Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: j6ETYZjFK9y50+fM+RoDUhuQOdutVNdBL9BvSSjmjQI=
Subject key identifier: 6B:2F:A4:97:A0:BB:AB:2C:90:04:E0:66:D1:A8:C5:D5:D1:8B:B7:CC
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 019A7112B633057F9936EB917D15088D2E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 1726
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: XXoZOakmJlvXmGLWUcpo0gQIMX0.roa (hash: pmwXibQwTAqNCSY5Q6bAlM3gdp8aduabThZ3TyryXdc=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: /0zL08yq+IGhdzf8R60ZmdvCbzBPEyJih2vMuvd4u0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b6:33:05:7f:99:36:eb:91:7d:15:08:8d:2e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=6b2fa497a0bbab2c9004e066d1a8c5d5d18bb7cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:80:92:46:a4:21:56:45:3b:90:81:38:b1:
ef:e6:3b:10:00:98:4a:c4:61:44:0b:30:de:22:19:
b1:d7:2c:67:af:e5:85:cf:b2:81:69:7c:ba:89:6d:
a7:d3:b0:cf:ba:49:6b:76:90:88:56:59:49:a6:90:
80:e8:f5:71:3d:fb:22:72:3a:2e:33:cb:f7:2c:cf:
66:50:fc:85:9b:75:4c:ef:00:37:7c:ef:c9:d5:35:
a8:48:87:9c:7f:a1:b7:ee:c4:3f:ab:52:71:3c:fd:
b7:b7:93:e3:9d:b5:67:2a:07:06:f7:39:e0:6a:6c:
d9:7a:3b:1f:dd:d9:9d:43:e9:ba:e7:73:52:2f:5a:
2c:a0:38:dd:47:c5:bd:54:13:14:45:c3:27:8c:c6:
83:a7:5b:05:48:b0:3f:f7:e2:79:c0:66:dc:2e:67:
37:6b:df:f8:f4:42:f9:a6:c1:f0:84:da:27:f6:4d:
57:57:f8:e5:2c:19:47:ce:95:0a:e8:28:69:3f:3b:
10:9b:53:7f:f6:40:97:a9:66:87:00:a6:1b:e7:28:
24:f6:dd:8e:56:bf:5a:77:30:bb:dd:d8:b1:24:3f:
df:b0:ae:7b:65:f1:69:37:99:53:2f:f5:d7:f8:32:
6f:39:7f:bc:ad:fb:f9:7d:21:af:bd:be:4e:20:f7:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2F:A4:97:A0:BB:AB:2C:90:04:E0:66:D1:A8:C5:D5:D1:8B:B7:CC
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fc:f7:e4:46:72:0d:27:cb:de:c8:43:08:01:a1:18:62:c8:
c6:c4:e1:88:d4:72:0c:0c:9f:25:ba:8c:89:7c:4d:68:2e:81:
53:70:62:7c:f6:52:f9:fa:d8:5c:2b:21:50:8c:d7:4a:66:b8:
f1:6d:42:df:44:82:cb:b7:40:51:9f:60:c3:1b:2e:8c:75:4b:
c7:a6:e3:59:a5:01:e8:ed:9a:5d:3e:88:6d:90:bf:05:ca:6f:
a8:a7:d8:0c:38:43:ed:4c:ed:ff:ce:91:ee:8c:e8:2e:4b:78:
f1:d6:14:f4:61:fc:12:23:2a:cc:2a:83:fc:df:ee:83:b2:1c:
aa:47:f4:14:01:6b:67:48:56:68:54:62:af:54:49:1f:67:e9:
4e:8f:8e:c3:a1:d5:f4:54:a5:25:e7:25:c1:c0:3e:4b:4b:71:
4d:55:1d:76:1f:41:13:e3:1f:12:c7:92:4f:ee:d4:3a:8d:d0:
26:c4:54:a5:8d:74:a4:96:bc:dc:c0:a4:22:23:78:20:cd:87:
9e:ea:4f:13:f0:62:af:72:e8:92:a4:e8:f7:3c:8e:27:a1:74:
8b:77:c1:4d:f4:9c:56:e8:3a:3f:13:8f:b6:06:6d:f1:44:0d:
aa:69:7e:8c:fa:a2:9a:4a:2a:bd:a8:fa:96:77:28:c3:3a:aa:
79:99:28:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:25 2025 by rpki-client