Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: h8kOrPQfEGneYPzJb3lQ625IS5dVMCzTKjWFJrgYnrI=
Subject key identifier: 48:1A:9F:2E:C4:EB:B9:9D:41:67:2F:EC:63:52:E7:29:7E:37:83:D0
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019A4FD01D3A2FBAAFC5F17D3D5A1A759888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 16A2
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: Fo0V6/sy0n/rPn85iB0TTmRpMgIhpGkifyWii+luuZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1d:3a:2f:ba:af:c5:f1:7d:3d:5a:1a:75:98:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=481a9f2ec4ebb99d41672fec6352e7297e3783d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7a:21:78:32:16:34:8c:61:fb:6c:62:13:c1:
eb:e6:45:86:44:f8:12:97:9c:6a:5f:ed:5d:87:a6:
4d:83:5b:ae:2c:68:e3:99:f3:53:07:5f:e9:bb:33:
0b:5d:6a:00:06:66:78:4a:8e:3e:8d:3e:93:50:be:
69:eb:bc:87:15:b8:69:87:e8:9e:67:8f:6a:8d:6c:
21:a5:c6:1d:98:6f:b5:47:4b:e1:7b:4a:e6:99:79:
65:bf:4c:d7:88:4c:80:95:ed:ae:c6:76:4b:f4:4a:
32:54:e0:4d:aa:eb:c0:9c:e1:74:70:7e:63:37:e5:
1e:dd:b2:57:70:6a:ac:82:2d:50:2f:55:2f:c9:d2:
07:1f:fc:b2:01:4a:ec:18:66:18:16:7d:cd:68:fd:
e2:98:26:6b:78:43:e9:32:b0:90:8b:b1:74:fc:4f:
59:2d:d5:ea:85:30:df:5f:f5:f7:ef:ba:d6:df:0e:
cf:6b:66:65:fb:50:fa:4a:40:8e:52:c7:21:0a:b9:
e7:71:9f:10:e0:af:60:9c:b3:4f:41:79:80:90:d8:
37:f6:2e:da:f6:e2:2f:81:de:b0:6b:cf:27:7c:dc:
c8:c2:fd:e4:14:20:1f:28:60:6e:95:e1:01:87:09:
d1:48:df:9e:68:cd:6a:43:7a:61:cf:cc:8f:92:46:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1A:9F:2E:C4:EB:B9:9D:41:67:2F:EC:63:52:E7:29:7E:37:83:D0
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c7:d2:9f:d3:15:29:82:37:f7:b7:86:2e:13:04:5b:06:27:
1b:9d:26:8d:4d:4a:87:05:e5:a3:9f:e0:34:9b:79:30:0e:60:
b2:f5:35:ae:3f:4e:da:73:20:dd:53:61:91:a1:cc:66:18:90:
0a:de:fc:46:3c:af:96:79:c5:c2:de:62:f1:17:e4:5a:42:13:
d4:fb:d3:da:04:bb:52:cc:0d:5d:4c:cb:e8:95:f6:a1:ac:98:
c6:82:f5:68:c0:fb:00:5e:88:5c:46:1e:0c:01:64:72:75:97:
24:f2:4c:a8:32:5a:5d:3e:0e:01:11:3a:25:65:18:91:ff:e1:
0d:02:c2:1b:78:1e:0b:89:55:1b:24:17:44:e4:5c:e0:44:38:
c3:9f:8b:71:09:16:ac:71:e3:7a:92:48:cf:6f:f9:e2:80:61:
e0:6c:18:87:fb:a0:2b:d9:3b:01:a1:2f:68:a2:7c:50:f3:1e:
b1:32:cd:f4:92:88:a0:76:da:03:b4:7d:fa:60:fe:f0:fe:6d:
e2:50:5a:1b:06:7c:2b:68:65:2b:2e:17:33:14:cf:ff:49:c5:
fe:e1:4a:bb:3b:f5:12:06:ee:97:cd:74:db:7a:42:35:6d:fa:
68:16:64:78:ec:eb:75:ae:14:6d:7f:43:8c:fa:33:38:27:a8:
56:03:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:38 2025 by rpki-client