Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: pgipStKRd1wtXNVOZKD6MXPU/PZVihI2xPiVkKoJYDw=
Subject key identifier: 42:34:37:D6:F9:28:CC:49:BC:B2:97:70:DF:7F:ED:FD:71:78:67:5D
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 019A4F2B4887FE861B3D5A2C84DCCCC5806E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 095E
Signing time: Tue 04 Nov 2025 14:00:27 +0000
Manifest this update: Tue 04 Nov 2025 14:00:27 +0000
Manifest next update: Wed 05 Nov 2025 14:00:27 +0000
Files and hashes: 1: f7H4NvJn5XG9ZEVLvo3rzyryem0.roa (hash: FIvnUTIH/WyzVRn7SNngTErOpdYKzvrkMjSyoAbXEio=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: cUZD+EV6yazOgCsCi1F+a3AItsL1vgTFJS8qyyG1R3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:48:87:fe:86:1b:3d:5a:2c:84:dc:cc:c5:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Nov 4 14:00:27 2025 GMT
Not After : Nov 5 14:00:27 2025 GMT
Subject: CN=423437d6f928cc49bcb29770df7fedfd7178675d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:89:9c:35:dc:78:f0:f4:54:b7:87:0f:51:
c9:e5:f9:07:33:bb:dd:a8:3e:c8:71:94:d4:fc:54:
68:03:73:ed:7d:ae:32:9f:f4:6b:87:4f:a0:ee:28:
2d:e0:95:af:22:4a:e4:fe:22:59:58:55:66:68:d8:
48:7d:e6:18:8d:a7:3f:c5:47:51:39:d2:af:e7:c8:
aa:5f:53:42:02:54:ff:8b:fa:c4:54:77:a8:0f:93:
e6:71:05:a1:9a:0c:9d:ad:ce:9e:bc:9e:ef:67:27:
bf:49:97:8a:45:af:9d:98:e3:1d:75:e4:d7:86:89:
3c:f2:15:3d:9c:a1:1d:73:58:66:b0:30:99:e9:6c:
e4:87:39:7b:93:9d:64:94:4e:d4:88:25:8a:57:34:
33:be:6b:5f:0b:4d:f8:14:43:f0:fb:b2:ef:db:39:
e5:00:ce:bc:d8:97:63:93:62:dd:c7:d1:1b:47:f3:
ec:65:57:eb:f4:d8:a4:45:48:6a:99:7c:4f:3c:6a:
a0:d5:47:94:10:c5:81:a5:63:b3:0e:2e:da:aa:4a:
69:8d:50:8a:9e:9b:44:8f:d7:20:07:4e:8c:04:dc:
5c:1a:40:4c:07:fe:77:cb:24:e9:13:c7:d7:e5:db:
b8:e2:52:33:54:f0:0c:bc:f4:70:25:a0:81:7a:13:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:34:37:D6:F9:28:CC:49:BC:B2:97:70:DF:7F:ED:FD:71:78:67:5D
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:aa:99:1e:15:47:63:b9:75:91:f0:f6:0f:b0:05:98:a9:90:
f5:3f:b2:90:88:46:95:14:2d:48:53:3d:22:7d:90:ad:1d:8c:
c3:8e:71:4e:e7:6d:10:a4:9c:45:37:4a:bb:cd:78:ca:11:87:
52:9c:0c:3f:e3:1b:44:5f:5f:a3:de:ce:1f:38:c8:fa:c8:30:
4f:5c:f9:89:33:3c:e7:80:92:51:27:6b:db:4d:6d:a0:83:85:
89:1d:7d:2c:92:f5:85:8c:1a:76:3a:47:b9:23:f0:3a:61:9f:
e3:8b:e5:43:78:46:06:23:00:f0:73:63:c4:0c:63:8a:97:2c:
3a:3e:0a:b6:18:cb:16:4d:d7:22:b7:7b:56:7f:31:ba:d3:1e:
42:dd:49:e1:70:8f:5f:5f:d0:df:f5:a0:83:73:8c:5f:2a:ee:
c9:ca:ef:98:a1:d9:12:0d:ba:ee:1e:5c:af:07:28:11:92:4f:
7c:0d:9e:3c:5d:20:12:be:00:64:a1:45:8c:f8:51:a8:2f:97:
5d:43:9f:9d:a3:0d:51:11:78:ce:e4:e6:8d:8b:0a:bf:8a:ce:
53:3e:f9:5c:2c:9b:b0:61:90:e8:05:fb:82:8c:5f:cf:ba:5a:
d9:c1:e2:95:a8:63:56:3b:78:0a:96:fc:e9:11:1b:31:92:15:
13:ed:69:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:23 2025 by rpki-client