Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: +8AuMWAL7DK5EZD88pGvdbQn5KsZKFZKr/KeEcPYS/Q=
Subject key identifier: 03:4B:54:EC:5B:00:35:FC:89:B2:EC:E0:3E:FC:09:C1:4D:DE:6C:0B
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 019A50749F53B9920F35CF8F49DF8437E347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 144A
Signing time: Tue 04 Nov 2025 20:00:11 +0000
Manifest this update: Tue 04 Nov 2025 20:00:11 +0000
Manifest next update: Wed 05 Nov 2025 20:00:11 +0000
Files and hashes: 1: F6ObM6UnximfbwiH1YL38MiUlBY.roa (hash: FMTxgNBaoS8PjWTC2HJz86nipqDf/pRuOEnb+E3AC9c=)
2: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: k63p1rFi5W77sS67MjXDxsqEfH0lgkn9m+e52YocmCM=)
3: sf13oGu2DAluNtQ_y1zSmgQAeHE.roa (hash: gqTUmbOHfz421/G+vBG6eJTQ7lB+mn9m4coW+T9SV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:9f:53:b9:92:0f:35:cf:8f:49:df:84:37:e3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Nov 4 20:00:11 2025 GMT
Not After : Nov 5 20:00:11 2025 GMT
Subject: CN=034b54ec5b0035fc89b2ece03efc09c14dde6c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9e:9a:6a:b5:5f:8e:a6:c8:e4:2e:94:2b:01:
16:ff:f6:ba:66:6e:4d:11:06:ef:5e:f8:fc:b3:25:
6f:b6:a4:fd:b8:79:4c:1e:65:56:2b:a2:03:38:37:
88:44:98:9c:70:07:07:ac:00:d5:6d:ee:40:d0:c6:
bd:93:39:44:65:6c:15:28:cf:4c:41:51:d4:d1:0e:
88:31:3a:2b:3a:b2:9e:53:e5:d8:26:d2:6c:3b:b1:
8e:0b:fa:cd:5a:da:f9:9f:00:8c:0b:81:97:07:a4:
f2:bf:67:87:ce:68:7f:4d:3e:7a:10:c2:49:a2:cf:
b2:bf:a7:75:4e:64:3e:90:8f:46:cd:66:ae:0c:30:
62:b9:8d:0a:d4:10:b1:96:57:65:ad:da:54:94:aa:
35:f4:51:a1:d8:ed:1b:80:29:5e:aa:e4:a6:e6:59:
96:29:4f:54:85:90:2f:bc:9d:2c:3e:d5:0c:5e:c6:
51:20:9f:d9:c4:c8:4b:09:90:94:15:5d:be:6f:5e:
1e:ff:f0:79:72:e2:fa:6e:6e:64:91:c0:30:30:83:
51:56:b9:28:7f:a3:4e:6f:76:f4:ba:ee:fb:44:25:
e6:15:06:e1:3e:94:d9:b1:6c:bd:87:7c:a4:a4:41:
79:61:56:08:83:6a:87:14:58:bd:94:b4:12:60:f7:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4B:54:EC:5B:00:35:FC:89:B2:EC:E0:3E:FC:09:C1:4D:DE:6C:0B
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:80:eb:a7:f2:27:e8:81:55:cc:f4:77:10:cf:c0:d1:cf:12:
06:95:e4:5c:0d:50:5e:0d:28:9d:07:b1:f3:f8:6c:5b:40:7a:
ec:89:90:46:f7:2b:c9:7f:ed:4c:cd:cc:1e:3e:79:88:63:c4:
6c:ef:88:78:f6:69:c6:26:02:87:ed:41:38:7b:90:48:ca:7e:
c4:08:d1:d5:89:7a:44:35:b5:b3:8e:b8:0b:2c:bd:d7:1e:70:
c4:18:06:e9:27:60:4a:00:1e:0a:9c:81:4d:1f:78:7f:a7:c9:
67:34:d0:d1:ad:b1:b0:fd:9f:bc:34:61:42:e8:7f:0c:cc:ae:
70:2f:7f:f1:52:90:d2:bd:44:47:36:3b:e6:02:7d:6b:ac:3c:
2c:6e:da:b0:76:67:26:c9:5b:9a:36:09:0c:86:9c:e4:89:f7:
ca:f1:ee:ae:89:0c:80:0d:c4:3c:78:2a:c6:e0:28:9c:7d:7e:
6c:41:0a:8f:65:22:35:16:98:d5:67:ed:9c:79:20:15:55:44:
6b:75:1b:6d:78:61:59:fb:b0:ff:9b:43:39:75:6d:c8:8e:68:
49:58:50:5b:54:7d:1d:34:9a:1e:6c:89:ec:9d:bd:7e:fd:f7:
3c:28:0c:a1:7e:45:c6:12:0b:96:3e:4a:ff:2f:c0:34:33:db:
0f:7a:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:56:09 2025 by rpki-client