Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: DS7jB0MAoTFKllLfECZyePcTcrWG7v6/o9SHojYlEvg=
Subject key identifier: AF:0B:1E:27:60:F7:9F:A8:7F:36:0D:60:D7:B9:0C:A4:B5:F4:A7:39
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 019A522C3784EACA1718053831F129873D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 1451
Signing time: Wed 05 Nov 2025 04:00:20 +0000
Manifest this update: Wed 05 Nov 2025 04:00:20 +0000
Manifest next update: Thu 06 Nov 2025 04:00:20 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: P/IrAJOhKj/dNNxOufdtkhn1nF5rzYCx8mzRAZLeinI=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:37:84:ea:ca:17:18:05:38:31:f1:29:87:3d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Nov 5 04:00:20 2025 GMT
Not After : Nov 6 04:00:20 2025 GMT
Subject: CN=af0b1e2760f79fa87f360d60d7b90ca4b5f4a739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:d7:cf:d9:57:7d:36:60:fc:95:43:6e:2e:
b5:23:b1:cd:b4:86:f7:1d:cd:65:1f:85:78:51:76:
ae:7d:7d:9e:ba:18:d3:38:f6:3d:15:ea:4f:35:fc:
20:10:bf:dd:d9:16:74:56:5e:c0:77:ee:24:2e:a9:
40:bc:bd:35:09:b4:8c:73:da:4f:46:a2:0c:7a:7f:
da:7c:40:f0:dc:3b:23:fc:4e:bc:b1:b7:2b:77:11:
48:41:a8:c7:a2:d3:6a:cc:7b:2f:f0:b5:5f:63:17:
b5:b7:a7:0c:9c:79:87:1a:72:80:fb:06:57:e1:4d:
34:b2:80:31:e3:43:d9:bd:74:9f:ff:2a:2b:1e:ce:
73:86:62:5e:6d:7d:fc:c0:40:84:de:e7:d0:0e:19:
ad:2a:13:47:6d:a6:87:89:22:f7:b4:a6:fc:47:37:
e9:d2:67:9e:30:dc:f0:ac:27:b4:7c:cd:c0:6c:15:
55:24:64:6f:8c:66:cd:50:ac:35:3d:87:4b:c8:eb:
1b:5f:10:b9:59:4f:4e:4b:10:6c:78:90:bf:a1:79:
e0:f4:db:1e:11:52:8e:6d:33:d9:c9:34:70:8d:72:
bb:59:c0:3c:40:05:22:07:6f:2d:de:28:fe:59:00:
c5:27:7e:af:9f:e9:a0:3d:16:76:8c:5b:93:86:f6:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:1E:27:60:F7:9F:A8:7F:36:0D:60:D7:B9:0C:A4:B5:F4:A7:39
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:08:6a:0d:9f:2a:47:11:bc:6d:bd:b3:44:a4:c9:1b:78:f9:
03:cd:58:08:de:4b:79:66:fd:0b:73:22:bb:51:03:6b:c9:48:
68:25:72:6f:32:fa:a4:c2:e0:dd:81:13:81:8c:62:27:bf:0b:
44:e6:f1:c2:95:a0:82:11:ec:6c:12:5f:cf:82:67:35:aa:2a:
85:83:cf:30:ae:fe:b8:8b:75:c6:8f:57:ba:4f:51:3a:69:ec:
9b:81:d4:57:f5:79:f5:71:6f:af:3a:06:83:e5:31:e0:df:4f:
ef:04:f7:cc:2a:67:f0:1e:fd:28:bc:de:d2:15:c3:26:a8:47:
0f:f5:72:65:31:d2:de:7a:d7:a9:22:6d:5f:12:04:92:03:e3:
4d:e0:a0:02:d6:11:25:01:ed:13:80:b9:4a:58:b5:be:01:ce:
00:79:38:01:e6:19:73:6b:fe:49:90:e7:2c:73:81:19:12:86:
09:04:41:bf:e9:45:b8:7c:55:31:64:fd:77:49:95:bd:27:be:
ac:65:a4:af:b5:0a:04:8a:b1:ce:83:7b:c2:66:24:2b:b9:56:
de:d7:89:ad:fc:ee:53:76:d0:12:de:8b:bc:3a:31:ee:e4:e2:
90:31:24:53:67:d0:d9:ad:29:83:69:c6:08:34:76:1c:0b:2c:
cf:77:b2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:29:59 2025 by rpki-client