Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: 5qpikQnFv5oGRABhTsPfkd45eBnSL7e5KE6VccWyhi0=
Subject key identifier: 1A:B7:C8:BB:49:79:A0:49:42:26:E5:BE:A0:FA:4B:E0:A9:AB:44:8F
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 019A71EEB2BB35F96E99D777484A75D262B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: K1Q1Pd4653jVJLMBVSXn7b2oB9E5tjba/i7NvGVuuAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b2:bb:35:f9:6e:99:d7:77:48:4a:75:d2:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=1ab7c8bb4979a0494226e5bea0fa4be0a9ab448f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:38:84:17:cb:8b:e2:ef:a6:d8:81:a4:4b:
c0:44:1f:0d:5f:22:df:f9:16:8a:26:02:c8:53:de:
c0:43:7d:8d:fe:58:26:13:70:0c:81:0c:12:cb:b5:
69:1a:86:c0:ef:bc:19:94:a6:0a:1d:83:4b:42:28:
d2:00:8b:48:b6:52:17:4f:d9:74:7b:9b:f9:51:84:
5c:d4:99:ce:fa:02:f4:40:81:0c:56:66:f2:11:4d:
3e:bf:be:83:22:cd:a5:33:d3:00:ec:85:fe:32:d4:
16:47:ef:0d:c0:93:f5:85:5c:93:c0:45:b9:07:97:
9f:a3:59:51:38:d6:2f:31:c3:08:13:2d:0e:ba:bb:
2f:f7:6d:12:29:01:1b:d8:8b:09:11:73:aa:c0:15:
65:5e:9f:ef:fb:f1:f9:6e:a5:5a:d3:0d:d1:73:91:
05:ba:cf:c4:70:11:7f:1d:65:b9:13:c3:f1:92:2f:
65:cb:6f:22:af:1c:52:b8:21:42:40:9c:73:44:35:
9a:ba:39:4d:9e:0f:5c:4d:3f:58:b7:20:b4:2a:ab:
27:9c:a3:b7:6f:de:2b:9d:00:02:2a:1a:5c:1e:af:
db:14:4f:17:99:69:8b:9c:9d:0c:81:0d:98:a3:8d:
68:2c:ee:82:c7:be:f8:79:3c:5b:4c:f1:10:92:0a:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:C8:BB:49:79:A0:49:42:26:E5:BE:A0:FA:4B:E0:A9:AB:44:8F
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:51:3f:5b:28:27:3b:9d:3e:8a:87:05:86:2c:b8:84:3e:9c:
83:ec:41:3d:f2:36:d9:ba:67:9f:66:3e:14:fe:0c:23:87:61:
16:0e:04:a1:4b:b9:96:4f:ff:a8:ed:2e:a1:1c:7f:ef:6c:fa:
ee:6e:5c:57:d5:07:59:24:dd:0d:8c:73:e5:66:ca:3b:91:c9:
d6:5f:4b:bb:cb:a4:71:e1:28:d0:1e:6f:4d:7b:bd:85:a6:ef:
a2:2a:7a:24:21:d2:60:06:9d:21:b8:d0:bf:5b:b7:0e:16:96:
74:9f:a1:88:73:cd:15:34:a4:93:0c:fa:1d:87:53:3d:5f:fd:
05:38:1b:b1:91:5d:9f:6d:f9:76:27:ec:6c:97:35:3a:6c:d6:
da:54:8a:ca:ee:0f:ef:d3:e1:44:1f:a8:f4:c1:45:ea:99:d9:
c8:11:6e:bf:bf:11:b4:2e:99:15:6c:97:91:d2:ee:b8:b9:f6:
8f:a2:5c:5a:a4:3c:95:c5:e3:4d:eb:3f:ff:5a:5a:b2:4c:80:
bb:b7:c1:44:03:fa:7a:51:ab:d5:2b:4a:d6:1a:17:09:59:bb:
ac:ec:98:40:27:25:4a:e6:d2:d9:46:5a:45:0f:39:37:3a:9a:
86:e4:2a:8b:68:50:c4:ce:f5:f9:c9:31:32:db:15:0d:91:e6:
e8:09:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:38 2025 by rpki-client