Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File: q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier: ksYIy1ahRdbHVudUDx1NUJ3gVRz/hnURfiV21tk19JI=
Subject key identifier: 4A:35:DE:51:FB:46:B0:6B:91:38:AD:E9:EE:54:75:BE:55:D6:CB:18
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 019A53E3E06C0E2269D2F84EA2DDE394779E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 12:00:34 +0000
Manifest this update: Wed 05 Nov 2025 12:00:34 +0000
Manifest next update: Thu 06 Nov 2025 12:00:34 +0000
Files and hashes: 1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=)
2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: PNHRx7QavFIKAFQYSoSwxifL131rUlZ/eHUTspLX+gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:e0:6c:0e:22:69:d2:f8:4e:a2:dd:e3:94:77:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Nov 5 12:00:34 2025 GMT
Not After : Nov 6 12:00:34 2025 GMT
Subject: CN=4a35de51fb46b06b9138ade9ee5475be55d6cb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:ec:60:05:25:cc:25:5e:70:69:07:96:e8:
3e:4d:b4:2a:8f:61:af:04:44:b7:34:8b:fd:dc:70:
85:9b:b2:e3:2a:24:ac:b1:89:f4:d2:67:83:be:8b:
0a:9e:60:85:58:dc:04:69:5e:be:57:f4:e0:53:be:
02:18:39:7a:3c:4f:ef:c1:6d:74:d0:33:8e:34:55:
6f:cb:5e:38:c4:e8:c3:fc:16:6f:1f:5f:c6:94:38:
14:b3:e8:b8:54:b6:49:ce:36:3e:2f:f4:4d:a0:20:
49:6f:92:9d:4f:8a:47:10:37:5e:0e:36:1f:0d:91:
be:11:a3:52:9b:2f:c3:16:9f:96:fa:13:ee:0c:7b:
d0:85:45:74:da:5c:ec:8b:d4:09:eb:45:09:1b:06:
03:c5:a4:42:94:4c:18:c9:4b:5e:3c:f6:34:c2:07:
62:6d:70:91:19:e0:27:53:b0:9d:0d:a8:7c:5e:0d:
af:da:1f:76:c8:88:74:cc:15:93:1b:60:cc:df:61:
e9:3f:46:15:d4:13:35:3e:05:e7:d8:42:dc:9c:0b:
8e:d2:08:50:98:8b:a3:b4:a8:e4:31:1e:42:f2:80:
19:29:51:16:c1:39:7f:b4:b6:51:b2:ad:34:64:d0:
2d:01:05:4d:ca:95:47:df:04:20:d1:6f:b0:49:26:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:35:DE:51:FB:46:B0:6B:91:38:AD:E9:EE:54:75:BE:55:D6:CB:18
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:0a:8d:a6:25:f0:db:2e:65:40:9f:5c:36:dd:44:b1:b3:ef:
14:fd:c1:48:fa:2d:bb:f3:21:8f:b5:dd:ca:e2:41:4f:cd:a3:
53:71:af:69:9a:8d:71:1e:29:59:50:c1:9b:90:fb:a4:12:01:
01:29:f2:fc:94:78:57:22:0f:bd:aa:e6:46:eb:14:26:b3:eb:
93:c9:d8:ba:0d:9d:25:04:26:f1:20:e6:e5:55:50:c7:4d:b4:
a6:da:50:68:b4:1f:68:89:72:06:c5:fc:9a:bc:26:30:19:45:
c9:cb:1e:fe:de:97:ec:63:24:3c:f8:ad:b1:91:c1:a7:fb:fb:
dd:7e:74:1b:7f:50:c0:04:5d:01:f3:c4:08:f5:57:1a:bb:25:
89:8a:b0:4c:1d:cb:56:89:8b:9d:51:99:b9:52:d6:bc:77:7f:
6a:3e:bf:31:e3:67:b8:aa:48:28:12:b0:a2:98:88:e5:5c:60:
ec:3a:b2:c0:c3:45:1f:b9:ee:f0:4a:f3:66:7c:ac:24:92:13:
33:c7:23:0a:22:2c:ed:ed:9e:f1:9e:4a:62:3f:d9:56:9a:fd:
50:d7:1e:91:32:af:ad:39:91:38:6a:40:1b:ef:b4:36:e9:4c:
85:cd:cf:4a:39:46:13:d3:66:53:22:f7:f9:29:66:c5:fe:6f:
a4:eb:ff:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:40 2025 by rpki-client