Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: ogotQJnPifnzVkMArLiKGOspPGyV79Ti2ohFO+Ak3qE=
Subject key identifier: 91:7F:DB:85:15:75:51:4B:61:B7:F9:EF:CD:9C:B8:6E:82:C4:A8:F8
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 019A5006E27954017EF3C467648623053C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 18:00:19 +0000
Manifest this update: Tue 04 Nov 2025 18:00:19 +0000
Manifest next update: Wed 05 Nov 2025 18:00:19 +0000
Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: SDi/2RAYcZ4Ht+7cnHmnoP0dmGispYse4p9vwuivggY=)
2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e2:79:54:01:7e:f3:c4:67:64:86:23:05:3c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Nov 4 18:00:19 2025 GMT
Not After : Nov 5 18:00:19 2025 GMT
Subject: CN=917fdb851575514b61b7f9efcd9cb86e82c4a8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:97:32:fc:04:ba:15:cb:31:99:bd:b0:fb:
6f:f8:77:56:70:0e:a9:99:e3:e3:8e:2f:d5:8b:30:
36:5a:34:51:9c:e2:ab:fa:b6:7b:30:74:c5:50:9f:
88:04:0c:92:34:92:f2:c7:74:16:aa:d0:d0:02:84:
9b:97:b8:8c:19:8a:76:9e:52:d6:ba:81:ce:3b:73:
77:e0:f8:14:4a:d5:b5:ca:d8:5b:a2:de:69:9a:0f:
de:46:83:fd:17:66:eb:f6:25:d9:8a:db:58:5d:c5:
fe:cc:87:ba:51:bc:bf:c5:84:d7:44:cd:42:ef:c3:
b6:7d:43:95:50:59:79:31:e8:a9:92:2a:6d:1e:33:
cf:f8:cc:63:62:4b:80:4c:2e:e6:94:62:40:9b:a1:
3f:2e:1f:34:ab:7f:d8:f5:36:02:0d:50:6c:c0:b8:
93:d5:38:b7:0d:f9:e4:8d:41:86:af:b4:5f:51:a7:
e3:2d:04:90:e2:9f:96:59:0b:2a:49:3f:ee:7f:c4:
ab:cc:46:db:80:f4:21:30:4e:a5:e5:c8:49:49:77:
e5:66:78:bb:c2:f6:71:95:ae:f5:d4:20:fd:ec:3f:
e7:e6:58:99:fb:2e:78:e1:14:f3:8a:66:63:2a:f4:
ab:4a:f4:ab:80:58:16:f1:03:2a:5f:1c:3c:36:26:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7F:DB:85:15:75:51:4B:61:B7:F9:EF:CD:9C:B8:6E:82:C4:A8:F8
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:be:0d:79:fb:6b:af:34:47:1a:bf:84:0b:97:01:8d:c7:62:
73:63:11:91:b8:22:fc:80:f5:55:14:14:63:1f:a5:33:bc:bb:
75:fa:4c:01:ac:81:9f:f5:05:c9:8d:bd:7d:87:bc:81:90:fc:
83:6a:a3:4b:dc:87:d6:d8:c9:cb:be:88:38:2c:bd:15:13:b8:
70:6f:bd:47:49:9a:9a:ae:50:a2:f5:86:e8:41:d0:37:46:cf:
a4:6c:75:34:c0:f4:32:db:fe:b4:c6:8b:cd:7e:be:a7:c5:e5:
c3:7e:bc:f1:ef:19:d6:13:a4:5a:0c:9e:61:31:58:7f:1b:50:
7f:c3:83:ae:a7:74:c3:01:df:b2:9e:f5:d9:84:46:9a:65:a1:
3a:f9:84:7a:82:ca:5b:76:a1:79:8b:09:62:3f:39:46:5f:17:
c9:37:72:38:7e:63:0d:e3:5c:e9:fb:75:52:94:7d:1a:54:b9:
5a:9c:b1:a2:26:fd:4a:33:0a:76:ca:cb:62:ff:e0:0b:9e:2a:
5e:30:63:2a:07:07:ae:4e:48:3d:15:8b:4a:ef:b3:99:68:e4:
1b:97:8a:44:2d:7a:ea:bf:d6:7e:e4:ab:cf:b6:31:ca:6d:14:
0f:f3:62:f7:42:30:c4:70:10:9a:87:4e:8f:81:65:3b:b2:97:
37:28:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:05:42 2025 by rpki-client