Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: bzyqoMs/Vu9UsIlRxd6w01ovvNQMjVnjSk/crCrrFo8=
Subject key identifier: A9:51:CB:E1:06:0F:E3:3F:C8:1F:B6:40:17:1D:ED:64:A6:E0:84:B7
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 019A209C1B34AA95E31BBA5AD13CAA1407EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 1715
Signing time: Sun 26 Oct 2025 13:01:32 +0000
Manifest this update: Sun 26 Oct 2025 13:01:32 +0000
Manifest next update: Mon 27 Oct 2025 13:01:32 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: N5zj-5kvAhoJCItFFzdBa1pYbH0.roa (hash: ypTV2FdvIR6mdrYiLR6I+YqYJsccCY+5Z3r1n8pA0MU=)
4: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
5: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
6: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
7: oFumiBsAWooyBU0TcSWUrXQVV0M.roa (hash: O0f3W53wpKnfJgwZpwBD1xXfrpSbNoYlbIB/lXeKPq8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: pPLuvKY9gAhmOl5c9/dH+8iT6ks753TBrRi9giENKcQ=)
9: zJzk_tM6gq364ozeInI309dIrxA.roa (hash: Wk+SRLeVkkf92Q0xGlI36RRywoqFOdrDHHnD94zbdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:1b:34:aa:95:e3:1b:ba:5a:d1:3c:aa:14:07:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Oct 26 13:01:32 2025 GMT
Not After : Oct 27 13:01:32 2025 GMT
Subject: CN=a951cbe1060fe33fc81fb640171ded64a6e084b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:96:03:fb:4e:68:1a:ec:e2:c3:88:cc:3b:
e1:fe:9b:96:02:f7:ec:6b:4f:e2:2a:ad:5b:78:9f:
bc:5f:72:63:63:a6:f7:d2:7f:be:05:80:95:9e:e9:
82:c2:1b:a9:59:29:38:af:02:f4:e4:35:ed:e4:3c:
4f:a3:12:a8:74:12:07:df:ba:22:7e:60:73:be:89:
a8:b3:c1:17:52:99:f5:08:c7:ad:3b:e8:13:ac:a6:
2a:4c:0a:2c:b1:3d:70:32:61:31:1e:f0:de:54:89:
a9:59:47:95:ce:2e:0d:64:8c:7d:5a:69:d5:38:4b:
a5:e1:9f:3d:8a:2b:c2:b2:02:67:22:aa:5a:e1:f6:
ff:d5:1b:ce:3d:33:36:1b:9d:67:8b:d3:93:c1:ec:
83:ce:66:ab:76:ef:28:a3:27:b2:ba:d4:ab:31:0a:
17:fd:34:62:7f:ff:d4:04:23:1d:ff:4c:1c:36:e6:
10:19:ce:25:91:d3:40:e1:ea:28:f6:33:79:78:b7:
c6:3a:44:4b:93:b6:10:58:a1:12:6d:80:03:a7:47:
16:7f:5c:61:93:93:c4:6d:67:59:19:5c:b8:8d:9a:
03:2f:e3:da:19:38:e3:a0:62:c3:12:be:7d:98:ea:
04:13:87:f0:1f:23:05:e5:24:b5:86:56:a4:69:96:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:51:CB:E1:06:0F:E3:3F:C8:1F:B6:40:17:1D:ED:64:A6:E0:84:B7
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:de:21:0a:6e:a5:0b:e1:7f:d5:a4:0a:91:42:6a:5c:c7:f6:
49:6a:d8:6f:f9:d1:ce:ba:b3:33:66:c7:8e:f2:fe:94:9c:b8:
a9:ed:b4:76:e8:c0:69:69:96:4f:92:68:71:7a:01:f7:3a:5b:
00:26:21:ac:ec:e6:ff:6f:18:f7:a3:e3:ac:a7:bd:92:d8:d1:
8c:b0:f4:69:4c:3a:19:c9:db:e1:a4:30:8e:6a:35:96:85:ad:
da:fd:d2:b7:54:ff:2b:1d:49:eb:e2:0c:26:dc:19:b4:1c:a6:
bf:3f:10:24:75:2a:42:78:7b:ad:fe:16:d8:49:8b:b2:39:20:
78:d4:d7:57:4e:8c:b1:fe:d3:5e:d7:27:9f:2c:10:89:f9:c4:
59:68:69:a8:8f:00:23:b5:55:b1:34:ef:1a:7e:c5:d1:8f:a5:
1c:00:65:b8:14:1d:4e:d2:e9:15:74:7a:f4:91:79:1b:50:a9:
08:36:b5:b5:04:ae:b2:97:7e:b4:e0:88:ea:68:c2:7d:e1:4c:
dc:d9:a5:46:b1:11:14:ce:58:61:23:e5:c8:c3:0f:27:39:75:
40:09:81:2e:d6:a1:3c:f7:45:f7:2f:c2:32:a7:d5:3e:47:d9:
77:19:53:b4:4a:3d:f6:eb:5e:6f:2b:05:73:9b:50:74:08:39:
63:6b:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:53:24 2025 by rpki-client