Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
File: q6-0Li5v0JBX_KIbmQhNrDt68tA.mft (raw, json)
Hash identifier: BSdRPPqK2DFwbvz1tjH65b2ZJM+pI302T6pJ/CIYJos=
Subject key identifier: 37:DB:79:6E:D2:CA:A4:F3:F8:8E:04:1A:70:20:B0:A0:C0:26:A3:C7
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Certificate issuer: /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial: 019A7293DC265E99A5549A910B88BD90E241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 11:01:23 +0000
Manifest this update: Tue 11 Nov 2025 11:01:23 +0000
Manifest next update: Wed 12 Nov 2025 11:01:23 +0000
Files and hashes: 1: m33s4sgep6-q8UmRmhXl2lkYj9Y.roa (hash: SAyf+MEL6W5SBqvzjsdQj/Xgc4QN6O97LJUm4XtKLGM=)
2: q6-0Li5v0JBX_KIbmQhNrDt68tA.crl (hash: sqjgRMZj/ZmpsnpaVlstuPI2u3FU3eRZNWxey4iW5Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:dc:26:5e:99:a5:54:9a:91:0b:88:bd:90:e2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Validity
Not Before: Nov 11 11:01:23 2025 GMT
Not After : Nov 12 11:01:23 2025 GMT
Subject: CN=37db796ed2caa4f3f88e041a7020b0a0c026a3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:30:32:f2:1f:16:27:d8:9a:06:03:08:dd:
a3:d5:08:6a:a2:53:f3:b1:40:f1:10:af:a5:1d:e2:
f9:fd:e7:3f:93:94:43:8f:c1:19:bb:7d:41:cd:48:
70:3f:1d:93:4e:68:6b:79:ae:8e:a7:88:2e:96:11:
39:ed:44:cc:76:b8:f6:e6:31:d5:fc:fb:9b:64:78:
7c:31:48:63:05:71:c1:b8:66:a2:8f:34:65:8f:cd:
d9:52:ce:95:aa:15:14:80:5b:34:69:53:ee:9c:6b:
ec:7d:23:5a:e5:31:40:d9:32:a3:55:d1:22:be:41:
8c:e1:bc:ac:5c:67:9e:8f:d9:9b:61:41:08:18:56:
7c:31:a8:be:7c:e2:05:8f:90:ad:1f:80:24:d5:a2:
ef:9a:40:aa:c1:ce:0a:e2:ce:23:00:e1:45:0f:de:
e2:92:0c:d9:28:21:c5:38:d6:73:f1:7c:81:88:c3:
3b:fd:fe:86:27:dd:c2:b1:e1:76:41:61:a5:9b:06:
b9:26:5e:a5:a5:91:cf:74:48:e8:e9:8b:81:31:f4:
79:bf:c7:b0:73:c8:d0:e7:cf:ab:1e:9e:e3:66:f6:
26:bb:da:23:a0:b6:15:e8:1f:7f:c8:e3:f7:16:8e:
4c:2d:62:a7:14:5a:a1:c7:40:33:0b:53:3c:57:d6:
a6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DB:79:6E:D2:CA:A4:F3:F8:8E:04:1A:70:20:B0:A0:C0:26:A3:C7
X509v3 Authority Key Identifier:
keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:40:49:b1:7b:0b:9f:17:58:60:7f:a7:1b:79:8b:b8:72:a7:
0b:ec:b7:61:9f:46:df:7b:eb:18:cb:58:46:af:57:23:55:56:
3d:6f:19:f0:dc:08:e9:7d:55:0c:0f:85:43:c2:01:69:66:42:
ce:68:07:f0:5e:e3:09:07:0c:92:87:6d:5b:e4:ee:61:f0:16:
b2:67:2f:f7:0d:d4:09:5f:fe:04:ec:3f:2b:94:7f:e8:19:48:
e0:11:fe:83:6a:d3:6c:ff:09:39:fc:9b:95:85:93:69:14:f4:
89:a6:27:25:3e:a4:31:da:e3:78:20:d8:a8:a3:10:7a:e0:fe:
c2:07:0b:d9:e7:69:55:1f:9d:b7:ca:e7:c1:83:27:a8:39:b4:
9a:39:c4:7f:9c:60:35:88:8c:9a:5b:3b:83:aa:22:7d:4b:0f:
b3:7b:6c:82:7f:e4:22:cb:2f:7c:d7:ff:6a:2e:41:88:11:e5:
dd:27:62:05:8e:ec:dc:11:df:72:8a:56:70:5e:3b:01:0f:fb:
66:22:ad:d3:98:68:37:cc:ef:02:1f:e2:72:96:c8:3d:03:c7:
20:bd:ce:e7:88:60:f8:34:8d:65:2f:41:56:ce:e1:fe:ba:f1:
cd:88:f8:fb:29:39:54:70:f0:9f:4d:fc:b0:f7:a7:94:2f:85:
d7:43:64:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:16 2025 by rpki-client