Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
File: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft (raw, json)
Hash identifier: z30/9TCJbPi79AOg3IadJF3mEgT7SXDx1zEmVoe+NX4=
Subject key identifier: 3E:01:AB:73:71:E6:51:3A:44:27:18:AA:19:FF:BF:06:AE:A2:3F:BE
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 019A4E18BBD2BF9ECBDF0A7525657164078E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (hash: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=)
2: qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl (hash: YeOSxReMX7gXpUGlJu6w4IsPcaLVm06E7vfpqUZ7bqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bb:d2:bf:9e:cb:df:0a:75:25:65:71:64:07:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=3e01ab7371e6513a442718aa19ffbf06aea23fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:6e:51:5e:03:85:ea:95:f7:4e:c2:39:1e:
62:21:92:85:b9:2b:bd:00:f9:6a:28:ea:71:56:41:
e5:76:07:e0:d1:aa:7d:a9:dd:1d:1a:d1:f4:6c:d2:
a0:14:7f:92:c5:df:6c:00:8d:f1:c8:43:89:16:af:
b5:5a:c3:f7:e3:b3:4b:5c:70:e9:2a:2c:da:9e:e0:
67:00:8d:97:fe:5b:f1:8d:2c:36:d8:04:80:3b:d2:
e6:a3:96:fa:d4:90:26:ca:45:1d:9f:4e:8b:5e:67:
3c:bb:3e:1f:3b:70:67:11:9a:49:66:9a:3a:5c:9c:
5b:1e:f6:40:b8:c1:ea:59:81:dd:f2:05:1a:47:d2:
99:03:a8:a8:37:3e:8f:1f:3c:70:d3:0c:d8:6c:ee:
2c:41:ff:72:03:f4:e4:c8:75:c1:c3:c1:a2:c6:af:
51:dc:d3:97:0c:26:3c:f5:83:e3:f9:f9:fd:46:8d:
2d:0c:7c:f0:19:5d:b8:ea:36:26:23:5b:1e:63:00:
c4:86:0f:08:5a:21:68:6d:48:f1:5e:47:66:7d:71:
19:98:82:20:e5:fd:d7:8e:45:c6:d2:da:07:42:19:
c6:fa:e8:26:0e:76:6e:77:bb:59:2c:5f:a4:bc:93:
18:4c:e6:54:c0:12:c1:98:74:c0:36:68:73:bb:3e:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:01:AB:73:71:E6:51:3A:44:27:18:AA:19:FF:BF:06:AE:A2:3F:BE
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6f:d0:35:fc:e3:bd:16:6a:28:38:29:1b:ab:05:f9:35:b5:
8b:92:c3:e0:0f:ca:55:b7:44:d6:96:23:e7:e5:f9:00:ef:7e:
aa:8f:94:5e:07:ca:ad:32:f8:a8:86:c6:c4:34:96:aa:bf:2d:
19:0e:05:21:b5:e3:72:48:27:a9:3e:08:3e:9c:9e:cd:ff:f4:
fb:03:5a:78:b2:f0:44:3a:ce:23:88:2f:6f:9f:2c:0a:0b:20:
71:ca:79:41:fc:ef:ef:a0:97:ba:7d:d9:91:fd:85:fe:a4:59:
7c:36:ae:15:f0:2e:66:a1:ed:44:6b:78:10:9b:e5:dd:bc:74:
57:b5:fb:30:29:73:41:ab:a1:ff:36:bf:39:3e:2a:75:42:e3:
a0:ff:f1:44:88:9e:30:0d:84:a6:6c:a2:fb:fc:31:44:26:35:
5e:d9:27:63:bd:96:0a:21:b1:81:f3:24:55:45:4d:1f:71:61:
c0:b4:3c:5c:63:5e:1b:1a:71:48:68:91:c5:b3:8d:46:08:6b:
97:ae:de:c6:49:7e:61:bf:4b:62:16:37:3f:0d:c4:7a:ac:ff:
de:2d:25:8d:1d:e2:be:40:d7:37:de:1d:a4:d9:bc:71:30:c8:
f6:1f:e1:81:e7:a4:77:c1:2f:5f:cf:c5:aa:c4:51:16:3e:48:
c5:a4:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:37 2025 by rpki-client