Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier: ZNQLY+eQm6mxHUb2pGIq7KS1oFebMQfPxZyuYnunVlk=
Subject key identifier: FB:01:F1:9A:77:AD:56:07:E4:1D:8F:2F:A1:F0:90:58:5B:03:EB:42
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial: 019A5007397701602141A790D72EC5ECEE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number: 0A91
Signing time: Tue 04 Nov 2025 18:00:41 +0000
Manifest this update: Tue 04 Nov 2025 18:00:41 +0000
Manifest next update: Wed 05 Nov 2025 18:00:41 +0000
Files and hashes: 1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=)
2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: OewuvQPpwDB6UUjaLLvB5axvVo4DkytEekoPQzVDr4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:39:77:01:60:21:41:a7:90:d7:2e:c5:ec:ee:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Validity
Not Before: Nov 4 18:00:41 2025 GMT
Not After : Nov 5 18:00:41 2025 GMT
Subject: CN=fb01f19a77ad5607e41d8f2fa1f090585b03eb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:d9:ad:07:73:5b:b8:d0:e2:6a:ee:6a:f4:
6e:97:91:06:b5:03:c8:27:b0:9c:a5:77:12:02:b4:
fe:94:9e:b0:ae:47:67:d6:91:31:db:5d:d2:37:4d:
9d:01:c5:ce:12:a4:15:b2:dd:80:b8:b6:4f:40:aa:
b9:76:4c:46:d9:dc:16:4b:ab:e8:9a:a2:e9:fb:d1:
10:ab:bf:0e:5b:2f:96:e6:40:7f:3c:35:5e:4c:9e:
d4:0e:9c:34:43:63:82:f6:65:49:2b:99:a4:56:be:
ae:f2:3f:91:64:26:7c:91:c1:f4:1c:a4:8c:8b:7e:
61:ed:0c:30:cc:11:ce:30:3f:f9:76:3f:53:02:f9:
96:03:f5:68:89:88:e0:5d:a3:66:f8:d7:7f:5e:67:
e0:9e:b8:d5:2c:ed:66:cd:85:7d:78:be:95:3f:13:
63:e9:ab:11:3e:61:c9:8a:71:05:93:be:b2:5c:e5:
2c:f6:58:3a:9e:70:42:fd:59:d9:72:53:04:2a:4b:
6b:90:a7:37:7e:39:98:97:e0:f1:df:b4:e4:13:21:
8c:ef:fa:3c:a0:be:3f:03:28:5f:4d:bf:e9:e1:25:
50:4a:94:a1:4f:6c:0e:24:b8:8a:a7:42:95:2c:c0:
31:19:45:4a:35:09:47:9f:1f:0c:88:26:cc:1b:85:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:01:F1:9A:77:AD:56:07:E4:1D:8F:2F:A1:F0:90:58:5B:03:EB:42
X509v3 Authority Key Identifier:
keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ca:e5:28:07:b9:d7:cf:56:36:cf:b4:e2:81:f9:7c:ac:6a:
d4:93:9e:7f:20:2e:ba:da:25:c3:47:33:8e:f1:45:87:a2:75:
e6:24:35:6f:1c:e3:7f:fe:31:16:4d:84:84:8d:64:f1:7c:1d:
a6:d3:9e:07:55:d1:dc:39:73:51:f9:d3:f0:bd:4e:1f:60:43:
2a:e2:c5:40:55:b1:26:a9:87:07:94:86:90:e8:6d:4f:65:84:
59:bc:13:4d:da:4a:96:bc:c4:98:2d:39:de:9a:8d:19:03:df:
13:aa:bf:80:7b:a0:c2:7a:46:64:95:a4:4c:df:5f:fb:13:f5:
43:70:29:98:f2:10:87:3c:83:31:7d:ce:c3:f5:c8:67:3a:5a:
1d:d5:ba:8a:73:52:66:f5:dc:88:67:13:a1:10:92:5e:1f:a9:
dd:3a:6d:40:25:bf:55:0d:9d:fc:20:ef:b8:79:9b:53:b1:d9:
cb:62:d5:10:f7:4d:33:77:7c:93:92:b9:da:c3:5a:de:35:07:
ab:b5:8a:e5:e6:94:35:93:c4:bc:64:4b:24:85:b9:22:ac:6c:
85:f8:a2:a5:a1:f0:73:f0:c2:bb:59:54:35:34:6d:28:6f:de:
da:04:50:c4:37:47:3a:31:66:4a:ae:f7:7b:59:0c:41:e5:28:
86:ff:3a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:08 2025 by rpki-client