Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
File: qsU0mf8g8DXLixwKqbd8PX0ol2w.mft (raw, json)
Hash identifier: zXtpQNTqVdruxFUcPxPcbA9B/hq/T4bzIQQruYvWJkU=
Subject key identifier: 1B:75:76:24:51:85:07:F1:71:D1:15:AD:B7:20:6B:24:10:F8:CD:30
Authority key identifier: AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
Certificate issuer: /CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Certificate serial: 019A70DC0EFB0DF5CD014BA2B764233060A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 03:01:01 +0000
Manifest this update: Tue 11 Nov 2025 03:01:01 +0000
Manifest next update: Wed 12 Nov 2025 03:01:01 +0000
Files and hashes: 1: 3RChXaGg2mHXT_oEdTM0SpY6jhc.roa (hash: PV09Dkm12mpf6AJ4aFGi0VOS8JddqTI6zuA00aTTnSY=)
2: qsU0mf8g8DXLixwKqbd8PX0ol2w.crl (hash: RgFpDV9ydzoi6cw3yaboq2dQtrC/9cYp/w0eeav6IuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:0e:fb:0d:f5:cd:01:4b:a2:b7:64:23:30:60:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac53499ff20f035cb8b1c0aa9b77c3d7d28976c
Validity
Not Before: Nov 11 03:01:01 2025 GMT
Not After : Nov 12 03:01:01 2025 GMT
Subject: CN=1b757624518507f171d115adb7206b2410f8cd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7b:ad:33:c6:aa:aa:45:5c:97:a2:86:b7:0e:
77:27:c5:dd:ca:6a:f3:e9:79:9f:c5:1f:f2:c9:bc:
80:d8:be:3b:d6:18:a1:f2:4f:12:14:cc:e9:66:1d:
09:26:67:62:54:b4:97:4f:b2:b3:73:db:15:64:55:
7e:d0:c9:36:c2:03:76:5f:db:a6:54:be:fa:1b:d9:
43:74:77:dd:10:62:ec:0b:22:2c:9c:79:2c:66:bb:
3b:1a:f8:2f:25:0c:30:84:a9:a9:e6:3f:b5:59:26:
c8:50:ee:b4:f1:8e:dc:b6:1a:63:12:b2:bc:55:40:
f6:97:15:bc:b8:b0:ac:6e:56:d1:38:f2:07:44:3a:
23:4f:6d:e0:01:4b:14:e1:4a:43:9d:aa:71:90:aa:
5a:99:f9:b6:8f:a5:40:dc:8b:9e:2b:45:f2:f4:66:
8f:0f:27:fc:33:4e:ee:17:a6:32:02:81:a2:0f:9e:
85:27:32:83:b2:a4:bc:a3:54:d6:2d:af:51:bc:d2:
6a:46:74:d7:2b:9a:e6:71:86:29:34:4d:a1:91:40:
b1:8b:26:21:09:47:04:8f:f2:1e:6c:e4:10:38:5f:
34:7b:c0:1e:86:46:b3:cd:08:51:59:82:15:5f:0d:
aa:d7:33:65:6f:52:6d:36:b0:2b:6e:ab:b6:6a:70:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:75:76:24:51:85:07:F1:71:D1:15:AD:B7:20:6B:24:10:F8:CD:30
X509v3 Authority Key Identifier:
keyid:AA:C5:34:99:FF:20:F0:35:CB:8B:1C:0A:A9:B7:7C:3D:7D:28:97:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsU0mf8g8DXLixwKqbd8PX0ol2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/618ee0-bcc7-4851-bc2c-fab9bf7a26d8/1/qsU0mf8g8DXLixwKqbd8PX0ol2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:81:35:e3:1b:93:02:a7:99:70:db:27:14:a3:90:3c:22:3b:
59:e2:be:bc:23:e6:07:0c:73:8e:be:a4:cc:65:d6:33:40:1e:
78:aa:7b:1b:f3:49:93:14:75:8b:03:8b:8b:62:72:e7:21:32:
7b:1d:78:f3:4e:29:32:66:ab:4b:a5:6d:80:d8:2b:35:74:9c:
6a:7b:e8:06:4c:7e:d5:b7:ae:74:c2:86:6f:f5:b3:d1:75:88:
a1:de:3e:d1:fd:50:79:9c:96:27:76:84:88:9a:99:0a:bf:b6:
12:50:17:c0:c0:62:b9:cb:30:1f:9f:13:a7:f7:37:cb:40:a5:
78:a8:10:70:f6:c3:43:7d:13:d9:49:68:00:8b:d2:76:ad:78:
a2:43:b5:15:45:62:0c:d4:e0:fa:a7:32:a3:18:0f:00:b5:fe:
36:23:68:62:01:37:ba:3d:5c:e1:19:7b:45:39:b0:63:52:2b:
7d:49:c2:93:92:71:3e:c2:13:6b:2b:b7:ba:e2:71:bf:11:bc:
be:cf:83:ff:1b:c9:d7:37:ee:21:77:82:1b:df:47:6b:8e:c4:
36:05:1f:da:ed:2f:f1:4e:3a:a2:cc:6e:da:27:b0:4f:25:cb:
93:8e:2b:c8:e6:55:a3:f3:cd:97:92:6d:de:4e:cf:c4:6c:43:
3f:77:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:26 2025 by rpki-client