Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: ARNFP+QrrixIZJLmTzxlHXt4QDu7M2F1qkvXGmdl3TI=
Subject key identifier: 0A:C5:A9:CA:8A:6C:49:84:5C:F8:8F:74:5F:F7:AF:C0:1E:1F:DB:EA
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 019A4E4FEC211715C188219E99FA9E85C36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:51 +0000
Manifest this update: Tue 04 Nov 2025 10:00:51 +0000
Manifest next update: Wed 05 Nov 2025 10:00:51 +0000
Files and hashes: 1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=)
2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=)
3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: 2wY9zGJCfMe70jP2nzuZdZusoNPAJAAV9OEcjnFjNyw=)
4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ec:21:17:15:c1:88:21:9e:99:fa:9e:85:c3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Nov 4 10:00:51 2025 GMT
Not After : Nov 5 10:00:51 2025 GMT
Subject: CN=0ac5a9ca8a6c49845cf88f745ff7afc01e1fdbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:c3:a3:a5:44:21:a7:20:0e:ce:3a:9f:67:
aa:e6:b5:76:a9:19:c9:cd:2d:27:f3:ba:e0:29:88:
80:0f:ad:68:a4:14:0e:3e:90:da:6b:bd:36:01:a4:
bb:dc:6f:5f:3b:e1:ba:e5:73:1f:98:ce:bf:ed:c4:
c7:b4:30:71:1d:78:2c:f8:92:09:7d:fe:bb:f7:e1:
c1:cf:99:86:96:97:b3:5f:ad:05:c3:90:7c:7a:89:
e8:34:93:66:21:97:a4:da:38:90:07:7e:d1:fc:72:
75:f1:22:ec:7e:2f:32:78:01:86:cc:19:c5:b5:df:
55:66:5f:c7:f2:fd:71:ef:ae:21:f5:65:12:4b:30:
c1:29:dc:81:fb:19:47:95:cf:17:e0:aa:95:af:f5:
d4:5a:0b:b8:78:b4:f7:14:0e:4f:a4:03:92:db:6a:
1d:a7:fb:39:ff:cf:72:f9:8e:33:72:ac:2d:be:99:
05:96:04:73:11:03:ae:cd:47:10:d5:6c:ed:52:ae:
31:c6:e5:7a:0a:a5:42:4e:c7:0c:11:d4:0c:c1:ff:
31:81:07:b2:03:ce:2a:f6:cf:f7:08:44:eb:12:b5:
e6:64:84:3b:57:10:a7:9d:0c:31:18:44:d7:74:c6:
b2:09:b4:65:20:11:41:16:7e:d2:dd:2e:a6:27:1b:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:A9:CA:8A:6C:49:84:5C:F8:8F:74:5F:F7:AF:C0:1E:1F:DB:EA
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:46:5e:11:96:3d:08:7f:2d:83:80:5d:e1:31:ad:d0:b8:f9:
c3:27:4c:b7:3e:6e:3b:69:73:7f:3b:ab:c8:98:0f:64:c6:73:
21:9b:33:f1:f5:2e:41:95:0c:13:c8:e4:7c:36:17:8c:e5:49:
e0:ed:5c:d4:ad:ed:dd:0f:24:91:c7:a8:93:59:20:ca:48:50:
8c:e3:e1:6a:a1:65:c8:a8:62:84:70:31:7e:89:ba:49:8e:28:
0b:f5:9d:d4:d8:03:98:4b:d0:cb:95:e3:c3:46:48:a3:23:dd:
dc:8b:8d:aa:eb:be:13:aa:15:b7:9e:f7:8d:79:72:59:8d:9b:
b4:98:55:4b:32:f7:dc:ed:7a:a3:36:71:00:95:9f:53:cf:f0:
2d:58:e2:cc:c4:61:cc:2d:36:7a:7d:e1:02:57:c0:68:f4:49:
a6:5a:64:5c:36:20:ae:55:5f:f5:de:88:07:19:4e:5f:df:46:
57:3f:8e:a3:0f:36:08:57:b0:b3:ca:7d:74:12:28:d7:8d:7d:
23:2b:f2:d6:a4:43:19:a2:04:70:60:8a:f3:25:40:fb:f1:aa:
51:35:18:65:5f:f8:b9:4c:ec:06:3d:a2:e7:e4:05:4e:ba:6c:
d0:90:da:09:c7:be:c7:51:1c:95:1c:b8:e1:6a:13:df:dc:52:
03:c9:1b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:49 2025 by rpki-client