Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: pzw/fZB9JYrZjry4aNDDnDKndWw4tStq0jJQPl1eup8=
Subject key identifier: 15:21:16:BF:7D:F3:9F:A9:93:24:B5:F3:69:84:47:F8:B2:31:90:51
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 019A4EF456C9AD09D577AC7E1D66055CDBD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: eIuvCKiUKqnjxChjtjEAvL7JvnI.roa (hash: wyV3lMaUUP7vVQqM6FlcaWTPKvU8kW+p1xMsgVv6OJA=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: 55hU42GPX9HXNpCcAKnejyMGQRDmAmqAUfzrkP+O4Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:56:c9:ad:09:d5:77:ac:7e:1d:66:05:5c:db:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=152116bf7df39fa99324b5f3698447f8b2319051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:56:c6:b3:48:ff:93:7b:9a:f6:41:bd:29:
69:82:88:89:d8:2c:a3:e7:7f:79:48:14:c2:68:5c:
7e:a9:2b:8a:9d:4f:4a:65:41:17:fc:81:bd:ab:72:
18:ab:6a:34:dc:96:7e:57:a0:bf:74:30:e9:14:7f:
32:4d:77:ba:a8:ce:bd:7d:7d:46:06:8e:27:0b:8a:
90:5e:89:6e:22:44:ee:68:21:1a:db:21:9b:21:df:
67:79:78:1c:e7:7a:0a:90:e4:ae:5a:7c:d9:41:dd:
27:b2:1a:09:db:37:03:75:44:c8:a6:81:ff:3c:7d:
a6:66:cc:de:60:79:d0:e8:ec:1c:e5:24:53:47:5b:
d9:a7:c5:8d:f3:9f:e0:b6:d6:0f:73:b4:c7:4d:4a:
7e:47:f6:f3:0b:c7:4b:63:12:c0:b9:ea:4a:e4:0b:
c5:df:aa:96:e6:f9:10:86:bf:fd:db:54:74:37:cf:
6e:61:33:74:7d:b7:56:62:85:3d:98:67:05:eb:ba:
43:6f:10:32:74:93:4c:a6:70:14:b0:11:41:a0:90:
15:8f:4e:50:62:a7:3b:f7:5a:5c:75:68:10:ae:57:
e5:55:49:a1:c4:15:42:c0:46:c9:e1:d6:95:d8:91:
ab:66:9e:3e:29:30:d9:7a:e9:7f:18:59:f0:c1:80:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:21:16:BF:7D:F3:9F:A9:93:24:B5:F3:69:84:47:F8:B2:31:90:51
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:49:de:08:09:2b:c0:1e:a5:98:ec:5b:fb:15:78:6a:ec:91:
3a:34:d4:1a:e0:5e:c4:1a:fc:5f:ea:36:50:e5:37:87:5c:b2:
0d:14:15:fe:e6:11:80:07:4c:a9:f1:4c:de:b4:38:83:34:e2:
ef:1d:ef:9d:ca:e7:6e:31:9e:6d:1b:3d:1c:9a:6a:3e:1b:40:
b1:9d:3d:2b:3d:71:c9:7b:f0:5d:e9:6f:3c:75:f6:25:c8:cd:
8d:b0:2e:9c:fe:a6:4c:4f:9f:00:65:dc:38:e8:84:41:52:24:
7f:f7:66:2e:50:06:fc:e1:00:95:d0:14:cd:32:ba:73:df:39:
ff:f2:62:9c:12:da:88:b1:dc:16:2e:ec:86:81:50:30:d3:bc:
56:ff:f3:9f:fc:cd:28:98:c5:dd:3b:d1:e4:ea:9a:3c:8d:20:
5e:00:87:57:62:21:09:1f:2f:f3:f6:11:29:5b:c9:7a:e5:a7:
0c:62:ea:ab:f9:bc:26:40:06:b9:db:d9:38:e2:cc:3d:b9:ef:
5f:62:f3:b3:f6:d6:53:cb:69:d4:9a:8c:ef:4e:08:f9:6a:93:
63:9c:9d:52:07:be:6a:c9:28:4b:31:68:a9:49:66:6a:45:54:
a2:bb:ee:8c:bc:81:63:79:0a:f1:b4:48:f8:bd:7d:30:82:fa:
05:86:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:27 2025 by rpki-client