Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: Ts2th6tuWHnTZeXU9VT5IgO3QB0aU1l4ftqssOIpYSE=
Subject key identifier: 23:BD:EB:64:4F:54:1E:DB:E1:F5:96:81:C4:62:0B:7F:FE:D9:61:9E
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 019A7293ABA652D606459530E6734CFE314D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 0A93
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: 6erG3SJtn2TNRyDkzUal0dRi1s8.roa (hash: zMaNZ9haJooDEzDMLzt1I2Ft1PlQQjaYiPOAhINpWfw=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: tlEw7RYpbvPc0JxJ7N6bJV0BcyDitf3cA1ENE1l3ZoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ab:a6:52:d6:06:45:95:30:e6:73:4c:fe:31:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=23bdeb644f541edbe1f59681c4620b7ffed9619e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:dc:82:21:15:92:7b:da:9f:3e:95:6a:5b:
9f:ef:ea:25:c8:3c:9b:9f:93:15:3b:09:c6:32:d4:
f3:95:3c:31:f7:b1:d2:e6:d4:3c:ae:39:c0:a0:f4:
fd:39:e9:89:7e:10:e9:c2:21:3d:53:ec:d7:0c:ee:
9a:55:d4:b4:cf:ea:53:b0:ce:25:9c:27:a5:f3:63:
0a:23:14:87:81:f4:39:74:67:40:51:c0:34:a1:c7:
51:6b:6d:da:e2:dd:b7:77:d5:8c:b6:ff:c9:9e:28:
e1:7c:e0:7a:3f:e3:cb:22:ab:c6:2d:d5:86:f3:87:
c9:6d:c1:4a:e8:68:75:f6:29:54:c0:de:5b:81:59:
96:9e:0d:39:15:49:56:51:88:bc:36:45:0f:48:ad:
b7:89:21:55:10:8e:25:25:52:9c:3d:cd:74:18:45:
d3:e9:0c:bd:29:fc:82:be:52:97:c6:59:2f:21:cf:
5b:56:29:58:75:ad:cf:8a:ca:3d:7e:ec:91:47:38:
82:79:bf:8f:f3:a9:89:80:5c:d6:30:26:fa:a1:c3:
92:8b:da:23:38:6c:c9:68:cc:0a:0c:14:f0:76:32:
53:b9:46:9a:ef:5e:da:76:43:a2:55:e6:b6:3f:e3:
60:6e:5e:76:82:a0:fc:7a:9b:a8:02:6f:d8:51:ab:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BD:EB:64:4F:54:1E:DB:E1:F5:96:81:C4:62:0B:7F:FE:D9:61:9E
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:98:2b:13:ca:f1:41:48:62:69:58:26:db:92:12:56:b3:1b:
91:7a:07:2c:42:7e:e9:63:9b:cb:62:f1:56:56:1b:f7:af:5e:
d6:11:bc:f7:16:5a:af:a6:4e:63:47:4d:06:aa:33:01:09:55:
df:77:99:d7:e5:ca:05:6b:e6:e5:3f:16:e8:13:6a:0c:55:e8:
2a:44:da:82:db:1e:32:41:ae:53:49:ae:63:9f:62:41:bf:71:
af:0a:9c:8c:a2:80:6a:7a:30:c9:d9:74:39:a3:7c:52:92:57:
7b:f2:82:e0:41:09:d9:7b:f1:7f:75:9f:78:16:40:11:31:e8:
e9:c9:25:6a:ea:e2:f4:02:7c:e6:37:c0:0b:88:d3:e6:43:d4:
c9:04:78:b9:a2:07:a7:1c:fe:df:5b:0b:a3:5e:fe:ac:4c:02:
20:15:60:09:05:ba:68:8f:02:02:1f:a6:69:d0:f5:c8:28:87:
d7:5e:69:86:43:b6:cf:8f:20:20:f1:25:92:25:47:ae:0c:71:
aa:55:13:5d:92:81:bc:c1:aa:a0:41:bd:aa:2c:40:5f:de:48:
1b:a7:97:1a:b7:5b:79:de:1b:bc:28:c0:9c:09:d1:38:48:3f:
14:c4:57:04:1d:2a:23:b3:3b:cd:44:5d:05:ed:3e:76:9a:4d:
df:47:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:33 2025 by rpki-client