Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: JQbeD5Oi5qTzz63RqTOer6qgHhuJLsoHf0OsJoMrGHw=
Subject key identifier: B8:CD:B6:85:3F:34:B9:7C:E0:C0:B8:CB:A7:0D:12:CE:22:58:E4:A4
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019A4E4FBC5FCCE6655B18634A468C8E9ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 16E5
Signing time: Tue 04 Nov 2025 10:00:39 +0000
Manifest this update: Tue 04 Nov 2025 10:00:39 +0000
Manifest next update: Wed 05 Nov 2025 10:00:39 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: zmsOESnz3sFzNtSgbJ4VY9MDqtqdJ9/EoUcdzEw/oHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:bc:5f:cc:e6:65:5b:18:63:4a:46:8c:8e:9e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Nov 4 10:00:39 2025 GMT
Not After : Nov 5 10:00:39 2025 GMT
Subject: CN=b8cdb6853f34b97ce0c0b8cba70d12ce2258e4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:19:4e:8c:e6:3f:83:0f:2d:ce:c7:30:1e:73:
04:55:2c:78:55:a4:ae:aa:6d:a1:fa:1c:2b:73:68:
8a:4a:67:45:03:25:78:c5:4b:eb:e1:7e:94:2b:ff:
df:78:0c:7e:d6:69:82:5b:1f:94:39:c5:dc:d3:0f:
e7:59:58:1e:ae:28:f4:0b:ff:af:e8:cb:30:a8:ba:
64:31:33:8a:39:cb:4f:b5:1b:80:2d:42:15:21:c9:
fb:72:67:91:0d:3c:09:0b:9c:47:cb:81:67:e3:bf:
69:d3:d2:88:f1:73:ac:0e:a4:34:22:28:39:c9:e4:
85:4c:69:ae:69:47:33:89:1d:3e:20:db:c0:0e:7e:
ec:dc:4a:a6:bc:9f:c7:7e:32:12:c2:e1:6d:c5:50:
8f:53:62:47:f7:67:10:de:94:4f:4b:80:de:e8:5e:
c3:f0:25:6e:36:fc:d3:97:2e:54:c3:e4:d2:72:9e:
da:0d:2f:d7:5a:c8:c4:e3:3d:13:a8:53:79:83:93:
34:64:58:6e:79:4b:50:a3:85:09:7f:db:a9:1e:d8:
97:43:6b:75:13:6d:7e:98:87:3a:f2:23:ac:80:3d:
3d:18:60:2e:0f:ec:a5:11:8a:bc:f1:60:a7:60:4e:
03:cc:90:f7:ad:78:7e:24:04:4a:f3:a8:c7:fd:19:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CD:B6:85:3F:34:B9:7C:E0:C0:B8:CB:A7:0D:12:CE:22:58:E4:A4
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:78:06:1b:83:dd:af:bc:6b:bf:bc:cd:5a:9a:6f:cd:27:1c:
3e:1a:fd:8d:b1:78:71:21:e7:08:90:73:47:2b:28:e4:bd:a7:
37:69:e0:d8:12:7c:29:1a:f8:16:6c:5b:4c:6e:14:72:38:eb:
37:2f:37:85:f0:63:63:65:d6:6c:80:29:f6:f5:d6:88:d4:fb:
6d:ee:9a:5d:70:9f:62:57:e1:c2:15:c7:82:9b:57:87:b7:23:
b7:07:19:67:7e:15:37:3a:47:4b:20:90:6c:64:c6:77:4f:50:
b0:d7:75:33:a2:ba:40:9c:17:45:bd:be:ff:e0:e5:62:e8:8e:
0b:3d:94:85:d3:7e:43:5c:63:cb:b0:8b:77:a5:a5:1f:66:89:
75:d7:8b:98:10:85:45:ea:8b:0e:41:2e:3f:06:6c:11:a7:4c:
cb:af:fa:02:72:3a:5d:01:94:65:72:9c:5e:b7:9f:25:c3:31:
48:38:a4:b5:7d:1d:16:d8:b5:4c:54:22:7f:b6:4e:43:17:27:
14:1b:53:9a:00:30:c9:6e:db:58:39:69:5c:be:79:19:7f:fa:
70:eb:e7:5b:d1:0d:47:7b:cd:ac:a6:2e:f1:36:62:2f:a2:cc:
c8:45:43:45:41:3c:d2:f2:83:dc:5b:88:70:69:1b:ff:dc:d8:
7e:74:a6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:24 2025 by rpki-client