Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: /7u8fdwSQ4NHz+HOePII6JGSOb8UWBE0Degvj/XJ8Lo=
Subject key identifier: 6F:16:5C:A6:A8:A5:89:75:C9:EB:C5:85:A3:75:7C:24:0C:21:10:55
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 019A71B88EF7A6C2A5B4ACD83613B2B24574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: 8kTkVddJRJYPojJgjxkn763TMcRWavyNEZcKXWkCpDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8e:f7:a6:c2:a5:b4:ac:d8:36:13:b2:b2:45:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=6f165ca6a8a58975c9ebc585a3757c240c211055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:05:6f:d8:cf:f7:a8:5c:a1:c8:f4:97:45:
3a:4f:9d:d2:fb:4b:5d:58:78:47:57:e4:ea:3c:48:
ad:a5:34:26:c8:a8:69:66:48:5b:79:0d:cb:83:6e:
d7:d6:65:f1:80:7e:26:30:ea:2e:38:ee:af:59:05:
83:2f:93:1b:6b:5a:32:47:db:6e:60:54:13:10:ae:
bf:ef:72:67:00:95:6d:4c:09:20:2e:df:bb:ac:ec:
4f:fd:81:a8:b4:8c:98:ed:dd:b0:f7:c1:8c:94:3a:
d1:0c:5f:74:f6:bc:dd:27:01:16:47:53:58:52:ec:
95:92:9f:bb:5b:1d:69:b5:ae:b1:aa:04:e3:5e:a8:
34:cf:db:31:15:ba:e0:1e:ec:ec:7e:16:79:3b:3d:
2e:ae:14:34:d3:d0:61:21:e2:7b:01:42:6e:c9:ff:
47:44:6c:95:28:b6:f4:d6:78:9e:99:7c:75:e6:a9:
d6:97:78:8e:b1:5c:67:8a:7f:81:1c:51:6c:b7:b4:
e5:5c:30:30:dc:ff:43:c3:fc:96:96:5a:2c:56:d5:
d6:6f:e9:0d:b0:cf:b3:b5:2a:2a:76:5c:00:1b:eb:
58:82:07:4c:a4:e9:99:62:1d:f3:43:cd:ed:71:63:
5e:3a:67:a1:e3:07:d0:5c:d3:32:18:05:3e:06:71:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:16:5C:A6:A8:A5:89:75:C9:EB:C5:85:A3:75:7C:24:0C:21:10:55
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:10:0d:00:f2:ee:4a:cc:92:77:98:da:26:87:2d:49:45:ee:
3b:a6:e5:89:22:8b:d2:d1:01:aa:14:55:e9:36:c2:59:61:db:
5e:ff:96:42:2a:80:4f:37:7d:8f:92:74:60:95:4d:17:c6:f3:
8b:e0:f4:20:11:0d:27:89:80:61:2b:99:25:dc:b4:b4:98:5d:
3f:91:b0:95:f3:fb:32:be:32:6d:2a:04:f9:fd:1b:03:a3:ca:
e3:15:7d:65:6c:f6:ce:61:33:16:2f:ea:9f:9f:2e:91:b3:6a:
58:a4:ea:af:35:12:25:0b:e0:4b:59:24:f8:5d:34:6d:ea:48:
ab:24:68:a9:da:4c:a0:04:2e:f1:81:98:5e:bf:ed:d0:c1:87:
ff:26:aa:4d:b5:cf:34:79:28:75:35:1f:fc:79:04:44:b9:31:
be:a8:e5:cd:3c:48:63:e3:d8:4d:a0:d2:fd:d3:42:e6:b5:1a:
e1:e1:c2:f9:6c:a9:25:c9:ee:cf:93:98:3c:ef:77:e9:2e:ea:
0c:2f:f5:20:e9:d1:30:da:9a:00:0d:7e:95:eb:40:42:0f:37:
22:82:01:e8:89:b0:41:88:0e:c0:57:52:44:04:a3:9a:89:2f:
96:4b:29:c0:92:6c:e7:7a:41:4f:5d:da:6c:e3:ad:1f:1f:31:
ed:e0:3c:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuI73psKltKzYNhOyskV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMDU0MDM2ZGFkMzJkMTdhOGM5MTZkYzJkZmJiM2NlOGEz
NjQ1MmMwHhcNMjUxMTExMDcwMTUxWhcNMjUxMTEyMDcwMTUxWjAzMTEwLwYDVQQD
Eyg2ZjE2NWNhNmE4YTU4OTc1YzllYmM1ODVhMzc1N2MyNDBjMjExMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZsFb9jP96hcocj0l0U6T53S+0td
WHhHV+TqPEitpTQmyKhpZkhbeQ3Lg27X1mXxgH4mMOouOO6vWQWDL5Mba1oyR9tu
YFQTEK6/73JnAJVtTAkgLt+7rOxP/YGotIyY7d2w98GMlDrRDF909rzdJwEWR1NY
UuyVkp+7Wx1pta6xqgTjXqg0z9sxFbrgHuzsfhZ5Oz0urhQ009BhIeJ7AUJuyf9H
RGyVKLb01niemXx15qnWl3iOsVxnin+BHFFst7TlXDAw3P9Dw/yWllosVtXWb+kN
sM+ztSoqdlwAG+tYggdMpOmZYh3zQ83tcWNeOmeh4wfQXNMyGAU+BnFC2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8WXKaopYl1yevFhaN1fCQMIRBVMB8GA1UdIwQY
MBaAFK0FQDba0y0XqMkW3C37s86KNkUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0Yjgt
OGUxNTE0Y2NhYTRhLzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0YjgtOGUxNTE0Y2NhYTRh
LzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhANAPLu
SsySd5jaJoctSUXuO6bliSKL0tEBqhRV6TbCWWHbXv+WQiqATzd9j5J0YJVNF8bz
i+D0IBENJ4mAYSuZJdy0tJhdP5GwlfP7Mr4ybSoE+f0bA6PK4xV9ZWz2zmEzFi/q
n58ukbNqWKTqrzUSJQvgS1kk+F00bepIqyRoqdpMoAQu8YGYXr/t0MGH/yaqTbXP
NHkodTUf/HkERLkxvqjlzTxIY+PYTaDS/dNC5rUa4eHC+WypJcnuz5OYPO936S7q
DC/1IOnRMNqaAA1+letAQg83IoIB6ImwQYgOwFdSRASjmokvlkspwJJs53pBT13a
bOOtHx8x7eA8JQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:52 2025 by rpki-client