Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
File: q3qquyPNJFv6go-wJSHWRMbVtWY.mft (raw, json)
Hash identifier: 7EIfybS0jKy6m5BDp89a5JRXB5lIrs1rERMhKq082f0=
Subject key identifier: 31:51:F8:9B:2B:A3:3B:6C:F2:AE:D0:32:09:0F:3B:DF:E0:5C:7F:AC
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 019A7294096296802F62681C2749E76050E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
Manifest number: 1406
Signing time: Tue 11 Nov 2025 11:01:35 +0000
Manifest this update: Tue 11 Nov 2025 11:01:35 +0000
Manifest next update: Wed 12 Nov 2025 11:01:35 +0000
Files and hashes: 1: bgfztVWShrtQVnnUy79Uwf2ad-U.roa (hash: 6rNqpGYtQ5hCAICw5R79FB5nCbidIpeSHwH6YCdW27k=)
2: q3qquyPNJFv6go-wJSHWRMbVtWY.crl (hash: 5IP5CYYtiCcf4PuU3lE8Y4xEHBTLdB2RjEKQF34bDD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:09:62:96:80:2f:62:68:1c:27:49:e7:60:50:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Nov 11 11:01:35 2025 GMT
Not After : Nov 12 11:01:35 2025 GMT
Subject: CN=3151f89b2ba33b6cf2aed032090f3bdfe05c7fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:bd:ed:f7:6f:04:60:a7:b9:17:c6:2a:9e:
18:0b:19:3a:03:61:8d:df:f3:c5:f6:d1:8c:10:9b:
8e:20:b6:80:9a:56:5e:b1:bb:04:37:69:c5:ca:d0:
45:75:70:76:b6:d5:9e:ce:f8:06:9e:dc:e8:dc:6a:
d2:83:3e:fd:18:6b:ef:5a:48:0a:40:f3:54:3e:72:
e8:d4:9d:9c:4d:82:3b:e0:29:94:91:a7:3e:a8:b6:
c2:aa:b5:06:47:9d:03:f9:63:d5:c8:c2:9b:2e:d4:
3b:53:23:2c:b7:0a:ad:9f:75:ce:b4:57:6b:02:33:
3e:68:3f:a1:31:9f:b2:74:37:bc:5c:4f:7e:ec:9a:
74:b7:00:7b:35:64:57:84:0b:8e:b4:e0:93:04:ed:
8f:ce:53:8a:57:f7:8e:f7:38:30:b1:2a:0f:db:1a:
f6:a9:80:a1:b9:3b:c8:9e:d5:95:fa:09:c6:d8:11:
38:c1:87:c8:17:a3:d3:b9:a9:19:b1:eb:61:32:26:
aa:f1:92:18:c0:18:19:73:88:de:fb:f9:3d:59:b3:
44:a4:0b:e8:46:ca:47:15:ad:11:82:50:d6:9d:7d:
4a:01:28:27:41:4a:fc:d4:7e:2e:54:48:e5:20:3b:
6f:89:b5:9f:56:56:d1:46:23:38:4c:59:ed:ef:39:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:F8:9B:2B:A3:3B:6C:F2:AE:D0:32:09:0F:3B:DF:E0:5C:7F:AC
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:61:68:e7:e8:cc:b6:e4:4d:8f:6a:1b:bd:dd:fe:e5:18:ae:
e2:ac:51:d5:2a:a0:45:fb:82:66:37:99:d6:97:e0:a5:4e:a0:
e0:b5:cc:35:c8:4d:c1:c0:8d:18:37:71:e3:0d:8e:02:d4:37:
ac:12:33:95:77:5f:76:31:26:3a:fb:66:5e:85:8c:da:d7:b3:
4f:d0:0a:38:1e:6e:85:98:2f:15:44:9f:a1:7a:72:5c:f0:52:
42:d8:f3:10:26:93:e9:b0:bf:6c:a1:cf:05:15:14:72:73:80:
78:22:cd:58:70:9b:f0:9a:48:8a:e5:5a:02:1d:6c:bb:94:e9:
1b:c5:5e:2c:62:ef:3d:fa:08:40:ef:75:1e:80:e4:b2:f1:d3:
82:c8:14:9a:dc:86:38:af:76:94:5d:42:96:a2:23:d9:77:19:
a3:2c:63:3b:02:bf:70:fc:82:d0:ba:85:10:57:0c:d8:5a:2b:
11:be:08:58:f0:6d:f7:57:9c:50:b6:e6:aa:bb:58:f8:cc:0a:
b0:2c:c7:ff:41:4e:a5:e3:2e:e9:38:90:c7:57:a1:eb:1c:0c:
f2:3f:4c:83:02:e1:7c:c5:91:72:0b:bd:31:40:f8:25:af:0a:
70:24:3d:eb:6f:60:9f:a9:d8:27:f9:77:8e:f5:4d:25:11:91:
9c:c3:78:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:46 2025 by rpki-client