Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
File: qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft (raw, json)
Hash identifier: PFjascJpQX7lZzuZd04svh+3wSt7GhJ7OLGuZ+gfFoM=
Subject key identifier: A3:96:DC:F3:4C:40:C6:0A:8C:A5:EB:F4:15:3F:B8:6C:52:58:46:9B
Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Certificate serial: 019A71B8A5A3423D6904F91C3B9297E082F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: Ksr0uLkRk2xgBxHqi3sQnitvzew.roa (hash: WSC+ZUBgflwaiPFD1qCd7YKaOxvqrLSTyitqpFIOSP4=)
2: qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl (hash: UlGSJg2CluSIrUEz23XNBLEFRgFFcNSUQSMGItMtkso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a5:a3:42:3d:69:04:f9:1c:3b:92:97:e0:82:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=a396dcf34c40c60a8ca5ebf4153fb86c5258469b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:67:8e:5a:f1:bd:25:82:ec:5f:a9:bc:ea:
83:e7:ec:0c:11:7c:af:71:16:cf:14:c6:44:aa:c4:
52:70:5a:0f:77:19:50:62:d5:fe:99:da:ac:3a:a4:
2c:06:5e:8e:e6:18:b3:ed:80:3c:b3:61:89:2f:fa:
b7:e9:62:90:f6:cc:08:fe:c2:8d:8f:da:04:c5:97:
fe:55:37:13:77:8b:72:6f:b1:6f:e9:83:42:09:19:
13:64:15:f4:5d:15:71:90:6f:76:5f:5c:68:0f:da:
8d:2a:6a:54:13:c1:4b:e5:0e:89:f0:84:2e:3c:99:
f8:c1:48:0b:12:73:fb:0c:71:dd:ba:13:71:27:86:
45:9a:42:28:95:48:99:e6:94:c4:12:26:eb:17:5f:
ff:2b:ac:ee:f3:92:cb:80:e4:9c:7b:b6:71:61:0e:
d2:0f:04:47:5c:30:82:ce:20:2f:ec:b5:63:88:87:
e5:83:ed:76:7a:74:ce:15:c1:2c:7c:38:b4:9b:23:
ef:88:d6:2a:18:42:5c:8d:1c:5f:34:f4:4a:5d:2e:
2a:d7:00:f9:4b:6a:43:3c:5c:06:56:6b:66:5c:25:
aa:b7:4f:8e:a9:0e:a2:8f:83:11:27:db:1b:ae:31:
f3:ca:90:dd:ed:5b:2c:2c:d5:ca:c2:86:60:93:5b:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:96:DC:F3:4C:40:C6:0A:8C:A5:EB:F4:15:3F:B8:6C:52:58:46:9B
X509v3 Authority Key Identifier:
keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e7:55:6c:d3:d7:a7:ff:84:70:02:75:75:f8:74:da:b8:50:
42:1a:7d:a0:b6:ab:1a:30:6c:75:ec:2e:20:7e:26:fc:7c:ce:
6c:50:e0:45:7f:fb:f6:d5:ca:8c:be:d5:00:bf:a9:9d:b5:4d:
e8:3f:6a:9d:7f:97:49:1c:10:1a:92:0f:9f:b2:f7:bb:c8:06:
6f:cd:4b:52:79:48:75:49:d7:6d:5e:d9:46:74:a9:3a:15:82:
2c:9c:d5:bb:73:65:06:9e:c0:5c:61:56:c7:ad:47:d4:35:5d:
77:83:3e:f4:40:1c:4b:5d:cd:54:4d:cc:e6:6a:a0:f2:09:9c:
95:d4:7e:b9:6d:3d:9e:fa:cb:ef:94:50:24:44:0e:b5:68:74:
62:8c:5e:5d:de:51:77:48:d0:ee:7d:b2:85:01:80:c5:b0:c5:
ee:d1:80:f7:b4:76:4d:55:ef:f5:1d:fd:b7:54:d1:e5:5d:b3:
cc:86:fd:93:3b:ea:af:01:8c:94:fe:55:c1:74:e1:54:15:03:
7b:2c:6f:bd:85:94:d0:7d:3a:e0:85:08:1f:d5:75:b3:23:74:
24:4b:c2:aa:c8:02:8f:50:29:c0:cb:c9:fd:7d:e4:2e:d2:da:
07:d8:f0:c6:fe:98:d4:96:da:b1:8d:cc:a8:c1:ee:47:cc:f3:
77:07:25:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuKWjQj1pBPkcO5KX4IL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNDRlMmU4MTJmMDlhYzRmZTJiNDdlNDI2OWNlMWEwMjAy
MWNhMGUwHhcNMjUxMTExMDcwMTU3WhcNMjUxMTEyMDcwMTU3WjAzMTEwLwYDVQQD
EyhhMzk2ZGNmMzRjNDBjNjBhOGNhNWViZjQxNTNmYjg2YzUyNTg0NjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3NnjlrxvSWC7F+pvOqD5+wMEXyv
cRbPFMZEqsRScFoPdxlQYtX+mdqsOqQsBl6O5hiz7YA8s2GJL/q36WKQ9swI/sKN
j9oExZf+VTcTd4tyb7Fv6YNCCRkTZBX0XRVxkG92X1xoD9qNKmpUE8FL5Q6J8IQu
PJn4wUgLEnP7DHHduhNxJ4ZFmkIolUiZ5pTEEibrF1//K6zu85LLgOSce7ZxYQ7S
DwRHXDCCziAv7LVjiIflg+12enTOFcEsfDi0myPviNYqGEJcjRxfNPRKXS4q1wD5
S2pDPFwGVmtmXCWqt0+OqQ6ij4MRJ9sbrjHzypDd7VssLNXKwoZgk1utaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOW3PNMQMYKjKXr9BU/uGxSWEabMB8GA1UdIwQY
MBaAFKpE4ugS8JrE/itH5Cac4aAgIcoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYt
ODY2NDBmY2EzM2JmLzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYtODY2NDBmY2EzM2Jm
LzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOudVbNPX
p/+EcAJ1dfh02rhQQhp9oLarGjBsdewuIH4m/HzObFDgRX/79tXKjL7VAL+pnbVN
6D9qnX+XSRwQGpIPn7L3u8gGb81LUnlIdUnXbV7ZRnSpOhWCLJzVu3NlBp7AXGFW
x61H1DVdd4M+9EAcS13NVE3M5mqg8gmcldR+uW09nvrL75RQJEQOtWh0YoxeXd5R
d0jQ7n2yhQGAxbDF7tGA97R2TVXv9R39t1TR5V2zzIb9kzvqrwGMlP5VwXThVBUD
eyxvvYWU0H064IUIH9V1syN0JEvCqsgCj1ApwMvJ/X3kLtLaB9jwxv6Y1JbasY3M
qMHuR8zzdwclPg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:38 2025 by rpki-client