Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: 6QvTi8EW4jTQx22RXWDh36lSZkTB9P3UGH43SJSZpCI=
Subject key identifier: 7B:E7:62:5F:D6:A9:03:6F:D6:B8:B1:37:E4:5C:06:E4:CF:14:D1:F9
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 019A04112279EF89D6E04F0063F1E0392208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 05AF
Signing time: Tue 21 Oct 2025 00:00:23 +0000
Manifest this update: Tue 21 Oct 2025 00:00:23 +0000
Manifest next update: Wed 22 Oct 2025 00:00:23 +0000
Files and hashes: 1: 49r3EiPqYIwA3FVnQ3pruyaEeaY.roa (hash: S4fah+Hi++9D/Vhg9/JWPzVOXskqt4CfJ/0z6MaI0ok=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: wXaQdNPySArdLgpR6d7DQskib7AqlAy1jEdG8HEEwt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:22:79:ef:89:d6:e0:4f:00:63:f1:e0:39:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Oct 21 00:00:23 2025 GMT
Not After : Oct 22 00:00:23 2025 GMT
Subject: CN=7be7625fd6a9036fd6b8b137e45c06e4cf14d1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:05:cb:1a:e4:2b:bb:15:09:69:98:bd:7d:
7b:ce:40:6f:24:df:f3:4a:d9:2f:33:a8:46:df:d2:
43:2d:8d:d3:6f:14:e8:7d:94:b2:28:c9:9d:bb:cf:
a6:88:1a:af:bf:45:73:07:33:cd:f1:c4:f3:ed:60:
36:08:63:04:f5:26:ac:ca:1f:20:2d:17:2e:c1:2f:
71:c9:43:cf:01:b1:33:e1:a6:e3:fd:a2:f9:a3:c4:
99:06:24:d2:af:36:86:16:62:fd:8c:e2:ef:6b:66:
8e:27:77:fc:ca:fa:a5:41:23:ab:23:60:e4:fe:cc:
d5:e0:cb:91:b3:02:b3:82:9d:1c:d8:1b:09:43:32:
5e:ab:f1:33:74:49:c5:7b:fe:e6:fd:b7:5e:44:66:
51:f2:c0:9d:4f:a4:49:f1:0e:73:e0:60:71:18:59:
62:cd:4f:0a:73:c8:fd:97:d9:2c:bc:00:16:54:9f:
c8:80:68:b2:12:b4:d1:68:79:fa:14:b1:8a:c8:d1:
c7:83:d6:68:78:8b:70:12:68:33:4e:5b:84:b5:73:
79:38:74:0c:a1:a5:68:83:1d:c3:0b:58:62:85:a1:
1d:d8:ac:1c:f1:00:fc:75:09:a5:be:81:c9:6c:a5:
15:8f:01:d1:9a:ff:42:8a:df:bc:f0:98:14:09:7e:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:62:5F:D6:A9:03:6F:D6:B8:B1:37:E4:5C:06:E4:CF:14:D1:F9
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:88:3c:d8:6e:d7:18:4f:32:29:76:50:c1:7b:c4:c9:5b:c7:
01:7e:bb:b5:c3:e5:10:24:58:64:41:c1:ee:5f:44:93:47:d8:
5b:c0:1b:ee:87:46:03:01:f5:c9:f6:4b:d3:0c:d8:ba:69:91:
42:13:ae:f9:77:3d:d1:0f:cd:a5:8d:f9:90:4f:f6:cc:f0:75:
d1:3a:26:1d:e4:af:c8:7b:16:30:24:53:84:0d:00:1d:b0:3b:
d4:be:99:86:43:06:06:2a:3d:7f:0f:0d:59:ce:6e:7a:ba:38:
96:17:e4:be:36:c3:df:df:35:20:7b:f1:d1:13:ce:ce:df:ab:
f0:85:50:9a:0e:72:d2:36:ad:cf:2e:92:da:ac:a4:22:fb:3b:
80:4c:5f:f4:41:60:27:7e:30:a4:ff:29:af:99:9c:4f:91:ba:
05:17:c8:11:be:59:6b:05:af:6c:70:b7:5d:4b:4c:6e:5f:06:
a5:7e:23:54:d3:c2:88:ea:11:9f:85:86:76:b3:75:ac:35:5f:
04:8b:3b:da:da:20:d3:b8:90:a5:ab:d3:34:44:c0:76:8e:a2:
58:d6:5f:1f:67:90:8b:54:4a:7d:fd:85:54:dd:a7:dd:09:f8:
bd:76:ad:bb:43:99:47:97:3d:a3:f3:b0:eb:d1:16:ff:2b:38:
72:6f:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:58:56 2025 by rpki-client