Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: jkG+0RSkLkMmNqYjK6WwY0OZ3BwMNzscvxka7FqR8hE=
Subject key identifier: 6B:13:4C:53:FD:E0:43:4E:91:E0:F9:22:10:4D:13:AA:31:A3:47:86
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 0199C5333E20D69311CBD46DCF9211212766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 1666
Signing time: Wed 08 Oct 2025 19:01:33 +0000
Manifest this update: Wed 08 Oct 2025 19:01:33 +0000
Manifest next update: Thu 09 Oct 2025 19:01:33 +0000
Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=)
2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=)
3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: 21nTfWX7x4mF5nnRc/qGcxguMpRLm7CQlTUil9E2+aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:33:3e:20:d6:93:11:cb:d4:6d:cf:92:11:21:27:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Oct 8 19:01:33 2025 GMT
Not After : Oct 9 19:01:33 2025 GMT
Subject: CN=6b134c53fde0434e91e0f922104d13aa31a34786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ac:fa:3d:1a:ed:7c:46:73:63:06:93:df:b4:
71:3f:f4:b6:74:3e:af:6d:87:e0:d6:ba:3d:3c:55:
74:ff:25:40:10:17:9c:8b:1a:a7:da:8b:ae:84:58:
36:78:33:25:78:ef:cd:ab:18:49:cc:05:de:68:c9:
11:6b:00:9d:68:92:87:68:5f:57:4e:61:2c:27:9a:
fa:2f:e5:77:73:9d:ed:0f:68:e6:f9:aa:20:0a:61:
30:ff:7b:dc:69:b9:43:58:59:b1:ef:e3:06:12:79:
3c:b3:c6:a7:92:e1:64:e4:f2:1c:8d:ba:5e:db:b3:
11:0a:65:4a:f6:8f:a0:62:b2:f7:a5:d5:ac:0a:ff:
08:1e:dd:47:0c:4d:13:99:d4:f0:1d:a1:db:29:d0:
1a:f2:83:22:5c:6f:a0:a8:82:dc:cf:9b:22:38:44:
ff:1a:62:74:2d:a5:99:42:2d:3e:10:8f:a6:39:f0:
da:40:d6:74:1a:30:50:d5:26:ac:be:99:ae:65:5f:
1c:af:f4:12:66:e9:43:6e:4a:4c:5b:2a:cd:1d:1e:
07:74:37:07:65:34:0e:aa:13:98:84:25:d4:ae:93:
c6:c8:84:f0:6c:c6:95:d0:61:ee:db:c9:be:3c:d8:
71:da:da:ef:2d:af:ae:66:50:e7:96:3c:63:9c:9e:
fb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:4C:53:FD:E0:43:4E:91:E0:F9:22:10:4D:13:AA:31:A3:47:86
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:34:36:dd:7e:65:b2:8d:32:ec:96:9f:ca:67:55:ba:ad:40:
ac:70:26:0a:f5:08:4f:c9:87:ad:4d:ab:fe:03:6c:24:3d:a3:
f4:73:ce:4d:20:26:31:cd:40:71:1e:0b:c7:48:d4:b2:68:aa:
ae:7e:bd:0f:81:36:f2:6a:98:be:ff:20:9e:f6:8b:69:14:fa:
9d:34:a6:f6:8d:71:c2:40:9d:de:f1:75:ee:5d:ab:94:2c:4b:
71:29:d5:ef:b0:45:23:4a:38:16:c1:fc:49:1a:ce:07:e0:df:
05:0e:f8:89:02:6b:64:32:9e:62:d0:bd:d4:b5:ab:ef:91:c5:
64:5c:6a:14:6d:2a:4b:01:ed:41:a8:a7:d9:c8:7a:86:5a:46:
d4:0e:1e:54:1f:5e:df:8b:07:a7:c4:21:14:24:a3:8b:3a:30:
8d:a1:87:97:85:99:b1:c4:a8:de:76:0f:11:da:ad:5c:90:80:
0c:b6:99:28:6d:a2:66:e7:c8:1e:f2:00:2c:a4:76:0e:0a:f2:
52:cf:fe:7b:70:48:ba:7f:82:ec:f3:ab:60:fb:bf:12:7c:88:
70:09:67:b6:b9:62:19:cd:a8:2a:c7:95:b2:da:af:60:78:92:
11:82:8e:c3:75:63:fb:90:e6:8e:3b:f7:c0:d7:40:69:e4:ee:
1b:63:15:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:31:51 2025 by rpki-client