Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
File: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft (raw, json)
Hash identifier: 4BKhy/lKLvHp3oe+64aSFsgvWayUDsMczHFtlM2/cGY=
Subject key identifier: 14:D6:73:DB:FF:B1:B5:1C:85:5D:48:8A:BE:62:BC:0B:C8:74:0A:3B
Authority key identifier: 43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
Certificate issuer: /CN=430e0949df5930f6b79efcbd9cba174ca213f569
Certificate serial: 019A7149D3084711BAF43082D10430FD2705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: B2zXHYwEq1mSDhRzWM21ZLKQRZ0.roa (hash: P+0tfOZ2RaLt/nUPuFjZ/CAtJcAtybwXEXHcIsSIUm4=)
2: Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl (hash: 6PeD37N8dburKAlbJdw/hzGn3Kp+onmj5GoD7G1zF38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d3:08:47:11:ba:f4:30:82:d1:04:30:fd:27:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e0949df5930f6b79efcbd9cba174ca213f569
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=14d673dbffb1b51c855d488abe62bc0bc8740a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:2b:0d:88:d3:35:b9:9a:3a:a6:49:61:50:
4d:f1:28:b5:39:e8:2b:ce:e3:4f:a8:0b:18:ca:b6:
2a:e2:1a:cb:36:28:0e:f8:66:84:94:5d:f3:d7:79:
eb:35:95:e0:03:6f:50:88:f5:88:95:a1:13:57:04:
4a:92:f1:c9:a0:65:12:41:c5:43:43:6c:26:c0:e3:
07:20:60:4b:88:47:ae:22:cc:6e:fc:3f:e8:57:63:
23:01:39:b2:78:7c:45:13:2d:13:a8:f1:62:0b:5b:
8a:6d:56:b9:f3:fb:de:bb:38:6f:3d:ea:bc:5f:ce:
ae:34:a7:16:b1:4f:c0:83:5d:48:06:0b:63:06:2b:
c0:d3:5e:50:ad:4f:22:7c:dd:44:48:2e:52:73:a3:
48:7e:c5:d9:31:57:ab:dd:c6:41:0c:d5:3e:4a:d8:
c8:ad:19:9f:f0:70:87:96:ee:c9:7b:b0:ec:42:d0:
0f:db:c1:cf:e7:3d:de:dc:66:41:ce:d5:1c:97:18:
09:eb:5a:24:96:dc:95:d3:af:01:b1:c8:e0:16:d8:
a9:e9:81:19:3b:e4:44:11:30:ee:dc:61:bd:bf:33:
c9:d1:71:3d:6e:25:be:0a:b1:ef:74:12:1b:89:0f:
14:bd:20:2f:4a:08:4d:7c:a6:ef:ad:de:eb:97:3c:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D6:73:DB:FF:B1:B5:1C:85:5D:48:8A:BE:62:BC:0B:C8:74:0A:3B
X509v3 Authority Key Identifier:
keyid:43:0E:09:49:DF:59:30:F6:B7:9E:FC:BD:9C:BA:17:4C:A2:13:F5:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/52a97f-2ad6-4059-8646-0686160a7e68/1/Qw4JSd9ZMPa3nvy9nLoXTKIT9Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:46:c2:a7:e6:6f:27:90:e0:fb:fa:8b:7d:5f:46:41:f5:82:
54:ad:8f:38:86:2d:70:2e:a1:f4:8d:c4:ed:62:31:25:83:df:
8b:32:38:0b:c3:83:62:47:e7:ab:57:37:10:e9:9d:f5:e7:ad:
b1:76:af:86:bc:6c:b9:7e:e3:3c:08:19:d3:db:49:15:8f:50:
1f:28:a4:f6:9a:e3:22:63:20:c2:df:d4:91:33:f4:3e:da:cd:
8b:77:ee:e1:02:a2:a8:b4:1e:36:c9:fd:95:5b:9f:d3:53:80:
51:62:7b:9b:51:43:c2:e6:12:b2:aa:c1:4c:6f:de:61:d1:31:
36:e9:d8:91:59:02:ea:74:54:db:c4:cc:75:aa:4e:91:e9:71:
be:6b:37:c5:56:b6:17:4a:55:7a:c8:6a:5d:63:e7:22:7d:a9:
45:84:ea:c4:11:60:0f:51:52:d5:00:64:3f:da:7a:c3:35:23:
de:d7:a0:32:52:9e:b5:0f:44:ee:8a:8d:c4:04:64:cd:16:5b:
18:39:2d:e0:1c:e2:7c:01:30:9a:6d:f9:c5:e4:25:56:88:a6:
90:61:e9:dd:e8:49:1c:83:60:a2:5e:ac:6a:44:ff:39:21:93:
c2:c3:17:ec:11:aa:8e:e2:07:05:09:77:49:dc:00:b5:90:a2:
08:c6:34:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:05 2025 by rpki-client