Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: +FqFeamTNkP/Vp5XnKlLkt27lBRFpF4FsDtWTTfSmRE=
Subject key identifier: 1C:0E:EE:89:AD:10:A0:F0:8F:31:37:3A:56:68:9B:67:B1:95:3D:FF
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 019A54BF9DF53125CDEAA687FE77A48DBF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 0D62
Signing time: Wed 05 Nov 2025 16:00:35 +0000
Manifest this update: Wed 05 Nov 2025 16:00:35 +0000
Manifest next update: Thu 06 Nov 2025 16:00:35 +0000
Files and hashes: 1: 2K6387yyM5gxakFjGUcn1KUMQ58.roa (hash: KwEJI06hkpRX+nj9eXMKKI3vC9xa4ElKQ9FhYTbVyds=)
2: VNd90Fl0tWahsmhhQvhoAAT8f5U.roa (hash: U+zi8hpH0S9lksZLxaBLhZX/Hg0tdOzYwVmTSHbyaHY=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: khKamB99vP1YvQPul9PTD1MsZRPY98Fp8xAiByMfHPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:9d:f5:31:25:cd:ea:a6:87:fe:77:a4:8d:bf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Nov 5 16:00:35 2025 GMT
Not After : Nov 6 16:00:35 2025 GMT
Subject: CN=1c0eee89ad10a0f08f31373a56689b67b1953dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f7:4e:58:86:50:32:45:2d:aa:1b:55:40:d3:
84:cc:14:8f:d7:31:dc:dc:9c:20:e1:20:9d:f6:a0:
7c:c6:41:5b:e0:0a:d4:ba:88:83:e6:f4:9b:94:a0:
59:bc:1b:55:48:d4:68:1e:58:96:8f:0e:d6:5a:2e:
05:b6:6a:3a:b0:9e:7b:b5:ce:34:10:1e:95:dc:35:
c5:5b:5c:06:93:b2:72:3a:c7:3e:f7:5f:5b:03:02:
e9:2d:5c:a7:f3:36:27:c7:d4:9d:5f:26:8d:a5:e7:
f4:e0:e0:11:a6:d6:61:a6:31:43:a0:60:64:ba:61:
d0:8e:1c:db:5e:33:de:66:0e:ff:42:f0:64:f4:0f:
27:44:d5:e0:5d:20:51:c4:c8:d1:3c:a1:94:21:97:
92:28:70:d9:82:6a:0b:40:e4:b0:ba:00:25:7d:d9:
b3:4f:93:38:6c:cb:7d:0a:c1:bd:26:97:74:9a:31:
a4:12:e8:29:ca:47:9d:0d:6c:34:76:38:7f:25:47:
45:5d:32:c4:9b:44:53:f7:b7:d8:fd:13:3b:36:c5:
4f:1a:ea:4f:41:4e:46:f0:26:0d:1d:05:66:56:02:
8f:96:cb:be:31:18:b4:c4:04:6c:b4:29:5e:ff:5d:
db:0e:61:58:e7:d9:21:35:c0:b6:37:64:4c:d5:65:
9c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0E:EE:89:AD:10:A0:F0:8F:31:37:3A:56:68:9B:67:B1:95:3D:FF
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:eb:b4:e3:cc:e3:18:b5:85:fa:20:1f:4f:51:fd:be:cf:e2:
03:14:88:0f:6b:6c:8a:a6:a4:01:31:d7:fc:fd:54:25:1d:5e:
ba:4d:94:2f:42:55:33:ce:39:81:99:ed:ec:51:3d:6f:d1:60:
92:59:7e:c8:91:93:a4:09:69:ce:a9:b1:05:2b:2b:09:28:56:
35:fe:05:f8:12:32:44:21:c1:7d:fa:9a:c9:a9:87:51:5d:1b:
76:f2:fb:65:68:df:bf:23:4a:90:62:fb:c9:af:c3:ab:05:01:
5d:5e:b9:d9:fd:71:a4:31:6d:e1:5c:c2:23:06:ed:2b:63:7d:
31:cf:20:fc:35:b5:c9:1d:29:5f:e5:d2:7a:2d:11:ba:2b:07:
d6:7b:7c:30:18:22:0b:d0:f9:0b:04:57:03:6c:3f:ee:dc:a4:
8e:5e:87:98:14:99:58:e1:7d:20:ca:3c:fd:42:0e:85:0d:5d:
7f:bc:f1:cd:05:aa:4e:3d:20:05:25:35:c1:be:f7:bc:16:6c:
1a:38:a0:ed:fc:2a:06:ff:19:f1:27:89:21:be:b0:d3:85:ad:
c8:fb:e8:50:7e:18:e0:5d:5e:7c:bc:cc:d2:c6:aa:20:6b:07:
f8:8b:65:b6:13:da:97:6c:13:4f:df:b1:83:3e:4f:62:05:c2:
fd:60:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:56 2025 by rpki-client