Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: x9muzEWZVr0WsObBHAuFr8R2OfuQyEvoOeYS7L7E3sM=
Subject key identifier: 79:80:04:85:BE:4E:88:FF:E3:D3:AA:1B:7E:12:73:1B:E1:7B:5F:9E
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 019A4EF5B2A088256516B70C7E2CFF471C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: OeWtg917UfE/VtehACbdh08B8zlyAhz4e61aEjVHXQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b2:a0:88:25:65:16:b7:0c:7e:2c:ff:47:1c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=79800485be4e88ffe3d3aa1b7e12731be17b5f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:39:b2:95:be:8f:d1:83:1d:d4:3c:f3:6f:
b3:3c:43:a8:79:bc:9e:c5:04:ae:e6:5c:1a:13:b1:
66:10:e0:98:e3:20:b3:3e:82:07:be:c9:74:b0:32:
f4:d4:ce:c3:fa:36:af:e5:54:b6:4b:d4:e3:0d:7f:
68:73:99:80:93:1a:b6:fb:7e:fb:d9:dd:9d:fb:7f:
10:12:a5:f2:a8:15:88:b8:3f:d4:e9:54:d7:41:61:
93:0b:a2:c0:74:00:45:f6:20:67:15:9a:81:f3:ec:
9a:d0:ea:94:0b:0a:cf:ec:64:96:5c:17:0e:16:a0:
c0:9c:45:76:19:cf:3e:3c:aa:f5:a9:d7:ae:bb:07:
43:a3:65:7f:bf:0e:f7:e6:52:98:bd:3c:c9:7e:e0:
cb:a4:37:9e:77:6d:ed:64:f8:6c:62:0e:5d:06:73:
03:91:d3:09:25:0b:38:19:9f:b2:49:bb:8b:29:67:
57:4e:33:17:65:ee:92:16:cb:51:35:1c:9c:79:6c:
89:fd:d2:d1:08:57:fe:58:63:63:41:7d:d3:07:91:
7e:71:82:38:6a:54:34:4a:17:9a:dc:3c:2f:e8:91:
9d:38:57:09:9d:4f:08:25:f8:ec:ad:f8:c0:64:cb:
84:cf:12:d1:bc:13:36:1f:2c:b8:79:cf:5a:46:63:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:80:04:85:BE:4E:88:FF:E3:D3:AA:1B:7E:12:73:1B:E1:7B:5F:9E
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ac:10:c4:63:ef:03:a4:c1:9e:e5:ce:07:0e:be:ac:be:8e:
d7:43:e5:e1:af:6e:1a:a2:fa:d1:24:17:b3:62:e7:23:88:7a:
77:c1:f8:cc:b7:b8:4f:0b:e4:8d:26:e3:c1:10:07:80:61:73:
f2:0b:8f:14:cf:a7:90:61:b7:00:d2:a8:74:30:40:05:94:80:
95:c2:49:ee:97:8a:ff:ad:77:db:3b:61:4e:d5:c5:60:f9:90:
bf:1e:f9:d9:27:cf:87:d5:a5:00:3b:fe:f9:0c:fe:5b:8b:24:
af:44:85:99:82:5f:a0:ab:38:fd:67:7b:6c:e9:46:71:37:ce:
0a:94:a0:b8:27:bb:ca:3d:9c:90:9f:c7:8d:44:31:b4:bb:d8:
a0:5e:06:3c:8a:87:9b:68:e5:1a:1c:cf:a4:1d:5b:32:61:06:
f4:cd:90:00:c6:b6:fa:68:21:83:ca:28:cd:26:da:b3:4a:4b:
9b:6f:cb:f3:f7:78:60:1f:74:5c:d0:7d:f2:23:ae:85:83:fb:
50:0b:06:8f:91:06:10:b3:53:b6:17:ec:04:a7:52:d8:d1:0f:
74:76:b2:2b:59:f8:05:e1:bf:85:e3:6a:be:f9:62:c1:39:e7:
46:2e:8d:ea:2d:a3:db:cd:ef:94:8d:91:5e:db:7e:78:15:e8:
f2:da:04:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:39 2025 by rpki-client