Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: 87Txp5fEXAEoTy2j66p8/6jvabSNaun3J4UlI6erlPA=
Subject key identifier: 2B:AC:1B:D3:E1:B1:48:07:AD:0D:82:7F:62:79:E6:58:3A:26:FA:C9
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 019A52D2D06E2FBDB84A39E7C61807CDA74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 12D8
Signing time: Wed 05 Nov 2025 07:02:18 +0000
Manifest this update: Wed 05 Nov 2025 07:02:18 +0000
Manifest next update: Thu 06 Nov 2025 07:02:18 +0000
Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: 3O0a0AaG0VQeR+i98fyiSzvsLje2gCpMbJvn2rSDbZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:d0:6e:2f:bd:b8:4a:39:e7:c6:18:07:cd:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Nov 5 07:02:18 2025 GMT
Not After : Nov 6 07:02:18 2025 GMT
Subject: CN=2bac1bd3e1b14807ad0d827f6279e6583a26fac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:52:8f:e8:7a:0b:3a:3b:78:ee:ef:77:f5:
f7:c2:22:2b:60:36:c1:87:fb:0c:25:e8:84:49:db:
04:8a:17:2a:c4:76:a3:55:ad:1c:b1:91:cb:a5:67:
68:b7:71:52:f0:60:3a:7c:00:86:41:7c:23:d3:06:
71:f1:bd:34:df:61:3c:c9:33:83:f1:70:e4:05:a0:
41:e6:ee:58:60:80:58:f8:7b:b9:bf:20:92:c6:bd:
2d:10:ca:0e:b3:62:be:f8:af:2b:4e:07:8b:c1:32:
f6:3d:57:a4:6a:56:09:c8:8a:29:d9:f3:a2:89:9b:
c7:80:d1:f8:b2:9c:ee:61:3f:7b:3a:52:83:bb:82:
b7:d3:31:75:ef:e7:6d:74:37:7d:71:ce:95:e1:fd:
99:90:80:bd:e6:da:2b:c6:ac:c0:9c:03:a9:8d:cb:
48:cc:9d:36:78:0d:13:e4:8b:50:b2:08:cb:14:0c:
7f:0b:5d:98:36:b8:17:3c:bd:8d:0f:da:00:a0:f3:
10:9c:dc:44:6b:ca:6e:41:2e:e0:4c:68:3f:d5:c8:
59:78:e3:a3:0b:f8:09:dd:0a:45:db:ab:56:1e:d9:
64:2b:01:b2:19:15:c7:ce:3d:e9:d9:2f:24:c2:da:
52:ce:14:1d:7c:3f:69:b6:79:2d:e3:32:e5:58:dd:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AC:1B:D3:E1:B1:48:07:AD:0D:82:7F:62:79:E6:58:3A:26:FA:C9
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:82:61:c0:77:d6:18:2d:3d:14:c4:ca:40:10:76:c4:19:a6:
c4:d1:33:99:38:60:e9:01:33:ec:1f:90:d9:02:cd:02:d9:94:
28:e7:68:eb:f4:d0:d3:51:b1:3a:71:0c:10:c5:10:97:72:4a:
fa:38:df:81:94:94:9b:50:49:3b:e2:43:86:5c:22:18:5c:79:
db:d5:dc:33:46:a0:0e:25:c8:d7:3c:e8:6d:28:88:3d:b5:47:
3c:10:89:ec:98:88:0b:99:66:e4:ad:25:92:a4:0a:09:52:d9:
34:85:db:dd:f0:17:5b:5a:50:cf:51:9b:20:34:85:85:46:cb:
5e:32:f3:32:48:19:bd:b3:e7:54:78:cd:30:b3:60:77:9e:2f:
47:96:90:78:27:b5:3e:de:23:61:19:da:c2:d7:f3:44:e6:3a:
be:2f:52:3e:e1:5e:bb:71:b4:54:7e:32:87:0e:cd:79:63:14:
99:ba:e6:c5:e1:51:7d:95:32:df:29:0e:04:39:4b:19:ff:4a:
f4:18:64:51:6c:6e:97:53:60:a0:0c:d3:5f:ed:11:be:a1:51:
55:af:43:60:5a:47:8a:d3:c1:d9:8e:07:45:1e:d8:3e:54:3f:
e6:0b:dc:de:5e:29:57:fc:12:3f:94:f3:89:d9:01:d8:ae:78:
ca:ae:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:40 2025 by rpki-client