Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier: +cTS0Chi+PfVUbPvVY3YuDbX9D4bQxW+4BatbQTAQ+I=
Subject key identifier: BB:8B:85:A5:93:6A:62:33:2F:14:3D:CB:83:71:DE:AF:75:A1:1C:59
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial: 019A4D05FABA20A33A4BD78DE199D7CA9A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 04:00:28 +0000
Manifest this update: Tue 04 Nov 2025 04:00:28 +0000
Manifest next update: Wed 05 Nov 2025 04:00:28 +0000
Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: j8CJM3t00XeMJ8P8XsNdw76aBjlI2aeGdmQTKK4uqx4=)
2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:fa:ba:20:a3:3a:4b:d7:8d:e1:99:d7:ca:9a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Validity
Not Before: Nov 4 04:00:28 2025 GMT
Not After : Nov 5 04:00:28 2025 GMT
Subject: CN=bb8b85a5936a62332f143dcb8371deaf75a11c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:71:32:c6:92:4e:a0:fc:4d:8a:76:de:75:
d0:a5:0b:4c:ad:fc:a9:ae:29:d4:79:4c:59:e3:d6:
39:43:de:0e:25:85:3c:4a:af:47:49:f9:66:d0:76:
cd:3b:bf:f4:4e:63:e8:89:15:36:b5:b6:28:b9:28:
5d:5b:b0:79:91:ed:eb:00:ce:23:33:63:6e:e6:f9:
16:e1:b4:01:eb:12:d8:63:a7:1d:20:c4:70:53:77:
e5:80:fe:98:e7:a8:95:29:4c:8b:63:92:a8:df:68:
e3:c6:f0:94:f9:00:2d:2b:f0:32:3c:b8:d2:a1:95:
ce:27:ed:55:f5:c7:32:7e:06:8e:ab:3b:20:58:14:
f2:39:c1:7f:4d:d8:d7:85:2c:d1:4f:1b:6f:bd:1b:
cd:25:cf:8e:d5:62:99:ce:dd:4b:57:cf:0d:f6:ca:
65:ee:33:20:c5:79:22:53:b9:71:98:49:4b:98:b7:
30:08:83:b8:1a:39:15:a8:c3:76:76:5a:62:ad:84:
49:65:01:be:3b:21:45:3e:1e:bf:9e:60:eb:50:90:
85:66:19:de:1a:17:cb:b5:e1:15:44:77:8f:62:0c:
55:ed:e1:1d:f3:53:b7:b1:13:b1:6e:fc:1b:08:74:
3e:37:dc:76:25:a1:c3:3a:e6:b2:20:15:32:f1:5a:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:85:A5:93:6A:62:33:2F:14:3D:CB:83:71:DE:AF:75:A1:1C:59
X509v3 Authority Key Identifier:
keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6e:db:da:52:70:58:ab:59:2f:f7:fd:a1:9a:a7:18:2a:4f:
0a:3b:1a:0b:be:07:8e:ec:e9:3b:60:99:63:2b:3e:80:96:b0:
98:58:8c:ee:4b:e6:d5:3f:42:a3:06:82:1c:3d:25:3f:1a:be:
1b:4f:6f:23:79:be:4f:6a:c2:9a:77:1d:98:7e:90:9d:f0:ca:
1e:ec:a9:6e:97:d5:37:40:4f:88:5f:70:55:77:17:96:a7:86:
a3:83:9b:53:62:93:dd:c3:9c:6f:0f:40:96:3d:69:a2:7a:83:
f4:fe:8b:34:dd:8e:68:29:18:d8:17:61:83:9f:ee:0a:94:1c:
21:03:25:f3:eb:30:5a:bd:a6:b5:77:20:86:f8:ca:12:cb:ca:
1a:5d:e0:3f:91:d4:d7:d5:e9:f8:31:cd:31:77:33:cc:64:8b:
6a:7e:5c:73:05:4e:d9:82:bb:91:d5:d8:5a:e7:d7:04:70:54:
b0:e4:dd:4b:b5:5b:33:d0:b9:4b:e4:99:ef:6d:f6:19:d2:4a:
dc:58:76:87:09:90:73:ab:7d:a5:19:8b:37:54:af:91:1b:ff:
b1:80:23:61:69:d0:fe:33:19:0d:1f:66:ed:3e:ba:67:29:f6:
90:17:6a:e3:d7:19:15:9a:6b:e0:09:03:8f:16:15:ad:1e:4a:
4b:c7:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:02 2025 by rpki-client