Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: Fojxt78HFdvKOBKPPN6fFEUyPOGvLgxtxGkvlKJLqCQ=
Subject key identifier: 86:DE:52:D8:10:16:08:41:1D:82:EE:EF:1A:EB:50:49:2F:44:D9:A9
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 019A7112C6D2F03D9BBBC770802CC42B2B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:47 +0000
Manifest this update: Tue 11 Nov 2025 04:00:47 +0000
Manifest next update: Wed 12 Nov 2025 04:00:47 +0000
Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: lRqZ/vi9Q1PYsxgJ16QnbYTx+2HOj0PILNGu5pz4ebU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c6:d2:f0:3d:9b:bb:c7:70:80:2c:c4:2b:2b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Nov 11 04:00:47 2025 GMT
Not After : Nov 12 04:00:47 2025 GMT
Subject: CN=86de52d8101608411d82eeef1aeb50492f44d9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:07:23:28:2a:61:cc:30:9a:c1:fa:c3:7a:
97:29:1e:f2:5b:37:29:aa:da:f1:54:12:88:d4:b7:
f6:60:7a:ff:82:0c:8e:a0:05:d3:bd:0d:5b:62:b3:
e7:56:6b:a3:30:4b:f6:59:af:18:15:0b:51:22:cc:
1a:3e:5b:0a:25:b8:d8:93:8d:1e:f6:7c:ba:8e:0d:
52:d5:33:52:69:65:df:c3:c2:49:f0:31:25:0d:44:
cd:33:e3:1f:c9:05:38:66:56:f8:0e:66:2f:a4:84:
94:65:e3:99:6e:8c:16:c1:d2:93:e8:39:06:d3:d9:
2d:da:af:f3:ba:fc:c0:89:40:6f:19:22:57:9c:b9:
96:39:b3:39:73:47:f3:b3:52:9b:da:96:10:8f:6b:
50:a3:d6:43:b2:78:79:e5:a5:7e:db:47:b6:6b:d3:
f4:b1:52:f5:fa:3b:0c:e0:f4:a4:eb:64:4e:85:4c:
6b:40:59:2b:45:c2:07:ad:76:e5:66:b4:a0:82:0f:
4e:f6:aa:6d:2a:18:71:62:4a:15:c5:9b:b0:f5:9e:
6e:30:46:54:3c:5a:f0:1f:10:bd:f0:0c:e7:8a:93:
6c:18:3b:e7:f2:ae:1d:9b:f8:45:43:36:b0:62:b3:
4d:71:ba:22:aa:7a:2a:96:36:b7:3c:1a:79:4b:a9:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DE:52:D8:10:16:08:41:1D:82:EE:EF:1A:EB:50:49:2F:44:D9:A9
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:14:31:1f:07:22:9a:99:75:2d:8c:31:29:78:c4:79:40:c4:
cb:37:10:76:b1:24:e7:d4:8e:f4:ab:b2:27:2d:33:02:b3:af:
2b:7d:ae:f4:97:7c:c8:b4:8e:5a:a4:b0:34:11:47:d5:c9:e1:
5d:1f:61:9d:3f:b2:ad:87:e3:65:24:1e:93:3e:95:5b:76:db:
a5:7e:b9:31:18:0a:28:61:e4:e1:2f:68:64:5b:97:d0:af:14:
45:ca:f9:52:d4:d0:04:dc:3a:3a:cf:89:e1:2a:48:7a:f6:3a:
16:94:18:5b:2e:63:a4:d2:77:85:89:a4:c0:b9:15:44:9d:ea:
92:5d:8c:de:3a:5c:94:8f:c4:9e:02:0c:f8:3d:f3:f5:38:e7:
0d:2e:57:51:80:09:24:c9:67:41:61:8c:ae:56:de:0c:01:78:
12:df:f2:b2:06:12:97:ba:22:8d:cc:f2:c2:d1:e9:f0:d1:17:
24:e3:f9:b1:fb:24:32:98:b3:e1:3f:7b:df:2b:4b:47:37:d5:
d8:61:87:b0:6e:0a:16:99:c5:93:ef:a1:f2:b7:b4:a8:ec:16:
99:3f:9b:b8:5b:2d:00:ec:0f:5d:bf:03:3e:71:bb:81:fd:6e:
e0:f6:16:cd:5f:ed:90:2f:5a:7c:12:f4:b5:1d:3c:9f:d1:1d:
be:2c:f6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:03 2025 by rpki-client