Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier: 7f98PAQnN1sxoGXj9EEmWofYrbYb+nBi7nyrVSufVMk=
Subject key identifier: EC:D5:AE:B6:0F:DF:68:EE:84:4A:1D:DD:4C:00:CC:D1:34:E5:73:CC
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 019A522CA24A71187AB87E34E9477CF9E144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number: 1715
Signing time: Wed 05 Nov 2025 04:00:47 +0000
Manifest this update: Wed 05 Nov 2025 04:00:47 +0000
Manifest next update: Thu 06 Nov 2025 04:00:47 +0000
Files and hashes: 1: 4b-QnhZG2HZCZ361-cHusX-pjXk.roa (hash: j7SZly2Vh9/97I+L9CrIza0RGFP+q4iam4ta+RVbZYI=)
2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: UyVXusw2bezyWNi42Vl46r2cgW55c3nELcB22UpUwIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:a2:4a:71:18:7a:b8:7e:34:e9:47:7c:f9:e1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Nov 5 04:00:47 2025 GMT
Not After : Nov 6 04:00:47 2025 GMT
Subject: CN=ecd5aeb60fdf68ee844a1ddd4c00ccd134e573cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:ac:18:37:bf:5c:38:d7:c3:c7:05:14:03:
86:4a:a2:a2:e3:b2:a3:cc:1b:8c:a2:04:b6:60:14:
37:e5:e5:7f:9a:e9:57:71:48:99:3b:b3:ef:b4:27:
b1:bb:e8:8f:fe:c4:e7:ec:bf:86:eb:87:ba:51:70:
fd:07:58:f7:95:0f:5c:62:9a:59:d0:e5:c2:da:37:
80:07:b7:3a:01:04:33:7b:ac:39:36:02:1a:3b:08:
48:96:f9:8c:a4:30:b0:a4:86:08:f3:1c:ce:e1:30:
35:d4:63:1f:b0:15:f9:1c:92:be:f8:5c:5f:ce:70:
2f:57:c4:81:5a:59:ae:4f:e7:e9:e7:7b:82:0a:f8:
16:32:f8:ba:6d:1e:5f:35:e5:c1:97:6b:8e:bb:b6:
53:f9:20:ab:a3:64:7d:a6:06:a5:3f:d2:ed:a3:f3:
d5:29:70:a9:4e:e2:c4:7c:9a:a5:5d:41:0d:fd:e9:
17:69:9e:c3:04:69:45:c6:93:84:c7:c6:ad:cc:af:
98:ed:58:ae:69:a8:bb:5f:06:4b:d4:f1:02:7c:62:
7e:b9:59:e8:6d:b3:bf:87:ff:0e:f2:5f:1c:e5:2b:
16:28:19:3f:0a:c9:11:4b:47:d1:05:c1:a0:9b:99:
ae:c1:ce:76:95:cc:e5:51:2b:a5:ed:89:5a:46:16:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D5:AE:B6:0F:DF:68:EE:84:4A:1D:DD:4C:00:CC:D1:34:E5:73:CC
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3d:d6:c6:d4:08:98:5d:d3:b5:8e:a0:99:ed:7c:0c:e8:69:
98:54:c7:53:11:63:37:2e:28:e1:88:b2:bb:e4:dc:a5:82:80:
0e:82:00:f5:ed:e5:51:4f:87:ab:36:25:ed:38:20:3b:7c:47:
8a:7e:22:58:c0:f7:3e:7d:25:a6:05:b4:77:10:fa:4a:f1:5a:
c5:6b:37:e3:5c:07:7c:bd:d9:76:86:08:da:74:12:a3:39:be:
22:b9:ad:d3:9c:4b:e5:c1:85:21:a9:c1:41:77:2e:ce:e0:be:
90:2a:c0:00:ff:cb:9d:de:cf:0f:9a:d7:9b:26:97:d5:8f:3f:
ed:c8:e2:d4:b7:d0:da:85:38:08:e1:15:c9:99:c2:88:d3:e2:
45:a9:5a:0b:2f:7d:02:24:f9:9d:4b:47:e4:2f:2d:35:f0:dc:
c9:21:c7:6c:66:96:3f:c5:d4:b6:b4:4b:59:cf:6f:ee:af:80:
ec:4e:57:f5:ca:c4:66:15:58:36:2f:d6:8a:b6:89:07:ea:86:
f1:66:84:f5:71:a8:ad:85:ab:f7:f7:0f:12:ab:a4:02:e5:bd:
d6:d5:8e:b9:6d:f6:09:80:c9:06:1d:f0:a9:3f:77:3d:19:3a:
a6:37:3b:bf:18:79:98:77:25:e2:d1:b8:d3:7e:b7:b3:52:cd:
d7:eb:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:02:45 2025 by rpki-client