Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
File: qvpFpixehQq5yHJqWam_qZLTcbI.mft (raw, json)
Hash identifier: aTlDZYhrPpCekLLWWoRE78LmY2h08ylLKdbf8fTkt2Q=
Subject key identifier: D7:74:99:27:AC:F7:D2:05:A4:8D:A3:B8:5A:31:E0:5E:DD:30:42:D2
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Certificate issuer: /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial: 019A4D7481A268CFDC40C81BBB8316D2F5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (hash: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=)
2: qvpFpixehQq5yHJqWam_qZLTcbI.crl (hash: D31fVI2RKow1+mwCxxpZkdP/RVA/O0MsjLmZMbTaajk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:81:a2:68:cf:dc:40:c8:1b:bb:83:16:d2:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=d7749927acf7d205a48da3b85a31e05edd3042d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:5b:1e:52:25:a8:22:3d:15:02:f2:25:0e:
eb:7c:6a:91:13:01:83:53:38:c9:80:c0:65:6c:ee:
81:c2:a2:31:a0:26:32:00:f3:e3:27:14:d9:1a:15:
89:02:9b:38:9e:68:40:7d:d1:1d:53:82:64:c1:89:
29:6e:a5:c2:27:fd:e5:ed:bc:19:a6:6b:53:11:37:
dd:8a:5a:c3:ec:47:26:57:76:c2:57:d1:c6:9e:64:
25:26:4b:a4:eb:9f:4e:88:4d:75:54:3f:90:3b:f5:
20:4d:cb:b3:1a:b7:1c:a6:87:97:83:76:7a:d1:a6:
b7:27:7c:4b:bd:e0:1d:d0:67:89:19:82:3b:df:ba:
a3:d4:fb:25:38:45:b1:b9:b2:cb:84:78:84:3c:9c:
60:0d:7a:34:ac:2e:08:93:64:66:c3:b3:e4:85:52:
cc:f7:06:c6:30:66:b7:3f:9e:05:67:44:26:ff:e5:
00:5f:7f:84:27:c8:32:69:90:4b:e2:3a:9d:ba:26:
5f:5a:a9:80:3b:6e:69:c0:15:4c:6e:e9:73:fa:44:
1e:1e:93:d1:ac:c5:33:10:0a:4d:f6:50:3d:f9:9e:
cb:9c:71:0a:d2:17:3c:71:b9:b0:80:7d:a6:7c:36:
99:d3:78:53:8c:46:07:49:f6:f0:50:e0:3c:07:a6:
6d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:99:27:AC:F7:D2:05:A4:8D:A3:B8:5A:31:E0:5E:DD:30:42:D2
X509v3 Authority Key Identifier:
keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8c:5b:86:c4:e0:33:b4:50:06:6c:9d:cd:be:4a:9f:a6:60:
9a:3b:94:b2:68:87:7d:92:93:33:0f:66:ef:35:4e:25:56:f0:
97:15:aa:93:84:8b:e5:d3:b7:fd:f3:cf:92:74:b1:58:45:fd:
bb:77:b3:3f:bd:a1:3a:b3:5c:74:2f:84:ac:ea:04:7e:e0:fe:
d7:e7:07:78:cd:0c:20:92:20:0b:7b:99:90:2a:01:69:07:c2:
d9:21:fb:53:54:b7:30:bf:cc:f6:3c:1a:04:0d:e3:67:0c:ed:
65:7c:f4:0c:b4:4f:a4:27:12:ff:2e:87:a6:d8:ea:9b:b1:29:
a1:26:8a:7b:cc:2a:54:2e:1c:c6:1c:5e:17:e5:f9:f4:4e:75:
f4:3f:27:dc:97:1e:c2:1b:26:42:f4:1f:33:ac:81:21:d8:00:
a2:58:f7:f0:d0:57:c5:60:81:bd:7f:e3:ea:ac:ce:74:8e:8a:
5f:03:13:c4:9d:a5:df:4d:af:f4:35:f4:56:41:a0:77:8a:8a:
44:bb:e1:44:f1:3c:67:c1:60:8a:67:87:b4:f4:f9:f3:ef:11:
8b:9d:29:6c:9b:2a:2c:c4:17:a5:66:d0:57:ed:e9:ed:ff:ff:
c6:c9:5f:e1:92:0a:32:8d:e5:a2:54:5a:58:4a:47:40:38:4a:
9c:35:c8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:00 2025 by rpki-client