Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: MpwS5ZWEHquT2+gijqB3jEwBPFYAwAzBEHo4uVw0Oe4=
Subject key identifier: 20:9F:46:F8:0A:33:2D:FF:0C:9B:E1:0D:40:5D:FF:A1:1B:D5:BA:57
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 019A4E19087A2F1310499281FB51D7778764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: XaK/erWAyeCC49wqxkP4k7L+3cTqoHKEPvAHfuNvnM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:08:7a:2f:13:10:49:92:81:fb:51:d7:77:87:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=209f46f80a332dff0c9be10d405dffa11bd5ba57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5d:d1:e3:0f:93:02:78:f9:0a:ab:2d:05:c0:
3d:8d:76:a1:86:27:16:a6:a2:ee:45:46:2c:16:ed:
9c:4a:f5:87:52:76:65:fa:2f:7f:24:7e:04:9c:d9:
0b:f9:db:66:7e:4a:21:54:1e:94:ba:fe:c3:cb:c1:
9c:af:dd:e6:ad:ee:2f:8c:de:5f:ab:33:4a:a7:40:
5e:d0:ec:da:7b:4c:79:e1:db:71:26:ae:91:fc:0d:
25:d4:63:06:2e:80:ba:73:90:2e:0a:bd:39:e2:af:
e3:03:0c:89:72:ae:7e:32:06:81:1e:1b:6e:ab:75:
d8:e4:82:2e:5e:b1:f5:45:cc:43:02:45:4a:49:db:
84:68:d4:d8:63:5e:b3:8d:c1:9d:c4:57:52:d5:38:
e9:86:9b:5d:d7:14:45:c0:3e:31:d9:12:bf:bd:c5:
b4:45:61:05:92:0f:84:00:9c:c7:bf:29:a6:0d:3b:
05:14:94:cb:9b:df:7a:6c:06:12:c7:b9:05:ba:7e:
1e:0c:b2:b2:e0:35:ae:ba:6c:41:38:57:47:04:ad:
7c:64:43:2e:23:72:bf:98:f7:1b:88:af:7d:84:80:
e5:6b:8c:2f:28:a2:25:8e:07:d7:21:1c:20:b2:98:
24:3d:59:8c:5c:3f:ee:79:d1:fa:8c:1f:be:31:07:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:46:F8:0A:33:2D:FF:0C:9B:E1:0D:40:5D:FF:A1:1B:D5:BA:57
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a8:fa:80:ee:72:59:d9:6e:2e:d6:d4:c3:59:4f:e3:e4:10:
c7:47:ea:87:e9:9c:f4:a8:b7:53:8c:f8:a7:e7:46:ac:a8:d6:
ce:61:3c:9c:68:f7:cc:12:84:74:7e:14:61:1a:05:5f:03:27:
89:70:39:d6:d2:0c:d3:43:a8:5e:ee:33:d6:7e:b5:6c:6e:f6:
df:04:4b:03:5f:89:de:6f:3c:18:00:9e:84:69:d3:9f:e1:3a:
51:94:20:89:56:03:57:9e:92:69:66:c4:a3:b8:5f:f7:ff:56:
9c:e5:e0:1f:97:28:34:5e:66:56:6e:a8:d4:51:d8:90:47:63:
1a:ad:96:4c:7b:de:8e:b8:fc:39:f4:0c:43:4c:34:8e:f1:e0:
b3:12:9c:f5:5d:0d:f0:06:35:f0:7c:8a:51:e0:48:ee:04:fa:
81:0b:09:a0:3d:e7:74:e3:2f:a1:86:d9:61:c5:38:8c:bc:08:
e1:26:a6:50:8f:2a:ac:00:3f:93:9b:44:31:90:c7:ab:c2:4b:
1a:d2:d6:71:c2:df:4c:a2:39:2f:c1:39:a5:e0:2c:7b:72:ca:
ad:69:07:73:4c:fe:92:43:44:09:51:c8:46:00:c3:7f:3b:97:
a9:f4:1e:6a:fb:78:48:ea:80:fa:f6:4c:30:e9:25:b5:98:86:
7f:dc:68:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGQh6LxMQSZKB+1HXd4dkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MWZlMjY3MmM4ZjFjMTJiMjdhZGEwZmNjYmFhN2MyMTJj
YmQ3MWMwHhcNMjUxMTA0MDkwMDU0WhcNMjUxMTA1MDkwMDU0WjAzMTEwLwYDVQQD
EygyMDlmNDZmODBhMzMyZGZmMGM5YmUxMGQ0MDVkZmZhMTFiZDViYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA613R4w+TAnj5CqstBcA9jXahhicW
pqLuRUYsFu2cSvWHUnZl+i9/JH4EnNkL+dtmfkohVB6Uuv7Dy8Gcr93mre4vjN5f
qzNKp0Be0Ozae0x54dtxJq6R/A0l1GMGLoC6c5AuCr054q/jAwyJcq5+MgaBHhtu
q3XY5IIuXrH1RcxDAkVKSduEaNTYY16zjcGdxFdS1Tjphptd1xRFwD4x2RK/vcW0
RWEFkg+EAJzHvymmDTsFFJTLm996bAYSx7kFun4eDLKy4DWuumxBOFdHBK18ZEMu
I3K/mPcbiK99hIDla4wvKKIljgfXIRwgspgkPVmMXD/uedH6jB++MQdf+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCfRvgKMy3/DJvhDUBd/6Eb1bpXMB8GA1UdIwQY
MBaAFKkf4mcsjxwSsnraD8y6p8ISy9ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82YzA2YzktM2Y0Ni00NjU4LWFlODkt
OWJmMjI2NDAyZmQ0LzEvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82YzA2YzktM2Y0Ni00NjU4LWFlODktOWJmMjI2NDAyZmQ0
LzEvcVJfaVp5eVBIQkt5ZXRvUHpMcW53aExMMXh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKj6gO5y
WdluLtbUw1lP4+QQx0fqh+mc9Ki3U4z4p+dGrKjWzmE8nGj3zBKEdH4UYRoFXwMn
iXA51tIM00OoXu4z1n61bG723wRLA1+J3m88GACehGnTn+E6UZQgiVYDV56SaWbE
o7hf9/9WnOXgH5coNF5mVm6o1FHYkEdjGq2WTHvejrj8OfQMQ0w0jvHgsxKc9V0N
8AY18HyKUeBI7gT6gQsJoD3ndOMvoYbZYcU4jLwI4SamUI8qrAA/k5tEMZDHq8JL
GtLWccLfTKI5L8E5peAse3LKrWkHc0z+kkNECVHIRgDDfzuXqfQeavt4SOqA+vZM
MOkltZiGf9xogw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:36 2025 by rpki-client