Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: UM86D3+4sTx3eY8ZLWOVAm5CORKox/JwRyadJLSbeX4=
Subject key identifier: FA:9D:0E:16:EC:4D:0A:CB:58:73:61:3E:8E:73:88:56:1F:0E:74:F3
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019A4F62859B6C72AC39D23E4BF4ADC7CC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 13EC
Signing time: Tue 04 Nov 2025 15:00:47 +0000
Manifest this update: Tue 04 Nov 2025 15:00:47 +0000
Manifest next update: Wed 05 Nov 2025 15:00:47 +0000
Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=)
2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=)
3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=)
4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: 9lG+mJ0lue0+81RJS1rIfXc2IwcKRW5zSC0yNL4ICC4=)
5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:85:9b:6c:72:ac:39:d2:3e:4b:f4:ad:c7:cc:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Nov 4 15:00:47 2025 GMT
Not After : Nov 5 15:00:47 2025 GMT
Subject: CN=fa9d0e16ec4d0acb5873613e8e7388561f0e74f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:87:0e:45:94:da:8b:9f:00:38:f4:8e:b7:
92:a4:2f:e4:51:f0:94:1f:d6:d6:87:19:a0:c2:0c:
a1:24:f8:53:be:04:36:20:61:39:e2:6f:ec:c4:36:
72:8d:fa:18:9f:02:bd:63:bf:f8:e4:07:48:b6:f4:
8b:d7:3e:3c:ea:99:89:18:36:12:53:7c:25:95:52:
e6:2c:18:51:ca:04:15:53:1a:e4:56:39:2c:27:19:
3c:53:10:ea:58:0d:6e:41:b8:0c:cc:b9:c9:3c:d3:
35:ac:2f:3a:42:3c:8d:3f:8c:3c:d8:3d:2a:66:02:
84:5c:5a:9f:06:3e:ac:31:2f:2c:da:2c:8f:e1:08:
f1:2d:8a:e1:76:1c:01:7d:58:ab:16:c4:ee:f8:1d:
62:e1:d3:22:24:86:3a:92:ec:20:3b:f9:09:34:8e:
2a:fc:18:4c:71:0c:21:f6:3b:41:7a:a6:18:ff:b1:
ae:80:b1:d8:b6:ec:d5:62:54:d3:8c:83:67:fa:59:
4a:ca:3d:e4:6c:d5:43:29:f5:41:70:0f:62:4f:b6:
f0:86:16:84:76:73:55:8b:cc:5e:57:8e:91:af:53:
dc:f2:4b:62:f9:ca:10:72:a7:1f:a0:25:5e:56:61:
1b:32:84:70:c5:19:3e:20:e1:65:13:0e:2e:16:34:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9D:0E:16:EC:4D:0A:CB:58:73:61:3E:8E:73:88:56:1F:0E:74:F3
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c0:0f:ee:0c:a2:bf:f4:4d:c4:54:84:58:5e:b9:2e:63:c5:
df:a4:35:46:53:b8:09:16:6e:b0:19:8d:c2:b4:b3:ab:8b:ec:
6a:90:29:d0:a0:5b:60:ba:b6:9d:98:0e:53:33:5b:48:79:78:
22:89:34:cb:b0:fc:80:86:12:e6:1d:d6:e9:70:35:b7:92:72:
83:f2:51:6f:45:73:a5:d2:0c:f4:95:96:86:f2:16:48:1a:8f:
65:1e:82:75:50:e0:5d:f2:a6:2f:18:06:d3:ea:c6:b1:57:d5:
23:4b:a0:bb:2a:e8:4a:ab:67:f2:55:25:6c:db:cb:37:32:20:
2d:ed:4c:43:78:00:f0:8a:83:ec:1a:21:a8:66:85:b9:c9:8c:
cb:6c:49:00:8e:b6:a2:8d:dc:54:ca:2e:0d:63:02:f6:ab:e8:
0a:1c:bc:33:45:e8:50:94:3b:a2:90:61:8d:46:96:8e:0f:9e:
37:bf:05:f1:e6:46:7a:9c:9f:f6:2e:50:2a:f3:10:6b:12:f9:
2b:3e:cb:2f:0d:51:9a:fa:a9:b0:1f:41:cb:3a:71:78:a7:f5:
66:69:37:bd:55:c7:4d:20:88:20:41:67:60:51:2d:cf:66:a5:
8c:44:ba:45:96:69:ea:d8:bc:50:07:86:1f:5e:73:e4:43:86:
f4:35:1b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:30 2025 by rpki-client