Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
File: QYbmudH3jJTWP6yTSrmq3AyW1D4.mft (raw, json)
Hash identifier: wOaEurrdu4bOnNGCEy5HEVrVeEFZbhHxLf5ffdn3NIU=
Subject key identifier: E9:0A:AD:1E:CC:CA:FE:B8:66:86:F3:96:51:87:9E:DB:28:54:96:B9
Authority key identifier: 41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
Certificate issuer: /CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Certificate serial: 019A722662CB62401D67BD9841A9C87FDEEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:49 +0000
Manifest this update: Tue 11 Nov 2025 09:01:49 +0000
Manifest next update: Wed 12 Nov 2025 09:01:49 +0000
Files and hashes: 1: 4siTv1cIQqiRqqbBP3me0G2tMEA.roa (hash: SDh+UpJOyjnagfNdrfriJXPS5zpz808h3YCOrbfCctg=)
2: QYbmudH3jJTWP6yTSrmq3AyW1D4.crl (hash: 7d75DFqcGmfLZiq39aw0i94xdmWSMthf7LDo0mGJPcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:62:cb:62:40:1d:67:bd:98:41:a9:c8:7f:de:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4186e6b9d1f78c94d63fac934ab9aadc0c96d43e
Validity
Not Before: Nov 11 09:01:49 2025 GMT
Not After : Nov 12 09:01:49 2025 GMT
Subject: CN=e90aad1ecccafeb86686f39651879edb285496b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:ce:8e:07:5c:0b:95:d1:37:59:88:e7:59:
5a:b4:58:d8:9f:23:78:1a:ab:bc:b3:e9:22:7f:24:
06:a7:88:52:25:fd:9e:45:71:da:73:54:e8:05:e4:
d8:e0:b4:a6:0b:81:4b:3a:6b:90:c8:8e:fd:8d:73:
cf:f0:06:5e:8c:f9:87:34:1a:44:08:6b:16:aa:7c:
41:7d:7f:5d:55:f0:d9:9c:78:e0:cd:94:1f:0e:26:
23:93:06:3f:24:0f:f3:f9:87:e5:34:fa:70:0a:f0:
29:e8:06:59:42:26:39:09:2a:a7:e6:bc:59:c9:4f:
5c:96:6d:15:c2:92:e8:b6:05:9c:f3:b0:ec:1a:11:
ba:d1:17:25:50:ba:4e:c3:47:56:7d:5a:70:59:be:
e3:bc:bd:c7:f2:bd:4b:f6:ce:d9:46:ae:cd:92:49:
f7:56:cc:57:65:19:ed:b8:61:d8:95:c2:0b:ab:24:
b7:d8:0d:9c:f0:55:88:7c:61:01:ae:19:ed:65:a5:
5f:28:9e:9b:49:b4:a8:5a:18:f2:fe:c1:03:cd:e7:
c8:58:7f:3e:3a:37:89:8a:1e:aa:0c:2a:ea:c0:e3:
77:c5:72:41:e3:93:00:15:08:c1:fd:e9:41:5f:7d:
8c:ec:85:0a:30:65:dd:c4:f2:35:71:1d:21:18:b1:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0A:AD:1E:CC:CA:FE:B8:66:86:F3:96:51:87:9E:DB:28:54:96:B9
X509v3 Authority Key Identifier:
keyid:41:86:E6:B9:D1:F7:8C:94:D6:3F:AC:93:4A:B9:AA:DC:0C:96:D4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYbmudH3jJTWP6yTSrmq3AyW1D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1b9a66-f820-45a0-b02d-d78766d8c858/1/QYbmudH3jJTWP6yTSrmq3AyW1D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d4:64:71:91:21:d4:bc:fe:3b:85:83:64:2e:ad:46:36:63:
0c:cd:07:07:50:05:7c:ec:fe:08:b9:cd:a8:57:44:c5:90:f4:
3b:5d:ab:56:18:98:f9:c2:85:00:3a:44:7d:b0:38:72:32:8c:
f5:49:b9:e3:e8:a0:03:2e:e4:43:50:76:bb:02:07:65:85:97:
af:20:02:d7:63:ad:52:06:5d:ee:1b:b4:18:26:44:db:2c:57:
b0:4a:97:6b:f5:1b:7d:bb:69:84:d8:70:ba:fc:85:67:bd:b2:
e5:b3:71:10:60:2f:97:d8:ad:da:b3:c6:49:d2:10:cf:3a:40:
f2:15:79:fd:08:dc:b8:51:60:79:51:cf:a5:19:48:4c:6c:17:
d0:5b:80:2f:56:35:dc:02:f5:88:6d:50:34:06:93:6e:44:e6:
bc:24:a2:e6:ca:3f:2a:14:78:1f:72:27:5d:13:22:cc:4c:02:
95:be:11:c6:3a:cd:41:72:5e:fa:21:a5:5f:9f:21:22:d5:86:
90:09:85:0b:44:a3:20:ef:ab:b1:ec:8e:0b:71:e8:85:c4:e4:
c6:b4:dc:62:ad:75:53:6f:3d:bd:cf:cd:55:a8:7c:32:ef:e1:
20:f7:c9:67:31:ed:ba:3c:98:0f:94:d7:35:61:b8:09:4b:e1:
ff:31:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:43 2025 by rpki-client