Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: T/Pcrk7lC1ccb+bYUannPm7gJpQrQ6lQAGtolRnVUFI=
Subject key identifier: 6F:69:19:A4:81:BE:EC:7E:4B:2B:6E:E5:CB:4D:66:7C:CD:F1:46:30
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 019A51199D786CC1B09BF43E794BA1BA26F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 23:00:24 +0000
Manifest this update: Tue 04 Nov 2025 23:00:24 +0000
Manifest next update: Wed 05 Nov 2025 23:00:24 +0000
Files and hashes: 1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: XhGf8iIpWVeIsj8U4cv5VSMXJSZCiniTXgqAH7FnP9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:9d:78:6c:c1:b0:9b:f4:3e:79:4b:a1:ba:26:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Nov 4 23:00:24 2025 GMT
Not After : Nov 5 23:00:24 2025 GMT
Subject: CN=6f6919a481beec7e4b2b6ee5cb4d667ccdf14630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:79:f2:d2:5d:b0:94:7b:56:32:cb:37:52:3b:
02:44:8d:fe:34:e7:a4:10:2a:8d:d9:41:ad:3d:9c:
86:a9:26:de:a6:e3:73:a8:1f:ba:c5:57:ba:82:bc:
f3:17:1a:dc:98:6e:0b:18:e9:b6:ad:73:a7:24:76:
a6:29:7f:17:3d:45:f7:cf:ac:a2:3b:38:81:45:a2:
1c:44:d8:89:65:4f:8d:ce:50:72:8e:b0:18:98:e8:
33:85:79:bf:33:0a:f2:74:1e:a5:2a:e8:54:9f:24:
1c:6d:29:c3:54:40:80:7f:02:70:2e:79:db:16:01:
ef:c6:d3:fd:41:2d:29:6d:f3:5f:92:d1:8d:b1:c8:
3c:e4:49:6b:47:f2:9a:61:55:d0:d5:f0:a2:2c:78:
65:61:9c:cd:2e:41:ab:30:b3:9c:c7:71:54:eb:94:
73:c3:59:df:f3:3b:8c:65:7c:ca:b6:06:62:80:33:
65:13:05:be:5b:0e:9f:25:ee:70:41:0a:db:c6:e8:
df:0f:26:a5:94:bc:40:2a:61:d9:21:3b:38:49:b6:
0f:e3:55:01:56:a3:02:06:90:7e:d3:de:ce:e0:26:
44:26:cc:4b:52:da:18:c0:cd:29:77:43:d9:57:96:
d2:d1:d8:d0:af:54:0e:0a:e7:4a:3e:42:b2:79:6b:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:69:19:A4:81:BE:EC:7E:4B:2B:6E:E5:CB:4D:66:7C:CD:F1:46:30
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:56:cb:ec:fa:2d:34:53:1c:51:d2:cc:83:e9:f1:3b:ed:90:
c6:d7:a3:64:7e:8a:41:ee:05:5b:0a:af:99:e2:1b:c2:c8:2b:
2f:14:01:d7:18:ae:24:b3:c7:b0:89:0e:39:3b:66:0a:6f:47:
d8:ba:c3:f6:61:4d:01:c2:5d:2c:4c:e4:de:c4:d8:dc:b9:46:
bf:65:59:83:3b:41:13:6e:4b:4c:6a:32:4c:34:db:b4:20:08:
5d:42:5a:ab:c4:d3:da:a3:58:bd:8b:c5:9f:71:92:55:9b:e2:
55:57:d1:01:93:4c:48:d0:90:48:6c:8f:ed:8e:e7:f8:a5:d7:
f6:5e:a2:ef:5b:48:65:ee:52:1a:2a:ed:cc:c3:75:d4:ce:bc:
e0:ae:c4:57:89:d5:47:dc:7d:3b:03:61:17:d6:73:a6:f2:11:
df:bf:04:ac:eb:19:aa:c0:7e:0d:22:1d:d0:f2:96:52:b5:2f:
63:1c:f2:8d:d9:a5:09:86:bb:28:24:b1:16:ac:39:5f:aa:3d:
62:bf:54:98:64:e7:0f:af:81:db:6c:1f:89:48:be:04:70:d1:
98:07:98:c3:80:56:5a:f9:5b:9f:36:d3:aa:c3:4d:68:5f:07:
7c:16:58:87:e4:89:d6:99:e0:c0:32:3d:07:92:03:a5:39:4a:
c8:50:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:59 2025 by rpki-client