Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: j8A38/X2zImh0fyYOXKtCXX45w8OAFPmIuqA1NgwDFU=
Subject key identifier: 68:8D:21:2A:F6:8A:97:B1:B2:64:10:9E:8B:19:A0:50:C2:9E:75:A3
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 019A70DBE99D8585AE0094BBBE8D96F5344C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 03:00:51 +0000
Manifest this update: Tue 11 Nov 2025 03:00:51 +0000
Manifest next update: Wed 12 Nov 2025 03:00:51 +0000
Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: p2C7r7TPDyGNWr6k0KnOU5K7GNc02ZvZ/QIY3srEJ+4=)
2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e9:9d:85:85:ae:00:94:bb:be:8d:96:f5:34:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Nov 11 03:00:51 2025 GMT
Not After : Nov 12 03:00:51 2025 GMT
Subject: CN=688d212af68a97b1b264109e8b19a050c29e75a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:07:d5:6c:19:fb:29:6a:a0:2d:c8:79:e5:
e3:b3:47:51:27:6d:bf:3a:a9:c1:73:dc:9b:4d:4f:
01:ba:e5:05:db:ea:57:15:d0:f6:91:f7:ab:64:d8:
50:2a:f5:ac:04:06:d1:b3:10:80:c9:3a:e7:34:19:
44:c5:e4:c0:6f:dc:39:78:a9:15:92:fc:f5:03:94:
5b:0c:44:b3:67:03:e6:1b:0a:a2:92:de:1d:b6:7d:
c2:36:9e:61:49:69:c9:a8:b9:a7:28:a7:47:03:ab:
2b:dc:80:f8:33:e8:4c:a0:01:b0:4d:54:2f:ad:3f:
1f:7e:70:33:61:a0:74:14:5e:bd:52:77:0f:81:e5:
a5:fb:e3:ef:40:00:fc:bf:e7:e6:38:18:ba:1b:b9:
8b:bf:48:29:31:8f:2c:7f:98:d0:01:1d:af:3e:45:
fe:87:2f:aa:3e:e5:8b:06:78:2b:f3:69:4a:a2:dc:
1c:d7:f5:6a:be:49:64:5a:aa:0b:79:a9:00:31:fb:
3f:cd:fb:78:5e:b0:8b:61:e8:9e:46:ff:05:d1:0b:
c6:17:fb:55:4c:a2:80:f5:ae:d9:2e:f0:7d:28:a5:
a1:ad:ff:e5:62:e2:67:10:1e:ec:ce:6f:9f:d7:4a:
9b:ec:0b:d2:8e:60:f0:0e:53:e4:53:f6:2a:32:07:
46:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:8D:21:2A:F6:8A:97:B1:B2:64:10:9E:8B:19:A0:50:C2:9E:75:A3
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e1:f5:e4:93:13:a5:09:b0:cb:ab:f9:e6:64:7f:a2:1d:58:
ee:5f:b6:7d:c0:38:a9:57:8a:d8:e8:99:c9:92:2d:f4:0e:e5:
cc:51:87:47:0d:9a:6a:9d:ae:0b:eb:82:a5:a4:07:5e:0c:e4:
1e:d1:fd:98:c0:24:1f:d5:bf:12:68:f5:6e:46:7c:c0:59:85:
83:08:86:70:d2:49:c9:d3:82:3e:b4:d3:54:f9:1f:5a:c8:fc:
6a:4f:74:bc:12:a7:f4:ad:f0:12:80:57:35:aa:5c:df:dc:00:
84:cc:e5:0e:c7:af:b2:17:0a:e2:2b:02:90:72:8e:76:3e:1c:
ac:6f:9f:b5:fc:bd:f5:62:db:73:b5:f4:c5:9c:91:2d:ac:04:
c1:48:0c:e8:b7:db:02:42:0d:f0:97:19:d5:9d:e0:a6:38:8f:
f0:30:c8:4b:3a:04:0c:0e:2a:82:02:ff:3e:9f:16:41:66:28:
16:d0:74:36:2f:cb:de:a1:85:29:dc:b3:b4:7c:34:da:d1:b0:
95:1d:ac:b1:da:cc:5f:b2:2f:ff:f0:4d:f1:5e:c4:8a:53:06:
50:95:bc:29:82:ac:c8:4e:e8:98:9a:ab:ac:a3:81:28:73:55:
7a:1a:dd:2f:3b:f3:98:00:ab:7b:aa:8d:09:0f:cf:40:ca:1a:
6a:fb:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:31 2025 by rpki-client