7:ea:ce:18:22:f7:53:a2:e4:60:05:cc:ee:
92:b8:34:cf:c3:ed:1d:17:8f:b0:f8:80:a4:93:1b:
ae:d9:4b:91:2a:43:d3:68:5f:c5:8c:e4:0c:b3:ad:
b0:83:8f:8f:c2:c0:27:da:ef:a2:0e:6b:cf:ef:a5:
c0:71:85:90:e0:af:6e:b8:69:c6:1a:4e:5b:c4:c1:
7e:31:e4:d1:86:ee:e7:6d:81:63:10:ef:ff:d9:de:
cc:38:e4:05:aa:6b:dd:37:28:a7:a9:79:5f:2e:ab:
4b:78:1b:e2:e8:65:a7:46:d7:ca:00:ea:e7:e0:22:
a5:e9:55:a3:0a:89:ef:ea:69:67:29:e1:a7:1e:20:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C9:90:39:6A:5C:50:4E:32:22:A8:6E:C0:89:25:0D:1C:C3:8E:74
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:af:a6:f4:80:ef:04:de:44:f5:24:f3:f8:40:8c:84:b7:e4:
86:ee:ad:20:c2:a3:b3:1d:38:1d:17:7e:26:60:80:97:d7:b9:
9c:f2:17:54:7a:50:56:7f:49:c4:b8:8d:fd:62:ae:3b:17:e2:
35:fc:fb:a9:01:bc:e9:00:ca:a2:e9:3d:01:44:27:20:86:ce:
40:db:ab:40:20:d8:9a:6e:5f:88:d1:e4:2c:c5:10:26:b1:17:
ef:94:fb:ad:ed:6f:bc:d5:8f:a7:58:82:48:6c:f8:93:58:42:
c2:40:b3:bb:c2:38:4c:0e:0f:20:89:04:ee:e7:35:88:1c:2f:
10:6c:f9:f6:33:d2:60:88:0f:de:07:69:3e:fb:19:29:54:dd:
11:10:60:50:90:73:50:00:94:16:35:cc:8c:87:f5:db:c8:c1:
79:b7:fe:28:f9:78:96:cd:ca:86:1d:68:eb:d3:1d:de:e0:a1:
e4:46:69:cf:61:3b:63:06:96:e7:07:77:90:ce:ee:25:09:8e:
27:62:85:9e:0f:81:b4:98:31:ba:2c:7a:c3:47:8c:2f:f2:e0:
09:38:44:73:71:3e:d3:71:72:7a:81:d3:45:75:5c:66:75:2c:
12:76:06:25:60:52:a3:0f:5d:1e:52:32:11:20:cd:22:70:54:
f5:f4:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:12 2025 by rpki-client