Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: XxNu410Rs5xiiFvw3KL+3V+3nrdvw+/6striF0QuETY=
Subject key identifier: B0:D1:1B:97:F0:4D:0A:D9:29:C4:85:19:53:18:1C:4A:3B:28:A4:34
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019A4DAABBC8E78F0189F9EF1F337E997341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1735
Signing time: Tue 04 Nov 2025 07:00:25 +0000
Manifest this update: Tue 04 Nov 2025 07:00:25 +0000
Manifest next update: Wed 05 Nov 2025 07:00:25 +0000
Files and hashes: 1: FkdMBqbfdch6CFhxD4QwLgELMKU.roa (hash: wdLh3ZrKjP6g2Oc4Gepc/YnCstfM0S94slpL4xRfAig=)
2: NUZ62speWa0hfYDy7wa7hz3yElg.roa (hash: kF9c9XUwfNAZlikdfObuH2Z3J2bnJMLn8HSb5Ko9hw8=)
3: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: x2rmzGzJf3zgVVpQ8d2o/oKnxaJh83NRX/ygXQfuHdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:bb:c8:e7:8f:01:89:f9:ef:1f:33:7e:99:73:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Nov 4 07:00:25 2025 GMT
Not After : Nov 5 07:00:25 2025 GMT
Subject: CN=b0d11b97f04d0ad929c4851953181c4a3b28a434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:45:2f:f2:da:b0:a4:c6:fd:0c:8d:f9:07:0a:
fd:d7:5c:65:b8:8f:2b:b1:81:f5:ef:f2:d1:04:98:
99:ed:d4:3f:5f:8e:e7:a4:c2:ac:c3:06:cd:32:c9:
18:0a:96:1b:5c:e5:b1:5a:35:98:79:c5:96:1b:d9:
8c:12:04:e1:4f:89:ee:9c:83:66:1f:8e:57:53:17:
f9:14:26:70:1e:ad:84:0a:67:04:dc:52:f1:35:90:
69:f2:be:d5:60:37:45:b3:06:53:f4:68:25:32:b6:
69:77:5b:9c:32:18:96:81:cb:a2:3e:96:95:41:79:
2b:e7:1e:32:2f:ab:50:2e:27:42:b1:cd:26:33:ee:
1f:79:73:37:25:08:a4:be:13:f1:9c:0d:86:28:fc:
34:d7:a7:ab:00:18:fb:9f:25:9d:00:ee:69:d9:3d:
c9:a3:fd:fa:43:d4:a9:87:51:9b:28:01:9e:3a:f9:
c3:ad:7c:2b:27:39:d5:62:37:31:f7:14:b4:44:5c:
38:4a:8b:05:a9:43:7b:d6:53:c3:7e:ba:71:0d:9b:
16:a2:33:f8:33:bb:fb:29:cd:42:a9:f9:13:18:28:
11:48:ae:04:4f:a9:32:e2:2c:26:05:be:26:7c:03:
76:af:1c:2a:a0:d4:79:eb:49:10:5e:76:37:e6:28:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D1:1B:97:F0:4D:0A:D9:29:C4:85:19:53:18:1C:4A:3B:28:A4:34
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:a4:1a:d5:55:8d:99:52:bd:1c:a8:1b:12:df:a5:c9:08:
ea:98:cc:c0:25:3e:c4:10:5c:ae:c6:9f:01:7b:2b:02:0f:67:
ca:4c:60:7c:3b:77:17:bf:7d:17:6c:47:1a:1d:b9:11:f5:cf:
91:3b:56:c7:01:71:16:8d:c6:95:e0:33:0e:17:52:f2:71:5c:
cd:0d:19:cc:34:9d:a5:6a:a0:92:79:55:23:2c:a7:25:76:e3:
af:8a:88:70:98:57:e5:4b:c0:c1:ee:5b:1e:b2:e0:cc:4d:9b:
3a:e4:ad:cc:18:f1:6f:79:43:ab:b7:52:d8:4a:0a:f4:ec:f8:
d8:01:33:2b:ce:32:92:04:ad:cf:9f:82:39:cc:e3:12:ed:4b:
8e:d6:4e:4c:88:ed:2b:8c:6d:15:ed:54:a5:59:a4:b0:d9:05:
2b:77:5c:f6:c0:62:93:a4:41:32:9b:09:d8:1b:2d:29:87:7a:
75:f3:c4:6c:92:4f:c6:f5:84:31:ec:c7:c5:22:a9:da:c9:29:
1e:77:2b:08:82:f9:cf:41:cf:d7:d3:51:34:69:d7:0f:49:72:
a1:7e:7f:1f:ec:a8:f0:63:10:e6:85:34:08:68:d2:bf:7f:80:
25:e3:b0:05:b8:ad:d8:6d:b6:c3:bf:f8:a8:f3:f0:e2:56:30:
2f:0a:55:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqrvI548BifnvHzN+mXNBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjUxMTA0MDcwMDI1WhcNMjUxMTA1MDcwMDI1WjAzMTEwLwYDVQQD
EyhiMGQxMWI5N2YwNGQwYWQ5MjljNDg1MTk1MzE4MWM0YTNiMjhhNDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30Uv8tqwpMb9DI35Bwr911xluI8r
sYH17/LRBJiZ7dQ/X47npMKswwbNMskYCpYbXOWxWjWYecWWG9mMEgThT4nunINm
H45XUxf5FCZwHq2ECmcE3FLxNZBp8r7VYDdFswZT9GglMrZpd1ucMhiWgcuiPpaV
QXkr5x4yL6tQLidCsc0mM+4feXM3JQikvhPxnA2GKPw016erABj7nyWdAO5p2T3J
o/36Q9Sph1GbKAGeOvnDrXwrJznVYjcx9xS0RFw4SosFqUN71lPDfrpxDZsWojP4
M7v7Kc1CqfkTGCgRSK4ET6ky4iwmBb4mfAN2rxwqoNR560kQXnY35ijnCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDRG5fwTQrZKcSFGVMYHEo7KKQ0MB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3mkGtVV
jZlSvRyoGxLfpckI6pjMwCU+xBBcrsafAXsrAg9nykxgfDt3F799F2xHGh25EfXP
kTtWxwFxFo3GleAzDhdS8nFczQ0ZzDSdpWqgknlVIyynJXbjr4qIcJhX5UvAwe5b
HrLgzE2bOuStzBjxb3lDq7dS2EoK9Oz42AEzK84ykgStz5+COczjEu1LjtZOTIjt
K4xtFe1UpVmksNkFK3dc9sBik6RBMpsJ2BstKYd6dfPEbJJPxvWEMezHxSKp2skp
HncrCIL5z0HP19NRNGnXD0lyoX5/H+yo8GMQ5oU0CGjSv3+AJeOwBbit2G22w7/4
qPPw4lYwLwpVUg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 13:57:01 2025 by rpki-client