Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
File: QET6VEALxs_DDLgxGoGdW9pCGnI.mft (raw, json)
Hash identifier: q+Vj/toiAbSCYNHRzRVtpIbfLPLg/RxIINkuPMjXCB0=
Subject key identifier: 52:49:7C:12:65:05:56:0D:11:23:39:20:27:2B:65:2C:38:30:64:48
Authority key identifier: 40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
Certificate issuer: /CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Certificate serial: 019A522C6EAC867C66986DA826B172DF3D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 04:00:34 +0000
Manifest this update: Wed 05 Nov 2025 04:00:34 +0000
Manifest next update: Thu 06 Nov 2025 04:00:34 +0000
Files and hashes: 1: QET6VEALxs_DDLgxGoGdW9pCGnI.crl (hash: BqBJvnZgtCvdiH+Ap29/yNpbcHOn4rAcP+no2xBiTkA=)
2: aIPJ4lm4ZyremkDprutiWRNEZ90.roa (hash: Kp0nR22T2kDefAUNT5QJL0kBQwplOU/6USLq0OiGG/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:6e:ac:86:7c:66:98:6d:a8:26:b1:72:df:3d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fa54400bc6cfc30cb8311a819d5bda421a72
Validity
Not Before: Nov 5 04:00:34 2025 GMT
Not After : Nov 6 04:00:34 2025 GMT
Subject: CN=52497c126505560d11233920272b652c38306448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:75:34:42:81:24:75:2b:09:b7:61:98:0f:
e2:87:02:f7:a7:4f:c0:d7:4c:47:1f:5c:06:97:dd:
6a:83:17:8f:e2:f5:d8:17:86:41:23:4a:80:9b:75:
1c:78:08:77:42:05:24:7e:f1:c6:b9:80:56:23:b5:
c6:49:45:e0:9a:2e:f0:37:84:0e:dd:3b:7f:be:f5:
0c:73:9e:da:45:cd:8e:91:56:0f:00:08:35:44:07:
22:b5:31:e2:af:f9:b0:c1:a1:fd:db:4d:23:d7:63:
51:46:bf:45:2a:fc:a4:39:bd:fd:28:b5:56:c0:86:
fe:3f:b9:23:36:77:19:65:1c:2a:ab:95:03:68:3f:
bf:d4:7b:4c:9e:c6:5b:ef:ed:8b:c4:13:bb:76:ef:
53:d0:9c:82:91:e6:16:83:66:eb:b1:08:b1:da:b2:
50:10:c4:f6:00:94:a9:b2:41:49:59:c8:fe:3a:2f:
38:5a:ae:dc:7c:e6:90:a7:78:ff:eb:d0:92:51:9d:
60:60:66:ff:f9:c5:32:1a:ee:0a:ae:67:54:b6:d8:
42:3c:36:9c:45:0e:dd:27:bf:73:ae:2a:9c:e5:d8:
4a:b0:08:1e:b0:2d:d8:af:c2:0d:f6:6f:42:7c:54:
47:7e:c7:a6:38:4f:4d:51:99:ac:94:11:cb:29:29:
7f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:49:7C:12:65:05:56:0D:11:23:39:20:27:2B:65:2C:38:30:64:48
X509v3 Authority Key Identifier:
keyid:40:44:FA:54:40:0B:C6:CF:C3:0C:B8:31:1A:81:9D:5B:DA:42:1A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET6VEALxs_DDLgxGoGdW9pCGnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d5551-0330-43ea-80f1-bb433ba476f2/1/QET6VEALxs_DDLgxGoGdW9pCGnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:26:b1:06:df:cf:1f:68:9e:e8:58:9f:8f:0f:08:be:f2:a4:
b8:26:33:74:c8:d6:68:e8:4b:33:1c:58:57:45:ec:5c:9f:32:
5f:b9:75:3b:1f:cc:83:21:36:54:18:5d:9d:e3:39:19:09:bd:
d9:18:ee:c0:12:99:4c:b2:e6:84:66:1f:97:59:a0:e3:2e:6f:
7b:be:13:85:c7:e9:34:0a:e4:61:46:b9:8e:9e:94:a9:e8:87:
64:f3:bf:fe:b4:a4:22:26:25:a5:1d:c5:27:0d:ff:6e:e4:78:
2d:33:d4:16:62:1f:eb:a3:57:3d:0e:8e:0d:59:cd:59:ca:b0:
e6:4d:9f:7d:9d:3f:a6:a2:cf:0d:3e:e7:6c:f3:a7:ec:ab:cf:
dc:51:75:f1:31:78:9b:f7:56:98:2f:76:50:05:0a:3e:7a:05:
4b:f0:58:f8:37:c8:37:14:aa:b3:7c:6c:77:d3:92:6d:37:d3:
07:a9:76:0a:24:ac:76:95:f2:ba:02:e3:44:bb:62:53:0e:4a:
93:a7:90:54:d7:1d:81:3c:59:7b:25:56:4c:ae:3a:fc:5b:f2:
d1:58:dd:7c:c2:ed:18:cb:66:9e:2e:fa:8b:af:c7:d3:1c:6b:
3a:c7:a2:46:13:ee:59:fa:d2:a3:6a:bf:92:db:29:c9:22:40:
44:d9:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:48 2025 by rpki-client