Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
File: qo_QXutuoFoR1mer7djqEJPScbM.mft (raw, json)
Hash identifier: uzp1SyZUJ4JZbt+8eywvrz4B34urwHwHyvyay9W+gIc=
Subject key identifier: 38:CE:E6:E5:CC:4B:5C:63:53:FA:95:4C:5A:26:03:61:B6:1C:30:74
Authority key identifier: AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
Certificate issuer: /CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Certificate serial: 019A4E4F7A529762345D1D43CA3804A4FA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 10:00:22 +0000
Manifest this update: Tue 04 Nov 2025 10:00:22 +0000
Manifest next update: Wed 05 Nov 2025 10:00:22 +0000
Files and hashes: 1: lfJUEj9OpKtkyjj6xaEeSMukOrA.roa (hash: 9AsF2IZpbVSPw/O9UldkVW9AyHlVo6jZ0snpU1eDlm8=)
2: qo_QXutuoFoR1mer7djqEJPScbM.crl (hash: pfPTl4Jmna/Rsq/xyGpBP2hsw45OzmmpdUaGoWRKcFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:7a:52:97:62:34:5d:1d:43:ca:38:04:a4:fa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8fd05eeb6ea05a11d667abedd8ea1093d271b3
Validity
Not Before: Nov 4 10:00:22 2025 GMT
Not After : Nov 5 10:00:22 2025 GMT
Subject: CN=38cee6e5cc4b5c6353fa954c5a260361b61c3074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:46:2d:77:3c:ba:71:9b:26:93:de:79:7a:ca:
c1:63:34:07:cd:ac:1a:89:ec:d0:7e:de:04:54:be:
b0:ad:da:86:f5:4c:14:ac:8c:4e:ab:03:62:72:3e:
33:37:1f:a6:f4:e9:9a:36:c8:d9:46:f7:de:0d:a1:
31:5a:40:40:19:5c:68:6f:e6:c1:19:81:7a:b3:f1:
43:2c:c4:cb:19:30:83:7b:c4:43:58:fc:16:16:78:
9d:40:75:18:ff:c3:2a:f0:5c:3c:a6:05:d3:2a:ac:
12:32:96:bd:39:63:d0:08:b1:81:13:a7:60:d5:e8:
f4:a5:96:c7:0e:ca:a9:0b:ce:31:09:f4:65:65:57:
c4:9b:17:f2:95:ea:c1:72:74:23:db:07:55:2f:f2:
54:bd:c4:db:5e:66:4e:59:58:0a:51:e4:0d:47:12:
b2:be:80:d0:c7:91:51:5e:e1:27:f5:5a:75:d7:78:
3d:6a:a0:6b:6a:ba:06:27:55:3d:d7:08:c7:bb:c9:
d9:95:11:1b:e9:7d:7c:c0:ec:46:a2:e5:51:f7:ca:
a6:c5:d8:53:3d:e3:ee:a1:75:49:3d:72:1e:56:1e:
02:c4:5d:90:77:fc:e2:cf:70:5c:c1:cd:ae:c3:16:
58:f5:cf:e1:60:8e:81:40:63:e9:50:6b:59:73:fe:
bc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CE:E6:E5:CC:4B:5C:63:53:FA:95:4C:5A:26:03:61:B6:1C:30:74
X509v3 Authority Key Identifier:
keyid:AA:8F:D0:5E:EB:6E:A0:5A:11:D6:67:AB:ED:D8:EA:10:93:D2:71:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qo_QXutuoFoR1mer7djqEJPScbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2bb706-66d4-4fae-93a1-b97c2c4ad439/1/qo_QXutuoFoR1mer7djqEJPScbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:df:af:ba:f7:59:c7:a9:f5:2d:33:cb:1a:e7:a5:75:84:96:
cd:51:4f:ce:ca:f0:55:2f:71:98:23:87:1a:6e:71:3e:fd:43:
6b:91:8f:71:7f:ce:aa:7a:e8:10:79:05:5b:65:70:f8:d7:7f:
8c:ce:a0:0e:b7:9d:86:85:17:b8:70:22:93:59:bb:a6:18:ce:
7d:ab:35:74:f2:bc:09:7d:24:a7:64:fd:a1:9f:44:d3:ef:85:
78:25:3c:e8:f0:5e:da:6e:54:2f:87:e8:c1:eb:64:1e:b4:34:
3b:a3:82:27:8f:4b:c7:23:5b:c0:11:8b:64:8c:59:82:12:65:
d9:81:3e:ce:b6:9d:e5:7d:c3:ac:1b:65:d2:e1:47:ef:e2:19:
f6:32:8c:52:55:ba:ab:48:9c:99:87:18:94:0f:f3:39:77:0f:
64:ac:3f:c2:0f:d4:1f:43:f0:2b:66:a6:fa:3e:d7:a1:a1:6b:
ad:fb:9c:68:97:29:8b:e7:66:0f:c1:54:70:4b:c9:bd:e1:2e:
1e:02:bd:31:5d:63:41:dd:3a:6c:0d:ac:97:24:d0:13:1e:6c:
d9:b7:10:b8:a2:bb:8a:3e:bd:c0:d9:e1:f3:63:90:ba:9e:85:
ad:13:e6:8e:27:ae:5f:39:af:7b:02:d4:94:3f:88:c6:f1:03:
a2:43:e1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:51 2025 by rpki-client