Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
File: QwFWVAgleMSUbNJ74eiaPddWL6Q.mft (raw, json)
Hash identifier: kmb/2CNHAtHo1uMTsPbKjnNfJNoma3DXIJx7XwrC/MY=
Subject key identifier: 16:A8:2A:28:03:64:87:13:27:7E:3D:63:99:DF:03:D2:F2:14:96:77
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019A4E18F0DC42B50CE3B7A8CDDFD30C1F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: 3eQ1S8uuA5rjKr45UcvylppbYDU.roa (hash: vQeG0u4yjs22R45FJRm/clzO1Z1gNnp6n1vY2dqT/jk=)
2: QwFWVAgleMSUbNJ74eiaPddWL6Q.crl (hash: 0XSJWRDQvXomMDIcQVzDE06/YPCp/HvIL/fBmcDd8Kk=)
3: v1Pwr5xvdbbmpnihx2cCK9c0-pk.roa (hash: cRnPjj7eiLAD4lbp2VFMgeLmxV7rEoy5VNzAeh72O+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f0:dc:42:b5:0c:e3:b7:a8:cd:df:d3:0c:1f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=16a82a2803648713277e3d6399df03d2f2149677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:12:cb:60:24:08:46:61:77:40:c4:ad:cc:
e6:3d:20:20:05:13:ec:21:09:6f:34:72:33:c0:47:
28:54:0d:0e:fe:7a:48:2c:0c:f5:e6:f7:df:6f:c8:
49:db:ec:74:d2:fd:8e:30:21:cd:be:00:52:c3:ba:
47:3d:4f:22:e9:6a:ec:37:ce:69:f7:68:15:3d:27:
20:76:6c:08:a8:78:02:50:21:f8:7f:4f:de:22:02:
e1:8c:cc:d2:99:03:10:a3:07:33:60:05:7a:0c:bb:
9d:15:d5:ba:da:25:01:dd:38:8b:c5:37:16:9b:4c:
fa:1b:ec:f1:2e:94:e0:7e:78:d6:b1:1d:be:b8:a2:
fa:b9:fc:f1:21:bb:ea:b5:ee:d7:9f:a4:be:b2:6f:
1e:86:a5:f1:17:e6:17:df:e2:e8:86:3f:97:b5:d3:
63:4b:9e:0a:7b:ad:cc:0e:1e:fd:d2:34:55:13:c3:
c5:37:80:0b:c0:4d:49:cd:09:42:cb:66:66:6a:ca:
8d:51:7b:10:06:0e:eb:69:ad:db:23:a7:a5:0e:21:
2d:e5:eb:16:c8:d0:a1:e8:07:72:bd:ea:0c:b0:78:
b8:0b:2e:a4:b8:76:26:57:c0:05:a9:49:eb:b8:43:
5a:cc:79:a9:55:aa:9b:bb:93:cd:6d:fb:b0:a0:3e:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A8:2A:28:03:64:87:13:27:7E:3D:63:99:DF:03:D2:F2:14:96:77
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:b7:c9:ee:61:77:62:52:98:f7:17:12:13:28:d6:9d:b7:cf:
78:23:b3:3d:1e:51:aa:60:9c:4a:f1:33:ef:0e:d2:c2:3b:95:
b4:fb:17:5f:01:4e:a9:e8:57:7a:ae:f3:44:75:c8:50:67:0a:
37:0a:59:11:31:c6:ee:79:d4:70:72:67:e8:00:2a:a3:91:45:
40:81:e2:6a:cd:1a:9e:c7:00:64:d6:06:2c:8c:c9:15:a4:08:
ec:d0:81:b6:7c:aa:16:0f:5d:ac:86:19:7b:5f:50:67:e8:4e:
cf:72:db:eb:92:f2:31:a8:89:b0:67:f6:01:33:cd:8b:c1:a9:
ce:f6:4e:b1:56:6e:e0:be:e2:78:07:77:c5:77:c4:46:9d:16:
03:59:39:bd:ba:65:e9:6f:c7:a6:47:15:66:9a:ab:f1:59:21:
33:7e:5d:00:78:fb:70:c9:1f:eb:70:91:e0:4d:28:39:03:9b:
ea:36:c0:10:16:c9:68:59:ba:e3:e7:56:8d:79:9b:f0:7d:10:
98:4e:7b:8d:20:23:fa:44:6c:53:e8:26:f5:32:45:66:5e:cc:
4e:e4:04:6f:77:4e:c4:64:7a:7e:42:18:e9:7d:1a:3d:2f:37:
26:a1:01:61:6f:9e:52:d3:13:79:cc:19:0c:e7:e5:93:85:72:
dc:c9:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:45 2025 by rpki-client