Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: SNpbp1nYeDCfk7ew1uzu1acbHC/j1rr0rcMylbJ+Pas=
Subject key identifier: C8:38:C3:0A:AE:32:D8:99:61:CC:83:07:22:2D:54:73:9E:E7:E4:C8
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 019A71B8159CB5CE9E0C41C9AED28739AA72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:20 +0000
Manifest this update: Tue 11 Nov 2025 07:01:20 +0000
Manifest next update: Wed 12 Nov 2025 07:01:20 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: aMfdotvJlCKAplOM3YTboD3cVmA7jZpnCYth/Do0Wk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:15:9c:b5:ce:9e:0c:41:c9:ae:d2:87:39:aa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Nov 11 07:01:20 2025 GMT
Not After : Nov 12 07:01:20 2025 GMT
Subject: CN=c838c30aae32d89961cc8307222d54739ee7e4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:ec:57:87:cd:2a:a1:7a:e1:37:2e:1b:5a:
19:39:f5:00:66:60:3d:47:fd:51:db:75:12:b2:ec:
96:72:96:f1:73:e7:72:5b:a6:53:df:7c:c0:11:27:
32:69:45:a1:5f:02:ef:64:9b:73:f3:f0:f8:69:d7:
56:13:df:61:db:fd:49:95:0e:91:2e:e5:3c:2f:a8:
54:67:93:00:6c:e6:bb:74:ae:4e:d4:c8:9c:6d:ce:
8b:ad:ec:2c:a8:c0:84:68:92:95:68:a2:2d:4d:a0:
e0:bc:4a:a5:53:85:ca:78:6f:34:3c:2d:f8:af:36:
1c:71:41:dd:7c:ae:49:ab:aa:2a:1c:d9:46:d7:96:
3c:51:90:35:a0:18:9e:66:77:e5:f6:cf:f2:d9:74:
06:d1:00:dc:ee:f5:d9:e8:d1:02:ab:dd:06:63:1f:
00:92:24:b8:d2:04:12:8b:8e:18:71:b4:01:42:3b:
aa:9d:19:15:ba:71:5c:d4:58:49:e1:a1:5a:9f:b1:
0d:c3:4d:50:61:dd:ad:e0:90:b2:2c:df:c1:0e:a7:
79:b5:1a:14:8c:cf:71:02:b9:87:93:b0:6a:b0:97:
75:07:c2:2c:7e:ef:75:50:3e:ec:77:eb:d0:ce:b9:
c7:e5:d9:5b:4b:7c:86:03:73:25:cd:d9:f4:86:01:
81:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:C3:0A:AE:32:D8:99:61:CC:83:07:22:2D:54:73:9E:E7:E4:C8
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:94:7f:34:98:00:51:68:2b:30:ac:f8:09:80:60:ed:d4:e3:
ea:ad:fe:16:e1:a5:ae:79:c0:7b:ad:bb:73:18:06:aa:0d:9a:
37:71:57:88:e0:a2:74:52:2b:b3:7a:6b:65:e0:73:d1:36:ca:
c2:bd:e7:a9:bc:14:00:0f:ec:60:0a:56:ef:22:85:84:f7:b1:
25:cb:6a:db:eb:e7:5c:e0:d8:88:f0:3d:07:35:4b:a9:2f:82:
7f:8c:01:5f:eb:b6:d0:00:7e:26:99:87:99:1d:d6:09:ec:de:
45:46:66:49:f3:3f:70:4f:fe:2d:86:45:ea:5b:27:14:95:be:
59:8f:c2:c8:30:d3:42:5d:6d:74:b9:aa:2f:c2:d6:ca:ed:90:
83:91:15:ca:e4:d6:f1:e8:23:fa:b2:74:7d:c7:3b:1d:e3:17:
8b:4b:9c:0f:25:2b:a6:ed:a2:7d:4e:d7:45:a4:a6:93:25:7e:
48:77:d5:f0:8c:8f:61:41:24:92:4f:b7:32:09:ce:74:ca:c2:
71:96:a3:0b:40:9b:e2:5b:05:d9:f4:96:50:0d:c7:be:14:31:
ce:6a:ca:20:3e:0a:bb:21:ca:c6:6f:6c:4c:58:21:13:1c:f3:
f2:85:2b:dd:d1:ee:62:80:32:d3:29:f8:4a:a4:46:cd:bb:88:
35:fd:37:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:16 2025 by rpki-client