Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
File: QXYebRbr8X5XHGv3fsBr33q2ivg.mft (raw, json)
Hash identifier: QQbML8Bz7oiGmuS4mYrQ7XDQh8GRHrm9KvqlhmaACNw=
Subject key identifier: AA:E8:B5:51:AE:7C:9B:89:D3:DA:17:FB:B5:33:42:FC:A3:6B:44:A9
Authority key identifier: 41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
Certificate issuer: /CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Certificate serial: 019A4EF44CF719220D3D2430ADA2025C66CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:24 +0000
Manifest this update: Tue 04 Nov 2025 13:00:24 +0000
Manifest next update: Wed 05 Nov 2025 13:00:24 +0000
Files and hashes: 1: QXYebRbr8X5XHGv3fsBr33q2ivg.crl (hash: /JlHKib278AA6rI4sn4I2/QY3R7t/tPwl1Yo5V+f8wo=)
2: kDp8o5lwoauyIIWuMVQKzWrOZfg.roa (hash: k1SzOsCV3pSTvUNttrz3FSSmM4yVZTra60XB+dEnFds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:4c:f7:19:22:0d:3d:24:30:ad:a2:02:5c:66:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41761e6d16ebf17e571c6bf77ec06bdf7ab68af8
Validity
Not Before: Nov 4 13:00:24 2025 GMT
Not After : Nov 5 13:00:24 2025 GMT
Subject: CN=aae8b551ae7c9b89d3da17fbb53342fca36b44a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ec:0e:a1:91:f8:15:18:2a:4a:b7:a8:27:18:
cb:74:f4:5c:8d:88:33:77:43:35:63:3f:5e:f3:e0:
1c:ab:01:44:9c:af:bc:b4:27:7e:5b:15:1c:c9:ac:
fd:ac:55:bd:0f:2b:74:89:fc:a9:6a:91:6d:41:7a:
ae:b2:09:f3:9e:0f:82:e3:aa:9f:09:f1:f2:fa:8d:
18:6d:75:d2:fe:1f:79:b5:6c:2f:3e:97:08:9c:fd:
57:58:55:aa:99:5f:cb:dd:66:93:03:3d:c2:5e:07:
79:69:90:8f:71:b8:d5:14:08:02:de:aa:35:00:f4:
ed:c2:11:56:eb:91:96:ca:fe:a4:ce:24:b3:81:5b:
b2:eb:26:b8:55:70:c8:de:ec:45:cb:72:31:3c:87:
ca:ff:01:ef:d2:03:1e:4c:cc:27:5f:11:0c:d2:25:
42:4e:82:2d:d5:76:72:2a:e0:24:e9:d5:50:34:41:
f6:3d:c1:05:e5:50:d6:ff:39:65:9a:9d:32:e0:32:
49:7d:d3:e5:9b:3c:22:20:37:07:38:93:bb:4e:32:
49:86:d2:da:61:b2:9e:f4:8e:32:cb:5b:24:38:41:
a2:8f:10:5d:54:5d:9e:55:fe:3b:cc:35:f6:9c:a2:
fd:dc:a0:ba:2a:20:de:b8:a1:a8:a9:3d:af:41:87:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:B5:51:AE:7C:9B:89:D3:DA:17:FB:B5:33:42:FC:A3:6B:44:A9
X509v3 Authority Key Identifier:
keyid:41:76:1E:6D:16:EB:F1:7E:57:1C:6B:F7:7E:C0:6B:DF:7A:B6:8A:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXYebRbr8X5XHGv3fsBr33q2ivg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5eb289-6270-4db2-acde-a879df46eb99/1/QXYebRbr8X5XHGv3fsBr33q2ivg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:33:b9:75:63:41:cb:42:a2:ac:a9:eb:f1:59:cd:e6:48:1d:
44:8f:28:74:1e:a5:bf:e8:6b:26:7f:be:80:01:08:54:ed:da:
9d:d5:f2:59:df:97:16:2c:58:7b:8c:20:09:c8:94:76:84:7a:
25:19:74:e0:ca:79:7c:fb:d7:cc:b0:8b:ac:c5:2e:2b:b5:78:
bc:93:87:f7:8a:45:06:63:39:15:f4:11:bc:4d:47:01:f4:ad:
1f:c1:6c:28:cb:a4:72:4b:e8:50:4c:be:ec:c4:de:3c:67:6a:
30:ec:81:39:e1:3d:73:f1:84:4e:33:b6:f4:8b:74:62:e7:15:
e8:05:62:9a:c4:60:af:ef:5c:7c:bd:61:57:6c:37:52:5d:5d:
2c:8b:d1:cc:f0:27:f3:17:5a:8a:c2:7a:b9:2b:ba:60:b4:72:
b4:78:1c:34:ee:91:84:25:26:f0:00:89:74:af:21:c6:74:d9:
00:df:79:40:21:15:44:8d:bb:b4:39:78:17:e1:25:cc:23:a3:
b5:58:c0:43:8b:b5:8d:49:86:53:78:fa:89:ef:74:29:76:ea:
c0:49:87:8e:4d:2b:01:77:01:77:f6:9a:cd:63:34:9f:7d:4c:
a9:a2:fa:18:81:7a:ce:7d:9d:46:f0:33:0b:61:7b:af:0a:dd:
0f:88:19:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Ez3GSINPSQwraICXGbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNzYxZTZkMTZlYmYxN2U1NzFjNmJmNzdlYzA2YmRmN2Fi
NjhhZjgwHhcNMjUxMTA0MTMwMDI0WhcNMjUxMTA1MTMwMDI0WjAzMTEwLwYDVQQD
EyhhYWU4YjU1MWFlN2M5Yjg5ZDNkYTE3ZmJiNTMzNDJmY2EzNmI0NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruwOoZH4FRgqSreoJxjLdPRcjYgz
d0M1Yz9e8+AcqwFEnK+8tCd+WxUcyaz9rFW9Dyt0ifypapFtQXqusgnzng+C46qf
CfHy+o0YbXXS/h95tWwvPpcInP1XWFWqmV/L3WaTAz3CXgd5aZCPcbjVFAgC3qo1
APTtwhFW65GWyv6kziSzgVuy6ya4VXDI3uxFy3IxPIfK/wHv0gMeTMwnXxEM0iVC
ToIt1XZyKuAk6dVQNEH2PcEF5VDW/zllmp0y4DJJfdPlmzwiIDcHOJO7TjJJhtLa
YbKe9I4yy1skOEGijxBdVF2eVf47zDX2nKL93KC6KiDeuKGoqT2vQYfnMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrotVGufJuJ09oX+7UzQvyja0SpMB8GA1UdIwQY
MBaAFEF2Hm0W6/F+Vxxr937Aa996tor4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUt
YTg3OWRmNDZlYjk5LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni81ZWIyODktNjI3MC00ZGIyLWFjZGUtYTg3OWRmNDZlYjk5
LzEvUVhZZWJSYnI4WDVYSEd2M2ZzQnIzM3EyaXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezO5dWNB
y0KirKnr8VnN5kgdRI8odB6lv+hrJn++gAEIVO3andXyWd+XFixYe4wgCciUdoR6
JRl04Mp5fPvXzLCLrMUuK7V4vJOH94pFBmM5FfQRvE1HAfStH8FsKMukckvoUEy+
7MTePGdqMOyBOeE9c/GETjO29It0YucV6AVimsRgr+9cfL1hV2w3Ul1dLIvRzPAn
8xdaisJ6uSu6YLRytHgcNO6RhCUm8ACJdK8hxnTZAN95QCEVRI27tDl4F+ElzCOj
tVjAQ4u1jUmGU3j6ie90KXbqwEmHjk0rAXcBd/aazWM0n31MqaL6GIF6zn2dRvAz
C2F7rwrdD4gZ4w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:55 2025 by rpki-client