Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier: H/kgicR9erQYk6/a5Uf5xKlSErXBJe5jIKXR8eNSL9A=
Subject key identifier: 77:91:87:88:18:1D:6F:77:FE:40:F3:8A:E1:3C:9F:11:4E:60:79:04
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 019A72938E02F892DF0FF164A998CD5F6C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (hash: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=)
2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: JGKXi7NMYNhUXNC5NIPwsqQHLaHFjCCcECHCCQM5k/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8e:02:f8:92:df:0f:f1:64:a9:98:cd:5f:6c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=77918788181d6f77fe40f38ae13c9f114e607904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:34:38:57:d7:15:16:f1:9d:8d:80:b8:98:8e:
6f:0d:02:37:a8:7b:a9:7c:1c:4c:2f:02:3d:9e:70:
e3:d5:59:81:45:3c:f5:ec:ef:3b:fc:80:81:4d:75:
0c:99:b7:8b:d0:e3:0d:48:8e:6b:d4:54:48:ce:f4:
fc:73:70:52:a7:f3:4c:b0:2d:fc:e3:9c:4e:91:19:
b7:bc:cf:ad:89:f5:6c:a4:f1:2b:7d:18:d6:2a:ef:
9e:b0:24:ad:64:66:db:a7:46:01:b8:e4:06:e0:2d:
30:aa:78:d9:25:90:31:5e:f0:07:e2:6b:9f:a0:a2:
bb:ba:57:04:13:85:8a:45:11:b0:1e:56:70:54:fb:
a2:1d:1d:fa:82:91:82:23:7a:dd:1a:e8:a3:f6:1f:
92:e4:ef:85:ee:a7:89:aa:ba:78:93:2a:13:62:d0:
c3:8d:3e:de:f9:95:48:ad:53:f3:58:fd:f1:7f:ec:
16:d4:13:49:b6:dc:3a:e1:5f:ea:f8:1d:95:82:a5:
bc:8e:a0:af:6d:d0:6e:3f:03:a7:57:ff:5d:2a:eb:
90:fc:ce:b2:b3:df:55:e9:55:07:76:93:30:d1:ff:
b7:7c:66:f0:fa:75:43:e3:0a:96:46:19:67:52:63:
67:e0:87:58:3a:9e:da:ad:01:b7:1d:4a:9b:97:a1:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:91:87:88:18:1D:6F:77:FE:40:F3:8A:E1:3C:9F:11:4E:60:79:04
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4b:cd:39:46:42:5a:06:9f:3f:d2:a5:3c:ec:3f:2f:b4:37:
a3:56:b8:aa:52:70:d3:8c:c0:0d:65:fb:bc:9a:55:5a:ef:5d:
7b:5c:47:39:73:0b:d1:5c:3b:69:3a:7d:c5:4b:8a:38:9e:8f:
d0:29:d4:eb:a8:fa:6e:df:64:e9:e3:8c:1c:ca:92:d8:e3:cd:
97:ba:71:c7:2c:9e:2b:ae:b3:38:31:13:66:b0:72:40:db:4d:
3b:1f:24:54:42:31:76:8a:bc:76:41:f7:0c:20:1a:d8:ca:ae:
8a:d5:d9:d0:70:d9:2a:07:ac:43:37:45:18:77:b1:32:5f:bf:
ad:6c:7d:16:e8:73:6d:f5:7f:d9:fc:e2:3b:cf:39:6c:11:b9:
e7:8b:e2:8c:fa:83:2f:90:44:ec:36:7b:4b:78:63:6b:b2:82:
9a:ec:27:07:9c:85:e0:da:a5:26:12:d0:01:a2:0e:35:b6:90:
81:67:b2:16:e1:2f:03:8e:dd:4b:1a:e4:57:dc:60:17:aa:11:
bc:16:65:3d:ab:9d:6d:27:1c:d3:f5:2c:64:b6:54:a8:49:3a:
1a:96:99:37:65:ab:00:3c:dd:1c:61:9d:6d:be:09:86:23:b6:
1d:a3:e9:7d:ec:78:27:36:c1:01:d3:ec:f4:30:6d:74:ce:73:
9a:54:3a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:39 2025 by rpki-client