Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier: xG+bAvvc9+muGoCmX51VhbDrIO3wpG4xnHD7BERbOSk=
Subject key identifier: 95:F8:94:EB:5E:AD:DC:B8:AF:F0:37:FC:81:DC:31:5A:D1:E3:36:17
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial: 019A70A545EC736E7ECDFCF10EA037B5D927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:01:10 +0000
Manifest this update: Tue 11 Nov 2025 02:01:10 +0000
Manifest next update: Wed 12 Nov 2025 02:01:10 +0000
Files and hashes: 1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=)
2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: IchwB885Hjp6kHAjfXJByOP+abgL1+H4RmpGcatteHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:45:ec:73:6e:7e:cd:fc:f1:0e:a0:37:b5:d9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Validity
Not Before: Nov 11 02:01:10 2025 GMT
Not After : Nov 12 02:01:10 2025 GMT
Subject: CN=95f894eb5eaddcb8aff037fc81dc315ad1e33617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:35:d5:18:a5:40:05:1c:a6:e4:3b:e8:08:
54:e0:0f:2e:4f:40:c5:bc:11:7f:36:a7:95:66:32:
49:68:73:8b:a0:59:eb:b8:24:8d:ec:72:5e:a2:fd:
2d:75:58:e2:fa:c6:39:d5:a1:8a:2f:5d:e5:7d:21:
4d:68:82:9e:89:11:48:ef:c3:0d:ec:a8:84:9b:a1:
07:ee:b0:f3:85:d8:9c:43:6f:85:fa:65:0f:ae:a4:
f2:ec:1b:a2:e7:de:4a:bc:56:5c:df:30:76:c4:6b:
9d:59:8f:6a:85:ee:d5:9b:48:22:17:8f:c6:f0:0e:
0a:e3:b1:55:2d:52:6a:11:58:93:a0:d7:90:50:e8:
e9:e0:ab:62:ae:1c:e5:16:dc:39:70:cd:35:54:e5:
c9:2b:9a:53:2c:e4:65:08:88:10:b2:a9:dc:5a:3b:
56:ca:16:c8:7b:57:63:99:f8:db:cc:4b:a4:d0:72:
c4:4c:19:5c:7b:71:75:7c:7c:97:d2:f0:76:da:58:
a7:ff:6b:77:e8:18:c0:59:5f:8d:34:a4:0b:8c:80:
9f:2d:09:41:66:67:65:86:7e:0a:b0:73:a0:73:49:
0b:90:5f:08:62:2e:cd:b5:b6:5a:29:4e:db:4d:37:
76:43:ca:d6:fb:80:5f:92:fa:60:7f:f0:37:af:f3:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:94:EB:5E:AD:DC:B8:AF:F0:37:FC:81:DC:31:5A:D1:E3:36:17
X509v3 Authority Key Identifier:
keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:be:b8:04:dd:91:61:13:e1:4c:86:9c:2f:ae:8b:63:fd:4c:
4a:23:11:b0:33:47:28:98:ad:4a:c0:8b:74:23:01:cc:86:fe:
05:f2:9a:cb:2d:55:dc:40:a4:0b:3a:9d:10:37:09:b0:0c:5a:
86:c8:fc:0d:15:54:91:93:eb:19:5e:33:b9:c0:94:41:aa:d6:
5f:d5:51:e7:3d:6b:05:e2:73:3f:dd:e3:6a:cf:f3:93:d5:55:
08:b4:27:4e:02:8e:60:c0:06:bc:7f:b1:13:ce:86:2e:49:c9:
cb:78:4b:56:33:35:af:df:1f:ef:75:e1:c9:fe:18:44:1f:7d:
5f:03:46:89:b7:f4:5e:96:58:68:b8:21:29:58:50:33:ce:b4:
5d:e0:c4:e8:09:26:10:6a:8e:aa:0e:7b:0c:06:4d:7a:bd:9f:
1a:8f:2b:c0:96:3e:68:31:17:d2:d4:f0:83:5d:31:27:b8:fd:
34:62:a7:f9:3e:63:05:e1:51:e0:f2:b6:b6:9d:5b:66:1d:d3:
e7:36:91:ef:05:ab:48:45:5e:66:55:22:c1:87:c4:64:2a:19:
01:55:ff:db:8f:11:10:b4:91:5f:75:89:82:89:c8:50:ec:82:
e8:bc:3c:65:14:e9:51:a8:d7:59:77:70:9d:bc:b7:cc:63:f7:
48:9d:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:48 2025 by rpki-client