Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: OleweXO6j4/wa+qTa4jI9KcEc5o02p78rF+1QyUFB/M=
Subject key identifier: 15:6B:F3:08:B6:E9:03:A8:27:46:E4:83:41:0E:19:2C:CC:08:75:C3
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 019A52D1143697C8F01F4B193DE649E872EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 07:00:25 +0000
Manifest this update: Wed 05 Nov 2025 07:00:25 +0000
Manifest next update: Thu 06 Nov 2025 07:00:25 +0000
Files and hashes: 1: 6fJ4zkF0Wp752Gh82PiGV0cycFs.roa (hash: zmN/ZdPf9fmMKW0I3LZoD4w3jrap740/mP6rHx2Dkzc=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: ETbNGYPMYV1XJb1l4bwVKSvL6uhkNyNvhDbVEEqw1lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:14:36:97:c8:f0:1f:4b:19:3d:e6:49:e8:72:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Nov 5 07:00:25 2025 GMT
Not After : Nov 6 07:00:25 2025 GMT
Subject: CN=156bf308b6e903a82746e483410e192ccc0875c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:99:f2:19:94:8e:9a:3a:eb:b2:2a:53:49:
8b:02:51:4e:d4:b9:8e:47:9a:ff:22:e2:34:86:2f:
4f:bc:7f:7d:a3:98:4c:7f:a8:2a:b8:71:d6:df:2a:
b9:c9:9e:85:bb:42:26:63:fb:0d:a6:a7:76:45:c6:
c7:cd:fc:e2:c1:a0:9a:27:c4:e3:b6:50:4f:ca:17:
bc:02:d1:a1:39:17:0e:85:fa:87:1b:82:d7:9c:55:
47:a1:31:b0:65:f0:5d:7f:ab:d3:6b:b3:23:e2:5a:
52:24:db:03:68:e0:24:fd:fe:72:ae:b6:65:d9:ab:
b9:d3:b6:ac:39:58:b6:ee:a9:8f:c0:03:e2:21:ec:
46:8c:e1:95:63:e6:5f:bd:87:48:d4:8c:f8:e8:c0:
08:43:b6:e8:9b:16:03:85:d0:6d:69:d4:36:5e:af:
d2:0c:fe:2d:6f:a1:e1:12:42:b0:6f:33:bd:c6:6a:
78:53:2d:ba:5b:70:9d:33:a4:c7:d1:50:b6:c7:f7:
fb:02:09:14:4d:96:80:fe:53:6c:dc:12:7e:2c:c1:
bb:f4:b4:98:15:01:4b:1d:6e:b6:c0:f9:55:e1:6c:
5a:39:e3:40:fb:06:78:5d:97:2f:c3:2a:36:4d:c1:
28:4b:e2:c0:a6:c9:ac:d9:ec:f6:89:67:dd:f3:ce:
33:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:F3:08:B6:E9:03:A8:27:46:E4:83:41:0E:19:2C:CC:08:75:C3
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ed:55:bb:e7:66:fb:a1:76:44:87:b5:d8:0c:4b:f6:34:e9:
46:77:b5:77:a1:27:c3:89:61:53:65:12:ce:de:c9:94:40:d4:
5e:ef:ed:ef:12:72:76:8f:5c:1c:9d:18:77:ca:d3:8b:e6:6a:
08:5a:67:6b:c2:81:4e:8a:45:f5:cb:02:9f:33:cb:aa:5c:d1:
bc:f1:47:ef:d3:ea:7b:16:fb:e0:3b:11:ab:dd:81:97:6d:6e:
d1:e3:90:04:9a:d7:60:a7:7b:29:67:28:c4:3e:be:b4:65:6a:
35:b0:74:f6:ba:30:21:8f:4b:57:46:80:20:94:c1:49:93:10:
51:a2:aa:9f:6d:aa:de:de:a0:3f:5c:ee:41:a3:c1:88:fa:12:
0f:16:3e:dd:5d:75:d1:18:c1:5a:4e:ae:3e:c4:a6:4d:47:f3:
cc:29:5c:da:78:42:ea:5e:24:80:c4:75:36:3a:57:17:87:dd:
f7:a7:4f:42:af:aa:f1:ac:36:80:2c:5c:5b:7d:89:80:0e:fb:
56:80:3e:a1:15:cc:66:1d:2d:ab:a9:93:1c:dd:96:2d:7d:8e:
c9:cd:9f:7d:15:86:63:59:69:d8:ce:4b:cb:fd:e0:e2:10:b4:
46:ad:86:02:1a:f4:80:73:50:f1:12:a7:0c:c4:e3:89:2b:73:
60:77:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:12:52 2025 by rpki-client