Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
File: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft (raw, json)
Hash identifier: OmFIwNIA9P+KAnVF6zlXRW3k2BeBLwoLxG4RUDnP2Tw=
Subject key identifier: 4F:BE:03:78:45:23:D3:5A:E0:C5:30:8F:18:92:09:06:87:C1:04:5A
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Certificate issuer: /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial: 019A711329E96ECBEDF9C06B5AE2190D16A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:12 +0000
Manifest this update: Tue 11 Nov 2025 04:01:12 +0000
Manifest next update: Wed 12 Nov 2025 04:01:12 +0000
Files and hashes: 1: 1P9fVQVtxSb2G4sWpvSG7bw0bpw.roa (hash: 6VyhtcepI1NTxHwb+zyOQuM2NICKUmki0vqcGxvdoCg=)
2: 5XE0gfIHPBVwos97p8SFxETissU.roa (hash: 6gs7iKR2AXCvfwIabzt43SR9/MCH860ldfvLILxKt+M=)
3: anHJmbU7C2zjE1lGpkfnKPRRqS4.roa (hash: svRwOAhrUBlYXwTbfNYBTqirI+LGeE+CWUjAVTOIKpw=)
4: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl (hash: 9KsKAa7fz/uNeks4B1HzlAV8SoDslTGa3Fc2cN1yJq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:29:e9:6e:cb:ed:f9:c0:6b:5a:e2:19:0d:16:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
Validity
Not Before: Nov 11 04:01:12 2025 GMT
Not After : Nov 12 04:01:12 2025 GMT
Subject: CN=4fbe03784523d35ae0c5308f1892090687c1045a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:6e:75:61:19:92:fb:b0:e7:d1:49:05:95:
28:8b:ba:ec:63:0b:b5:17:fa:55:83:33:02:01:38:
41:21:66:fb:c7:1f:a8:d9:b4:d4:9c:a5:d9:c7:56:
79:9c:87:f5:e4:0b:0d:98:57:07:0c:32:1a:34:de:
f7:02:3d:aa:ac:60:31:8b:d1:12:25:58:d4:b4:e6:
67:df:6f:12:f4:3c:fe:2b:58:16:43:bb:6e:1f:30:
f2:61:75:38:72:a2:a7:5e:ef:8e:52:4f:c9:d5:09:
75:43:38:45:47:1d:14:7e:b5:97:11:f3:ba:83:fb:
69:88:f1:b7:1e:76:4d:98:01:b3:fe:75:af:87:42:
89:82:4e:61:58:7b:a4:8d:59:8f:ba:4e:87:3f:74:
04:08:8f:90:2b:7d:e8:e7:ae:2e:81:11:57:7a:92:
ab:2d:5a:83:d4:9e:a5:d6:7d:8a:d2:eb:82:b9:42:
be:73:79:27:b0:28:fb:7a:5d:ef:f7:5d:31:b5:a3:
df:82:a0:62:08:1a:2e:03:56:d2:21:45:fe:26:3a:
0b:69:d5:31:39:f8:76:06:60:d4:df:b7:8a:6a:25:
71:6f:c6:97:63:70:40:96:21:59:76:24:f5:d0:86:
53:f2:b3:99:c7:79:85:32:44:bc:a5:a4:f9:d5:d3:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:03:78:45:23:D3:5A:E0:C5:30:8F:18:92:09:06:87:C1:04:5A
X509v3 Authority Key Identifier:
keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:45:15:6c:9c:2c:ed:b9:68:b6:7d:13:59:35:0a:95:cb:a8:
ff:1a:47:7a:e1:3e:82:4a:d5:7a:34:56:c5:25:a0:1a:1b:56:
11:17:4a:64:e5:91:80:14:fa:ab:46:92:2a:9f:fd:64:53:24:
c7:64:55:fa:d3:e2:19:5a:2e:d1:cd:c3:a8:8d:d8:03:7e:fc:
9d:3e:f0:62:70:1e:f9:26:bd:d6:ae:1e:91:cc:c4:06:96:df:
a9:b7:7f:6e:96:b0:b2:84:f5:f0:d4:ad:55:25:be:b8:8a:78:
85:ec:8e:76:2a:e3:b1:ba:ae:1c:dd:bc:a3:16:79:92:5e:47:
9e:0f:e5:6a:8e:02:ff:a8:41:38:cd:88:20:4d:4d:7b:9e:1d:
8b:1a:b8:cd:da:23:36:67:41:3d:6b:e0:83:75:c4:8f:a9:5f:
f2:90:ef:5d:d9:dd:67:61:0f:32:fc:af:96:f6:b0:d3:a6:f7:
17:a5:dc:8b:6c:43:54:3a:54:ac:f3:98:00:62:01:89:d1:40:
be:7d:8d:b1:2e:1b:51:33:20:64:31:75:88:50:27:63:94:48:
57:a7:24:ac:9b:e4:cf:fe:08:56:ce:cb:72:ef:d0:40:53:d3:
5b:a5:2d:d7:41:91:32:19:85:0e:1d:aa:1b:e2:c4:ec:ff:00:
09:a1:39:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:54 2025 by rpki-client