Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: wMh3diwQud2HgPiak7kGrCFviuGMSYDFhs6QXPnDFLU=
Subject key identifier: 3E:3B:DE:59:2F:20:22:00:77:18:24:E6:3E:8F:A5:51:A8:A2:88:70
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 019A4DE18F707A762CBF140D85A722E79452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:19 +0000
Manifest this update: Tue 04 Nov 2025 08:00:19 +0000
Manifest next update: Wed 05 Nov 2025 08:00:19 +0000
Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: 82ntQFZY+sN8jd75zEzSVVX5/hXbeQ0N2X26heaLAMg=)
2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8f:70:7a:76:2c:bf:14:0d:85:a7:22:e7:94:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Nov 4 08:00:19 2025 GMT
Not After : Nov 5 08:00:19 2025 GMT
Subject: CN=3e3bde592f202200771824e63e8fa551a8a28870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:6c:bd:51:be:cf:9d:08:6b:de:69:bb:a9:
49:cf:6b:42:ed:50:96:8a:a2:a4:ba:d4:40:21:e7:
a0:1d:7f:97:bc:65:3e:dc:04:74:ad:67:b2:e3:ba:
6f:b2:f2:a5:96:97:a2:0b:56:bd:2f:a3:dc:32:8f:
71:43:38:2d:72:a8:cc:95:82:02:3e:fe:3f:cb:ce:
aa:cc:54:f4:24:e2:90:6d:4c:73:ff:04:b1:c8:28:
6f:37:51:e9:22:f8:c2:13:8a:e5:fb:fb:a9:2d:2b:
01:0b:86:ea:fd:9d:61:84:3c:b2:45:b8:f9:5b:c3:
95:b9:a5:d2:4c:21:ec:30:f7:fd:9b:fa:cb:8f:6f:
70:87:20:29:f5:e7:32:32:f8:a3:01:58:c8:56:4b:
ec:bf:05:86:53:a8:1e:e8:78:5d:b4:a1:91:0b:d8:
83:e3:d6:01:74:4a:37:1b:a3:a4:db:18:fd:5d:15:
c9:ed:c8:ac:e1:d6:7e:99:24:c2:ad:7f:73:8e:d3:
7d:e1:c3:05:1e:04:59:05:f1:35:0b:bc:44:14:28:
42:ef:95:75:89:a4:96:ea:ca:69:bd:22:bb:ad:e3:
fd:e6:f3:69:f7:00:bc:0a:3c:e1:7e:f1:14:96:79:
66:9d:89:7c:19:cb:f1:cc:81:05:22:9b:e9:4e:a7:
a8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3B:DE:59:2F:20:22:00:77:18:24:E6:3E:8F:A5:51:A8:A2:88:70
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:90:0c:58:46:0a:b7:d1:98:5e:15:57:8f:82:cc:fa:b5:53:
69:d0:21:17:b3:5f:ea:2f:fe:77:5f:4f:e4:29:a4:83:6e:f6:
8a:6b:60:43:8b:a3:34:d4:76:21:a9:d6:6e:d3:1b:ad:60:aa:
08:16:0b:64:9e:8b:1e:a2:90:83:8c:00:eb:f3:e9:02:39:9e:
a1:bc:d3:3f:15:82:aa:2d:4d:0b:d7:2c:30:a6:8a:44:48:1b:
10:d8:8d:13:e0:b8:03:ef:bf:f5:0a:37:e8:ab:a7:ff:08:17:
8f:77:53:7b:59:1a:0a:85:3f:87:4e:00:00:3f:96:9a:a9:6e:
25:d2:73:a9:b6:13:b6:85:97:44:90:d2:6a:19:44:92:9c:8c:
55:0b:e0:67:29:59:28:d5:cf:ee:b1:b4:6b:c7:a8:8f:8e:43:
02:3d:e0:14:ca:f5:c6:99:71:5b:02:c0:53:14:3b:36:27:15:
b6:b3:f0:2c:ec:4a:55:07:0d:e9:49:63:8a:25:51:db:26:5e:
c0:41:3b:36:76:8d:5e:9c:dc:4f:0c:e4:a3:c6:6a:33:d9:28:
3d:39:af:4b:3a:0e:03:69:20:c5:25:4d:ef:9c:d8:5f:8e:e4:
61:60:5f:0e:88:15:94:ee:75:30:fd:2a:72:af:4f:9a:a8:4a:
5b:b4:44:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:24 2025 by rpki-client