Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: JRLPmYssmbfC/tl0eSOLkDPFr8qwZh36fPNoHyw4ljs=
Subject key identifier: 47:56:A5:AF:CB:9A:4E:FA:E0:8C:8D:CD:EB:D9:D0:B4:E5:B6:9F:C9
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019A51878154CB368F1E4935B3604F80FBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1737
Signing time: Wed 05 Nov 2025 01:00:26 +0000
Manifest this update: Wed 05 Nov 2025 01:00:26 +0000
Manifest next update: Thu 06 Nov 2025 01:00:26 +0000
Files and hashes: 1: FkdMBqbfdch6CFhxD4QwLgELMKU.roa (hash: wdLh3ZrKjP6g2Oc4Gepc/YnCstfM0S94slpL4xRfAig=)
2: NUZ62speWa0hfYDy7wa7hz3yElg.roa (hash: kF9c9XUwfNAZlikdfObuH2Z3J2bnJMLn8HSb5Ko9hw8=)
3: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: OF3GzES3uws5eUl0vNWJLI4Cso0Vco7TQ5TeDa6Rxmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:81:54:cb:36:8f:1e:49:35:b3:60:4f:80:fb:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Nov 5 01:00:26 2025 GMT
Not After : Nov 6 01:00:26 2025 GMT
Subject: CN=4756a5afcb9a4efae08c8dcdebd9d0b4e5b69fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:53:09:66:84:d2:b0:d9:93:92:de:27:6c:
8a:e8:4f:d6:5b:47:8d:4f:fe:11:e2:0d:fc:f4:f8:
95:f2:ab:30:9a:6c:b3:1f:8a:ac:cb:d2:53:b8:31:
bf:03:bc:aa:cd:bf:53:46:bf:b8:98:b4:b1:d6:ba:
a6:4a:ea:a3:28:ed:90:b8:a8:b5:df:c0:bd:9d:24:
d0:db:0c:e8:36:f4:89:b1:42:61:4d:1e:5b:bf:80:
69:55:c8:cb:1c:db:4c:7a:11:1b:0d:87:3d:81:e1:
2b:09:88:02:61:75:24:03:63:11:f0:30:18:67:ee:
98:1c:49:e8:c3:34:bc:08:6a:47:34:81:37:9e:82:
e1:94:99:d2:bd:fa:b1:ba:86:f0:cd:04:2d:f9:68:
7b:c9:dd:de:a6:0f:18:e2:8f:fa:44:f8:47:6a:c8:
c3:65:b4:fd:9e:b3:df:4b:81:18:13:ed:c7:34:ab:
45:77:63:c3:f5:01:25:86:bf:61:3a:b0:20:83:8d:
f1:e6:5a:e9:4b:4e:ae:d8:1e:30:3a:06:fb:59:09:
af:c2:ce:29:f6:c7:98:db:cf:5e:2c:8e:0c:ef:34:
fe:9d:2b:ce:64:28:04:25:84:f5:74:98:cd:64:e6:
a4:70:ef:8d:83:85:d9:82:94:49:f5:dd:0d:ce:4b:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:56:A5:AF:CB:9A:4E:FA:E0:8C:8D:CD:EB:D9:D0:B4:E5:B6:9F:C9
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:99:3e:ce:4e:d7:53:d9:20:ec:9b:9e:f0:2e:e7:e1:61:3c:
e3:4a:ec:ac:19:0a:c6:81:d0:65:49:36:f4:74:e6:72:e0:14:
a5:c8:18:6a:80:90:e2:8b:2f:53:e9:bc:3b:35:b0:9a:64:87:
73:35:b2:9e:62:a6:df:d2:37:ae:1a:64:72:25:b4:21:d5:79:
d7:1f:c3:76:dc:76:4c:60:04:42:bb:d9:3d:1c:39:f6:14:46:
f5:0e:e1:58:54:56:d9:aa:5f:70:56:85:ee:3b:e5:31:38:c2:
e9:f7:21:27:d3:f3:ea:8b:04:c1:72:9b:c8:bc:2d:55:1b:d0:
db:3f:2a:51:1c:f9:46:e7:42:77:17:71:19:93:9b:8d:a3:40:
bc:43:ba:3f:39:31:98:3c:95:75:4f:41:d0:a5:ee:b7:16:60:
ae:c5:8a:92:f8:8c:2a:30:be:7e:cf:1c:2c:37:ac:ea:76:a9:
d0:01:03:fd:44:81:9c:eb:e5:8e:dc:64:8b:92:43:a7:61:2c:
b0:3d:db:a3:d7:6a:98:b5:08:e4:99:dc:fc:22:5c:8c:2c:ba:
45:38:9b:b7:9a:d3:4a:79:51:7c:98:65:9f:1f:3f:70:73:57:
1e:b7:0b:d7:72:34:64:67:07:9d:61:5a:10:41:df:13:ee:38:
48:f0:ef:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:34:20 2025 by rpki-client