Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: uqcYLye2JQPbp9HeJGQVwqYWetjY7nzR6D1pJxq/qe0=
Subject key identifier: D7:D0:AE:0D:02:CC:DD:72:B5:72:7D:E1:72:D2:16:A7:65:57:78:D1
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 019A4D7409A5004C6F3131D1B7812920FA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 06:00:41 +0000
Manifest this update: Tue 04 Nov 2025 06:00:41 +0000
Manifest next update: Wed 05 Nov 2025 06:00:41 +0000
Files and hashes: 1: BW_w5tNvIWO1-tVFP8df1MdaWTA.roa (hash: rExjPSaaFahRIKD/ZiQ7dk1JIKInqDzh+Jo+aqkHWCA=)
2: SHt83tHCOqEqNWz8C0rDKgPLSVk.roa (hash: 5uUYud3teEzP7h4GRY2ZjMn6NzU1+BqyXIl56/9+cO0=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: tmiSeNwYq2J6SyHkGH5FRi1FSJuiLbd3w64GFCkzgCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:09:a5:00:4c:6f:31:31:d1:b7:81:29:20:fa:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Nov 4 06:00:41 2025 GMT
Not After : Nov 5 06:00:41 2025 GMT
Subject: CN=d7d0ae0d02ccdd72b5727de172d216a7655778d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:96:97:f9:c5:77:cc:62:73:43:0c:6c:5a:
7b:45:b8:f6:13:be:18:d9:53:ca:43:9b:5c:5f:6f:
25:52:58:81:4e:d5:6d:89:77:41:52:82:fb:6c:86:
e8:41:75:44:e6:07:e4:2b:b7:75:3b:65:a9:0b:e7:
f4:5e:f4:0d:8d:2e:4b:9c:7d:30:71:fd:6a:14:d9:
a4:cb:4a:69:7a:3d:c0:67:cf:c1:7a:6a:a7:92:5b:
49:7c:51:b3:81:c1:c3:e2:4d:dd:8c:fc:73:62:7d:
38:0b:b6:5d:17:2c:64:75:39:b8:e9:e5:32:50:89:
ea:a6:2c:32:87:1b:96:92:7e:ff:98:ce:f9:df:33:
eb:5f:45:e3:47:b2:3c:1d:d0:e9:98:dd:79:7b:2f:
4c:0f:d9:7c:a6:cf:e5:cf:e1:ab:40:ad:ae:f6:21:
22:09:dd:84:be:07:9c:d3:74:14:3e:da:cf:95:73:
4c:f2:9b:b6:29:45:59:98:aa:c0:a8:f4:23:cf:fe:
f0:3f:d1:b1:3b:7d:1c:52:ae:83:3b:dd:b9:97:ed:
16:0e:91:d2:9b:40:54:1b:cc:69:4a:e0:3a:2d:95:
52:76:93:6a:7f:2a:31:d8:d4:b4:c2:4a:a4:ee:f7:
49:e8:71:bb:ff:13:b6:ac:48:7e:4f:0a:da:c3:83:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D0:AE:0D:02:CC:DD:72:B5:72:7D:E1:72:D2:16:A7:65:57:78:D1
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:53:47:4d:28:b3:ae:c9:a4:86:ae:c0:bf:f0:50:b7:f8:96:
63:4c:c0:46:9e:b5:8c:cb:50:a4:8e:6f:de:de:53:97:e0:2a:
c8:68:e4:e2:7f:06:13:9f:e9:1d:ae:f7:7e:c0:f5:00:86:f8:
cd:a7:8e:71:a4:e5:98:f5:0b:8d:21:7b:14:91:59:d5:0d:42:
e7:ae:a0:f6:8a:64:1b:c4:d5:f9:90:9b:ce:03:8d:f7:85:8b:
c5:69:fd:56:2f:2d:01:33:d0:fb:b1:48:1a:2a:8c:2a:ef:d5:
46:4d:c7:f2:cb:da:c8:b8:33:55:84:96:c4:fa:f7:87:4a:43:
09:30:62:fc:ec:b5:52:f1:e7:14:4a:a2:7b:cd:4d:93:17:4d:
ba:26:60:24:b9:82:cf:5e:33:5e:2a:c3:13:ec:a2:4e:5b:7c:
5e:2e:4a:26:2c:98:95:b0:e8:c1:d1:5a:d3:ca:15:12:2c:29:
92:72:cf:be:99:00:a2:d8:21:5c:88:b2:9f:2a:a1:1c:8d:6f:
c5:8c:67:f9:59:3c:e6:97:0e:ba:b1:35:20:bb:9c:e4:6d:88:
f7:80:d8:74:5e:20:69:58:27:a9:01:6f:05:2e:70:f8:01:72:
af:d1:df:5e:d8:f5:43:f5:06:85:2c:3c:c9:c1:a6:56:3a:4a:
ef:e2:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:54 2025 by rpki-client