Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: KEzNc1e51FUPoXcyrUyYFMQG61BXqs7PDc5WJKkSpkw=
Subject key identifier: 83:B1:69:DD:D5:E9:5C:7B:20:66:E8:0D:D9:30:1E:73:F4:67:B7:77
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 019A725CEFFDB7D09EE4C3790EDC88533F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:01:24 +0000
Manifest this update: Tue 11 Nov 2025 10:01:24 +0000
Manifest next update: Wed 12 Nov 2025 10:01:24 +0000
Files and hashes: 1: JTBFzZ_Xd-qKEEB1M2yH_cqN0L8.roa (hash: UtmE2VrYOG/N+bYO3QuLYMQZyMdAh9FYCP1pfkSwK6Q=)
2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: RkMSKBFrUfh3zXfKkgWMNDlqj4A/hDnPxkwumkD/YB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:ef:fd:b7:d0:9e:e4:c3:79:0e:dc:88:53:3f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Nov 11 10:01:24 2025 GMT
Not After : Nov 12 10:01:24 2025 GMT
Subject: CN=83b169ddd5e95c7b2066e80dd9301e73f467b777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:06:b5:3c:73:28:54:05:98:a1:a7:3d:09:
71:33:5e:fc:6e:cd:1c:5b:56:cc:fb:1c:4c:4a:fc:
d5:4d:af:59:79:1a:22:09:58:46:60:96:e7:b4:09:
b9:d2:4e:eb:f0:74:20:3d:06:1f:b4:df:dd:a3:3d:
ab:5e:14:39:51:e9:8d:ba:60:42:c9:19:26:5e:7d:
cb:32:8e:c7:c8:2d:7b:c8:8b:b8:11:d0:4a:89:d0:
c6:7b:89:af:f8:c3:94:71:fe:03:a1:bf:d2:2f:da:
24:b2:0f:fa:6e:8c:10:0c:97:74:c9:18:14:a1:bf:
ab:2d:98:8d:c6:4b:c7:1d:32:af:14:c4:8a:ea:fe:
b6:64:a6:72:b5:cd:ef:c3:15:98:42:99:c0:10:0a:
2a:02:a6:7b:7f:73:e8:bd:5b:fd:09:97:06:1d:fc:
e6:b2:e1:11:01:2f:53:29:b4:9d:49:ee:d7:de:3c:
3b:3b:02:a7:f0:72:1e:ed:d2:ac:e3:f6:de:29:f4:
68:81:45:de:33:24:31:6e:56:9f:7e:97:b1:df:d8:
70:1d:1f:af:20:18:f5:07:c5:1a:24:ff:52:5a:cb:
75:1c:cd:78:48:9a:90:e8:28:50:e3:73:0e:12:d7:
38:0c:55:9e:8a:75:0b:d0:b9:38:19:65:3b:ec:94:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B1:69:DD:D5:E9:5C:7B:20:66:E8:0D:D9:30:1E:73:F4:67:B7:77
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:60:09:d0:86:91:a3:7b:d4:cf:d3:1b:ab:7c:e0:3d:8e:a6:
7e:fe:dd:d4:8b:66:6d:2c:e2:14:a1:ae:29:46:32:c5:46:f7:
09:7a:78:b4:79:6e:68:80:01:a5:0c:be:8a:be:cb:f9:dd:18:
66:d0:8b:e9:9b:be:90:f6:4b:67:0e:b6:b1:e8:0a:9e:f8:a6:
5a:ef:4f:27:e5:d8:5e:77:12:e8:bc:2b:d9:4d:4f:3c:31:88:
32:01:dc:33:b8:18:0a:b2:84:7b:e1:11:18:ef:92:b4:c6:8a:
c8:97:33:c1:bf:3c:89:59:82:c8:3a:f8:3b:af:a7:05:e6:b7:
9b:ae:bb:d2:af:cb:fe:67:67:67:c2:73:53:90:c2:43:91:9c:
06:6b:14:5e:31:cf:99:63:a6:02:9b:d7:ee:2c:d5:64:04:2f:
80:5d:2f:5c:3f:df:9e:d0:4b:22:09:30:b1:64:ad:d7:85:a8:
28:8f:5e:04:15:2e:10:a3:bd:93:97:74:0b:34:40:c7:80:a2:
0e:b8:92:99:92:f5:f6:ee:e2:ab:82:c0:f0:3e:08:a1:a7:f1:
75:69:6a:db:ed:4e:d4:7a:3c:91:25:46:47:27:1d:ab:ca:de:
5b:3f:3a:47:72:55:f7:14:cf:1b:95:6a:0e:b5:60:09:24:e6:
66:ba:fc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:17 2025 by rpki-client