Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: Hc7SC95/baW2j9JrV0OcBM8dxJseOuookro9cIjW4e8=
Subject key identifier: 7C:61:64:34:6A:09:19:C0:ED:13:6E:39:16:C0:BC:B0:99:00:2E:10
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 019A70DC6BA3565CAC79DC8DC89AD2E49AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 03:01:24 +0000
Manifest this update: Tue 11 Nov 2025 03:01:24 +0000
Manifest next update: Wed 12 Nov 2025 03:01:24 +0000
Files and hashes: 1: 1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa (hash: XnlKdK7HSE5Z4YnaNQLgBs+MxP6gmaSDYHLIExtRWFg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: jVXj+5IBOWoSOCYO0Mw9bitEPVHN0ING08Ey26Eg6qU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:6b:a3:56:5c:ac:79:dc:8d:c8:9a:d2:e4:9a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Nov 11 03:01:24 2025 GMT
Not After : Nov 12 03:01:24 2025 GMT
Subject: CN=7c6164346a0919c0ed136e3916c0bcb099002e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:75:d5:a8:eb:80:5e:c0:30:f0:b5:6a:e6:
c0:68:07:a6:e4:d5:52:ae:24:20:9c:61:9e:81:ab:
51:f9:ce:71:97:33:d7:ad:5b:c3:6f:57:0e:6a:59:
9d:83:ae:fb:42:ce:fa:70:3c:38:c9:0e:3b:89:fc:
aa:8f:68:63:da:c9:53:56:a5:27:cb:16:26:8a:41:
37:3f:59:35:b5:df:22:ed:00:f8:c9:f7:4e:9a:8d:
08:19:f1:5c:00:1e:3e:3b:7e:67:6d:4e:56:d3:35:
ea:14:21:60:e3:4d:cc:21:34:4f:3a:3e:eb:23:83:
10:c6:2a:8b:c7:80:ec:3b:88:ad:04:52:9f:36:a5:
cc:34:99:89:e7:1f:2b:c1:95:30:97:43:6e:01:4b:
13:fd:a0:83:ed:83:d9:6b:0d:c1:e2:c9:e1:1f:df:
40:d0:13:e8:2c:09:a8:fb:42:8e:1d:e7:8b:01:ab:
67:f9:d2:26:08:ee:1b:c8:34:8b:c2:d3:58:a4:d4:
94:da:21:41:a0:3f:bd:d8:cc:6b:53:c0:db:f4:c5:
03:84:74:cd:c6:d9:03:40:2b:36:ca:80:64:1a:84:
24:7a:b2:b6:14:eb:8b:5f:a1:64:66:21:53:22:6a:
bc:dc:28:f5:28:f4:45:8b:4a:e5:f8:a5:2b:ff:6a:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:61:64:34:6A:09:19:C0:ED:13:6E:39:16:C0:BC:B0:99:00:2E:10
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:de:af:ba:db:63:05:86:54:f6:aa:5b:7e:18:d0:e9:41:b9:
36:e4:ae:82:ac:f7:bb:96:2a:d0:1c:2d:62:63:26:a3:58:97:
ea:8a:72:ba:81:c2:67:18:eb:ef:e7:0a:7d:49:1c:65:a6:ea:
d6:74:93:ac:28:fb:df:a6:33:dd:c8:5a:b3:18:4e:48:c6:83:
f7:0e:bd:b8:3d:2e:19:bc:a2:e0:10:c3:0b:24:1a:be:24:60:
80:ac:f2:b8:06:ea:fd:73:cf:94:0e:82:34:7e:1e:ed:cd:54:
3c:57:45:90:a7:d4:d0:b3:f2:74:55:ad:44:f5:45:02:36:55:
51:56:04:8d:09:6a:e9:0f:7c:c7:55:ee:32:30:ec:d8:e3:88:
2d:38:1f:7d:e1:99:94:9d:b0:fa:e5:89:4d:43:0e:af:3c:3f:
2f:75:d0:73:2d:21:8c:b5:14:21:e8:b9:1b:d3:36:0f:9d:ea:
38:3f:f8:0d:0f:3c:b8:a0:a6:4e:8e:41:eb:0e:46:10:0c:f0:
d2:46:09:54:93:55:ff:c0:2e:a9:e0:df:ff:8c:0b:74:27:31:
e1:f0:b3:96:d8:db:09:48:9a:2f:06:dc:c7:53:02:98:f5:b8:
5d:ad:23:44:b0:d0:b9:45:6d:c0:1d:1f:58:b8:1c:40:85:ca:
cd:f4:2b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:53 2025 by rpki-client