Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
File: qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft (raw, json)
Hash identifier: eJSZ2fhIgoJfpjT6WntCW0dYSj1jRreWQQnjl1+CEss=
Subject key identifier: C0:99:FF:3D:82:B9:9A:81:CE:F2:62:46:8F:07:47:0C:A7:8B:13:9D
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 019A4E18FFA6D53CF028177B294C99EA85EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 09:00:52 +0000
Manifest this update: Tue 04 Nov 2025 09:00:52 +0000
Manifest next update: Wed 05 Nov 2025 09:00:52 +0000
Files and hashes: 1: 1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa (hash: XnlKdK7HSE5Z4YnaNQLgBs+MxP6gmaSDYHLIExtRWFg=)
2: qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl (hash: R3GvctdCgpHksYp6LaJEyPOxsueyR8kD2fbaTojBLl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ff:a6:d5:3c:f0:28:17:7b:29:4c:99:ea:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Nov 4 09:00:52 2025 GMT
Not After : Nov 5 09:00:52 2025 GMT
Subject: CN=c099ff3d82b99a81cef262468f07470ca78b139d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e9:3b:a4:79:01:b6:3d:c7:9b:5d:01:ed:1e:
ae:26:7f:24:f2:1f:cc:76:4a:ff:cc:e8:65:c2:91:
df:25:c1:04:31:52:90:38:3d:46:ad:fb:70:7c:5a:
27:73:48:ee:99:72:e1:2f:76:03:47:21:f6:e0:2e:
05:a3:dc:2b:84:72:99:b1:eb:4d:b8:a8:d0:f0:cd:
6c:a9:12:57:21:c0:ff:ea:d1:21:79:d6:a8:29:e0:
a0:f0:61:2f:3d:fd:3a:85:fc:ee:95:29:34:48:73:
e2:a7:5a:cf:5f:c1:9e:62:11:5e:12:37:53:68:a4:
63:d6:93:d2:87:ae:48:3e:02:8f:26:97:f9:8e:a8:
62:93:8b:3b:9d:34:c9:a8:91:81:81:0b:09:07:ef:
0b:b1:a5:a1:97:ab:df:ea:ff:83:af:cf:2e:c9:cc:
41:62:63:af:42:4d:85:af:85:a7:83:2e:b0:79:1c:
cb:14:be:7c:da:36:21:9e:e7:50:6d:f0:8b:c1:45:
ae:d8:ca:56:72:f8:15:ff:e6:68:54:5d:aa:42:a1:
10:84:99:00:72:d2:0f:a6:7b:28:d7:cc:6f:5d:4a:
ba:33:89:5b:db:6d:03:19:a9:8b:75:4e:be:ec:50:
46:eb:d2:4d:36:30:81:18:1f:d2:f8:5f:e5:00:42:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:FF:3D:82:B9:9A:81:CE:F2:62:46:8F:07:47:0C:A7:8B:13:9D
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:56:55:f6:15:15:4f:5d:e0:46:eb:92:6f:16:92:37:a5:bc:
e3:42:f0:f1:57:c1:d5:81:3b:83:8e:63:b4:3f:7e:e5:38:ee:
61:92:3d:5e:aa:b7:45:8b:3e:13:29:f6:aa:ae:e9:27:92:43:
ce:01:a7:40:a2:be:2f:2f:25:a5:0c:f0:1c:79:f1:0f:b7:fd:
b5:bb:ff:ad:2e:ad:ce:1c:25:b2:0c:2d:89:c3:be:cc:66:f6:
90:75:fc:eb:28:ac:fe:bc:f8:df:d5:e3:ec:7a:ed:fc:75:68:
12:7e:9e:66:60:b1:e7:fb:69:fb:fe:1e:b4:c6:d7:71:02:bc:
9c:48:fc:80:23:9a:26:4d:43:fa:d7:bf:22:f4:38:2a:bf:bb:
ff:fc:e8:f7:97:01:5f:00:86:b2:c3:df:19:ca:53:ca:45:79:
6b:7b:9d:74:d5:50:69:33:03:70:6e:7a:9a:0c:48:6d:af:4b:
59:76:96:dc:28:e1:b5:8c:22:e5:47:57:94:6b:57:65:6d:68:
7d:aa:4b:8a:77:c4:59:f3:85:fd:84:f7:b5:6f:aa:6c:92:04:
c5:93:d0:ca:db:23:3f:39:b4:77:c4:f7:27:93:11:06:28:72:
de:d1:04:dc:b0:1b:8c:97:cb:e1:68:5c:03:1c:31:06:21:8a:
11:80:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:57 2025 by rpki-client