Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: 88upp6TjmQgk7ZHhfRvJ6Bd0Yfcao4e2MBZzKwRY+Uc=
Subject key identifier: D9:BC:58:DF:BE:7E:79:BF:62:21:5F:98:72:3E:20:F9:62:B0:7F:66
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 019A4C97F7862A220BF8FC8BFD404B452FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 02:00:18 +0000
Manifest this update: Tue 04 Nov 2025 02:00:18 +0000
Manifest next update: Wed 05 Nov 2025 02:00:18 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: FJ+9JA3zg7kYPhpLMyKy/yj322VwIeAkj5G+ljRD588=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:f7:86:2a:22:0b:f8:fc:8b:fd:40:4b:45:2f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Nov 4 02:00:18 2025 GMT
Not After : Nov 5 02:00:18 2025 GMT
Subject: CN=d9bc58dfbe7e79bf62215f98723e20f962b07f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:a9:5f:82:6a:99:07:8c:44:df:33:20:21:
02:2b:6c:0d:e5:f3:cb:13:c9:ee:a5:ed:e2:07:22:
56:c2:fa:3c:94:ae:86:b9:fc:76:a2:6f:99:af:1b:
10:9d:ac:90:68:92:bd:05:81:c7:12:6c:44:13:3c:
9e:f0:72:0c:4a:3c:df:22:f8:12:b4:b9:9a:af:d6:
ac:e8:90:38:e2:cb:02:59:19:5a:73:67:11:f6:8a:
b4:91:6f:50:cc:fa:49:0f:8a:b3:08:5d:7a:a5:af:
cb:8e:4a:8f:54:b5:81:63:53:51:93:76:dd:d4:7c:
6a:c0:46:84:b7:ab:ee:b5:d4:49:9c:e9:13:52:0f:
5d:12:f6:99:8e:d1:09:7f:97:fc:69:03:fd:2a:91:
5d:d3:0e:e9:3b:14:80:33:3d:be:38:35:4d:a6:93:
65:5e:22:c9:0f:dd:85:56:ab:2c:34:b2:ff:05:97:
e1:86:17:5d:7f:ce:0e:78:4a:9c:71:8d:c7:a3:4f:
34:ad:e9:85:50:be:96:ee:ba:fd:39:8f:31:9d:88:
d7:20:46:9c:ed:2a:10:2c:c1:1d:42:6d:e1:d2:bf:
a5:7a:9b:35:61:fe:d8:32:a2:c7:57:77:45:f4:a1:
ab:27:2b:bd:a5:88:d7:07:53:1f:12:98:3a:19:c2:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BC:58:DF:BE:7E:79:BF:62:21:5F:98:72:3E:20:F9:62:B0:7F:66
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:72:a2:f0:42:5b:55:77:4b:6c:99:18:c2:3e:6e:58:3b:ce:
b3:dd:78:f2:ef:78:1a:82:58:0d:38:ed:c2:31:36:21:b0:63:
a3:ba:a9:d1:86:9f:f9:78:24:5e:3d:00:10:77:c6:d2:86:63:
96:7d:f3:75:08:3e:d2:b6:8c:42:6b:f7:b1:da:47:00:7d:7b:
b4:67:98:65:2b:6f:b9:a4:bf:e5:c4:b4:fd:cb:3d:2e:a2:c4:
7a:5c:44:93:db:75:76:2c:58:2b:cc:e5:61:22:a1:8c:6e:98:
77:22:ac:e4:35:fa:92:25:f1:01:00:70:65:6b:2c:64:53:46:
10:89:3c:3e:81:17:f4:47:69:ab:1a:c0:5e:df:54:14:0e:b3:
0c:c9:de:07:a4:87:a1:7e:b7:66:d3:89:b7:ea:57:dd:a9:e3:
05:1e:76:42:95:02:fe:dd:64:50:0b:11:61:b7:68:25:77:d2:
96:1c:29:b2:bd:99:60:85:e2:91:be:55:80:1a:51:25:a2:46:
bd:28:ac:91:4c:e8:32:a3:a3:96:71:83:02:d3:35:29:71:56:
72:24:b4:11:7e:3b:9c:23:75:01:b9:54:86:fa:75:29:20:11:
23:05:b9:26:fa:0d:e1:24:fc:27:eb:a8:0f:69:28:f6:4f:8b:
42:b9:eb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:54:56 2025 by rpki-client