Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: CWcTKcsqBWs7/eL+pGijNDiTvall6Lw4y/Zmnq6brX8=
Subject key identifier: 6C:73:0B:AF:CD:73:0C:BC:F5:55:C7:DD:9A:1F:AE:AA:20:0B:B8:C5
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 019A4EF52ECB36B9DFA041984B3D3E26CB4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:01:22 +0000
Manifest this update: Tue 04 Nov 2025 13:01:22 +0000
Manifest next update: Wed 05 Nov 2025 13:01:22 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: rgDpz7IIvWExFRy48uy/AQjEf/U51Iz3LQEeRu1MzMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2e:cb:36:b9:df:a0:41:98:4b:3d:3e:26:cb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Nov 4 13:01:22 2025 GMT
Not After : Nov 5 13:01:22 2025 GMT
Subject: CN=6c730bafcd730cbcf555c7dd9a1faeaa200bb8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:7f:b5:5b:ae:e1:58:67:f5:00:4d:4b:b3:
c3:7a:67:a7:3e:0e:8a:ac:13:7d:51:59:d1:91:13:
cc:fc:a5:4b:5b:1e:43:07:c7:71:4c:a0:e6:72:64:
50:58:6a:18:65:2b:3c:b0:06:76:e9:69:80:81:b8:
c0:fd:e5:44:04:18:18:9b:27:f3:94:dd:a3:7f:5d:
4a:30:e9:14:98:95:c7:f8:eb:e0:be:eb:55:34:46:
84:18:80:77:fa:d5:38:fb:2b:1e:67:87:f9:65:21:
19:e0:a8:5f:34:e6:1c:93:b2:af:28:d6:fa:29:8d:
b6:f1:c4:c1:96:60:91:04:db:a3:78:01:b9:f6:d5:
4a:a0:2c:7b:3c:1d:8e:0d:e6:0b:d9:c2:56:1f:c8:
58:59:93:b4:d8:99:ca:be:db:94:0f:3f:6d:8b:99:
63:fe:a2:78:5e:b8:27:ed:b4:d7:56:e0:12:17:51:
da:bc:1c:17:bc:08:73:f0:ad:8a:22:eb:cf:cd:c0:
7f:7d:d4:f9:03:46:86:3e:4c:ef:19:72:39:60:00:
a5:35:ff:30:78:83:bc:88:f2:b9:49:49:95:d0:c9:
f9:fe:28:b0:92:14:ac:4d:7f:9b:c8:9d:eb:1d:11:
22:f7:19:0d:a2:b7:63:93:12:ff:e2:a5:f5:07:18:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:0B:AF:CD:73:0C:BC:F5:55:C7:DD:9A:1F:AE:AA:20:0B:B8:C5
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1f:3e:b0:a0:65:36:14:bf:22:7d:9a:a4:dd:e9:20:17:f7:
67:6c:1d:ef:fc:52:b4:4e:c8:8d:de:5c:4e:e0:db:24:cf:22:
b7:55:25:b5:87:be:77:33:5d:51:f1:1a:c9:9c:2a:09:65:6a:
a0:f3:f5:68:82:3a:bd:d6:d7:4d:63:af:a0:df:ac:dd:70:f2:
c7:06:76:51:54:8d:da:5a:a8:62:23:e5:0a:c3:ee:5b:d5:8e:
52:1b:4f:7b:75:b7:eb:89:b5:67:07:0d:3a:78:46:95:f6:99:
08:6d:27:41:91:1a:17:67:70:a1:2e:a0:0f:2a:ca:d1:61:88:
53:e2:ca:d4:74:15:ab:ab:1e:68:81:29:fd:14:16:fc:68:67:
e8:76:02:26:bd:f7:4c:77:3b:ab:6b:d4:81:38:19:9c:90:fc:
6b:5b:3f:81:c3:2b:28:05:81:95:90:51:2a:3b:c1:6b:b1:e4:
a8:cc:cb:10:b4:53:5d:8e:a5:bf:50:1c:ba:eb:74:97:55:f6:
01:7c:38:3e:83:5a:59:a5:a2:17:c9:7d:c6:1f:f2:be:f3:45:
95:16:6b:63:d3:46:40:71:b9:2d:ce:2c:76:67:77:f4:27:06:
0b:4f:03:0e:3a:5c:eb:2e:a4:fa:36:b5:9b:85:3a:69:6c:de:
5f:72:ce:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9S7LNrnfoEGYSz0+JstPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzVmOTA3ZWM3ZGJmOWM2NWI4MTVhYTNkNzIwMmI2ZGZh
ZTMxNDgwHhcNMjUxMTA0MTMwMTIyWhcNMjUxMTA1MTMwMTIyWjAzMTEwLwYDVQQD
Eyg2YzczMGJhZmNkNzMwY2JjZjU1NWM3ZGQ5YTFmYWVhYTIwMGJiOGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqZ/tVuu4Vhn9QBNS7PDemenPg6K
rBN9UVnRkRPM/KVLWx5DB8dxTKDmcmRQWGoYZSs8sAZ26WmAgbjA/eVEBBgYmyfz
lN2jf11KMOkUmJXH+OvgvutVNEaEGIB3+tU4+yseZ4f5ZSEZ4KhfNOYck7KvKNb6
KY228cTBlmCRBNujeAG59tVKoCx7PB2ODeYL2cJWH8hYWZO02JnKvtuUDz9ti5lj
/qJ4Xrgn7bTXVuASF1HavBwXvAhz8K2KIuvPzcB/fdT5A0aGPkzvGXI5YAClNf8w
eIO8iPK5SUmV0Mn5/iiwkhSsTX+byJ3rHREi9xkNordjkxL/4qX1BxhXlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxzC6/Ncwy89VXH3ZofrqogC7jFMB8GA1UdIwQY
MBaAFKo1+Qfsfb+cZbgVqj1yArbfrjFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMt
YjZmMWNmYWE2OTg1LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iMWM1MGUtYWYyNy00YTYyLWFlMjMtYjZmMWNmYWE2OTg1
LzEvcWpYNUIteDl2NXhsdUJXcVBYSUN0dC11TVVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhh8+sKBl
NhS/In2apN3pIBf3Z2wd7/xStE7Ijd5cTuDbJM8it1UltYe+dzNdUfEayZwqCWVq
oPP1aII6vdbXTWOvoN+s3XDyxwZ2UVSN2lqoYiPlCsPuW9WOUhtPe3W364m1ZwcN
OnhGlfaZCG0nQZEaF2dwoS6gDyrK0WGIU+LK1HQVq6seaIEp/RQW/Ghn6HYCJr33
THc7q2vUgTgZnJD8a1s/gcMrKAWBlZBRKjvBa7HkqMzLELRTXY6lv1Acuut0l1X2
AXw4PoNaWaWiF8l9xh/yvvNFlRZrY9NGQHG5Lc4sdmd39CcGC08DDjpc6y6k+ja1
m4U6aWzeX3LOrw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:38 2025 by rpki-client