Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: eo8q2xopMaczEMLYbeuPjZOAA6hN2XScYlH1ndNtw0w=
Subject key identifier: AF:20:DF:C2:42:F1:30:15:D7:59:35:CD:4B:7E:20:6C:6E:37:EA:83
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 019A7226777BD333D24443F6C98699F6E377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:54 +0000
Manifest this update: Tue 11 Nov 2025 09:01:54 +0000
Manifest next update: Wed 12 Nov 2025 09:01:54 +0000
Files and hashes: 1: XtPvNkbtFvkSrn1XGkdkM55xfJ4.roa (hash: XvdvDvnaLffIXutFMAXtL47S87Pb9dwgFS/EYsDxu5Q=)
2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: sqJIGOFdlgudMPmFHycKv+FItRidn2y+qjQUf0J20g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:77:7b:d3:33:d2:44:43:f6:c9:86:99:f6:e3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Nov 11 09:01:54 2025 GMT
Not After : Nov 12 09:01:54 2025 GMT
Subject: CN=af20dfc242f13015d75935cd4b7e206c6e37ea83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:e9:c7:92:98:82:1d:a1:00:84:7b:ff:c9:
d5:c1:e2:bd:f8:8c:6f:49:07:3f:50:f7:dd:2d:50:
5a:34:ef:f6:50:47:ee:a8:76:92:ed:9e:73:3d:71:
0a:1c:52:42:65:a0:d8:1c:af:61:3b:ea:16:98:8f:
8f:62:50:dd:08:47:16:51:54:a3:ef:3b:e9:f1:f8:
5b:31:cd:53:21:95:98:1b:56:2b:26:ae:98:f8:a4:
0d:a7:65:7b:3c:4e:b5:3b:40:4d:55:1a:39:87:fd:
05:8c:56:34:f4:f8:35:88:b9:56:f3:73:7e:db:84:
88:13:06:5a:63:8e:24:b7:eb:84:45:e6:c6:39:57:
e3:ef:38:af:f2:17:a4:75:be:cd:c9:a6:70:a6:69:
5a:5b:9a:06:b0:df:ed:d2:db:5c:49:a4:79:29:28:
a8:6d:8b:22:77:f6:41:3a:5d:4b:26:39:48:3e:68:
ff:94:48:6f:08:a2:1d:b9:9e:a7:64:75:62:8a:b5:
35:f5:15:39:bb:56:04:a6:9a:35:39:d7:39:0a:03:
83:ae:4f:24:4a:1f:f0:00:da:48:4b:ed:ae:28:b6:
63:85:ab:cb:35:28:29:6c:91:ef:e8:10:8b:eb:3d:
b9:60:e0:7e:98:9c:0f:2e:78:ab:9c:4e:88:0b:ee:
3d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:20:DF:C2:42:F1:30:15:D7:59:35:CD:4B:7E:20:6C:6E:37:EA:83
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:af:c3:61:16:49:61:03:c8:60:ea:d1:e8:98:f5:fa:8f:4c:
7e:ae:6b:15:25:0c:62:6f:46:2f:e2:bc:3e:d1:c4:bf:4e:d4:
94:fa:86:78:75:f8:72:70:35:98:13:f7:9c:23:01:84:ed:18:
02:d0:e1:0c:ef:f9:89:cb:77:8a:96:cf:db:c5:95:0e:c3:4d:
c1:db:90:a1:94:38:15:54:a4:de:25:81:f6:bf:aa:9b:7b:b3:
bc:84:d9:6c:5f:00:67:ab:74:1a:98:e8:bd:a5:e2:0f:06:99:
d8:a6:b8:2d:d6:00:68:0d:89:59:0c:57:cb:00:36:1b:25:58:
3c:4f:ec:36:09:8a:47:91:a4:5e:d1:92:fc:0c:77:30:67:e9:
b6:a5:3b:c9:90:b3:1a:13:a8:d3:ad:26:ca:30:f1:6b:21:de:
da:8a:2d:aa:86:43:56:b2:b6:15:b1:83:99:40:9a:ef:2d:15:
8e:4c:d6:b9:9f:9a:bb:37:c6:e0:c2:72:14:69:29:9d:c8:fd:
14:fb:f3:4d:98:8b:0b:1e:47:cb:4f:1b:09:46:24:c8:e4:7c:
b1:5f:fb:58:2a:70:90:b1:bd:e6:7b:64:34:12:12:94:f2:ea:
b4:f3:ad:74:02:21:f8:5d:a5:ec:5a:38:fc:48:db:e3:c8:d6:
a6:23:a5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:03 2025 by rpki-client