Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
File: qBGiyfyN6WebsVhYGxDOrukf95E.mft (raw, json)
Hash identifier: Hvj1i+0QeuwUOHF+8LM+J/kQP148DkREWYcyM1ewiq0=
Subject key identifier: C8:C0:CF:43:88:ED:AB:06:D8:B8:D3:D7:83:F4:C3:A3:18:A9:5C:5D
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 019A71B8D341301470AAB9CC1F975EF38DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
Manifest number: 172F
Signing time: Tue 11 Nov 2025 07:02:09 +0000
Manifest this update: Tue 11 Nov 2025 07:02:09 +0000
Manifest next update: Wed 12 Nov 2025 07:02:09 +0000
Files and hashes: 1: PPeyKFftPaiVCXNYTK3ZP37-8BI.roa (hash: 1x8aYa43ug+3XZe9x+qmxKaVKmQGYXXQ926Bpo3NKhs=)
2: qBGiyfyN6WebsVhYGxDOrukf95E.crl (hash: usXcUiW46ftj/s9cyCezPcKg1VJM4EopaEr2iMbP3FE=)
3: r7_wV3dzjpVPhKRXt9LOL6uFNoM.roa (hash: eXGrZnOiRM2nkPOyWX+HuDqKFlwEgjMo/lqsZKhSHKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d3:41:30:14:70:aa:b9:cc:1f:97:5e:f3:8d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Nov 11 07:02:09 2025 GMT
Not After : Nov 12 07:02:09 2025 GMT
Subject: CN=c8c0cf4388edab06d8b8d3d783f4c3a318a95c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:22:b9:97:70:0e:b1:39:95:92:8a:c8:91:
87:a4:d7:21:de:93:54:f0:59:d3:73:76:3d:8e:78:
e7:fa:07:27:9f:2f:43:55:a6:39:f0:72:0e:3c:bc:
13:2d:50:92:61:3c:7b:71:79:a9:ca:df:39:fe:81:
f7:e6:a1:23:8d:7f:68:07:11:71:96:67:2f:82:5b:
18:55:49:3d:46:a3:c0:16:32:59:3e:28:6c:8d:6c:
fa:7c:56:cd:0b:fb:32:e8:ba:a6:92:90:39:bc:0e:
9d:37:7f:b2:e2:9c:4f:c3:f1:f8:e5:f0:48:c4:b1:
fa:23:e6:3c:f5:16:44:74:21:36:3a:fa:91:34:4e:
b7:ee:48:7d:88:48:42:55:08:77:54:6c:16:aa:1e:
b2:5e:cd:17:51:63:bf:1c:0d:08:e3:0f:ef:5f:e3:
4c:b0:5b:75:5e:e4:c7:53:1a:05:27:2c:8f:fb:45:
24:77:46:78:1e:3c:3d:7b:55:26:71:73:22:bd:25:
9c:54:37:5d:8f:1d:63:b6:65:7c:d6:f3:d2:de:11:
2f:32:20:85:32:fa:cc:68:73:b1:5e:20:5d:54:68:
46:a9:fe:1d:d4:a1:36:35:f2:c5:9b:ed:43:e0:b5:
5d:74:6d:19:24:0f:8d:75:97:c6:ef:69:9b:b9:e2:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C0:CF:43:88:ED:AB:06:D8:B8:D3:D7:83:F4:C3:A3:18:A9:5C:5D
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:07:53:be:e0:70:77:da:91:f8:72:b0:79:dd:7d:9e:3f:e3:
53:08:bf:a3:ca:08:14:e9:ac:38:9f:91:16:cf:5a:fc:4b:e1:
03:05:b9:04:95:10:ba:73:7c:76:e9:e2:f0:21:a2:df:6e:6d:
cb:0e:5f:e4:aa:ff:9f:58:a3:e3:7b:6e:6c:d4:69:92:6a:bf:
02:99:48:cf:9a:83:98:a8:de:4e:c3:c2:5d:7c:c4:57:96:75:
0b:e5:fa:be:f5:1b:c7:62:6e:19:be:e7:a3:f1:9f:e6:f4:89:
a5:4f:ef:77:20:43:fa:99:17:8f:f0:6a:ee:2f:f6:c5:b4:97:
8d:5a:58:ef:90:2a:5f:f4:f8:93:01:c2:fc:72:e5:54:60:23:
e2:0e:19:cf:0f:12:55:26:ca:e1:cd:fc:e5:d9:b3:8c:5f:15:
d1:13:fe:de:13:a9:50:d9:d4:53:c9:98:5f:1f:6f:1d:3f:ac:
e2:29:ee:ad:62:1c:b0:49:8a:fb:86:7d:46:1d:9f:35:49:e5:
0c:8c:7c:af:de:69:6c:10:cc:93:86:f5:85:a6:13:65:d9:74:
d0:5e:4a:83:93:1c:86:50:1a:a1:e0:c5:6c:d3:15:a7:c3:27:
06:cd:41:0d:5e:6e:df:f3:eb:aa:26:42:19:32:7d:e1:34:9a:
e5:ce:c5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:20 2025 by rpki-client