Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
File: qXjDZVxaYJcS51UQDZiJKuHI5es.mft (raw, json)
Hash identifier: fX7faFSPXGx+eG92t1w0GWQezYcEetm/h70b7GtfT6Q=
Subject key identifier: AE:67:E6:28:97:0A:AF:DF:22:CA:3F:57:9F:D5:2D:94:D9:CB:B1:90
Authority key identifier: A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
Certificate issuer: /CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Certificate serial: 019A4E4F755D28611F90D75DBA99BA8969B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:21 +0000
Manifest this update: Tue 04 Nov 2025 10:00:21 +0000
Manifest next update: Wed 05 Nov 2025 10:00:21 +0000
Files and hashes: 1: Yumm02n0U4zsJjWwtlYyB2Z-w4U.roa (hash: AJmjRPnoBgkPh5HzaY6seqwxdSiWYHbug0JOYxi/OM8=)
2: qXjDZVxaYJcS51UQDZiJKuHI5es.crl (hash: R0368tchRk6ICeIfFcnnmp30Kol2a2oxa8xK81eA4K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:75:5d:28:61:1f:90:d7:5d:ba:99:ba:89:69:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Validity
Not Before: Nov 4 10:00:21 2025 GMT
Not After : Nov 5 10:00:21 2025 GMT
Subject: CN=ae67e628970aafdf22ca3f579fd52d94d9cbb190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:b1:bc:3f:ff:7d:b8:8a:44:c1:0d:24:ad:
d1:02:8a:a1:77:05:f5:6f:a2:6d:c5:49:f9:0e:95:
ef:3a:83:4b:e3:2d:79:a0:76:b6:a8:b8:69:df:b5:
2b:12:16:86:98:be:54:0a:09:30:1c:8a:e3:d7:1f:
bd:d1:97:53:b8:bf:9c:9f:ae:23:97:36:f1:42:41:
67:f0:9c:54:80:45:f6:36:4b:b0:a3:18:50:76:3e:
73:f8:4c:70:6e:ae:d8:3a:47:4e:cc:8e:ca:a0:79:
11:ce:9f:19:b8:21:de:da:cd:96:88:6b:61:2f:a1:
46:04:05:fc:72:a6:0b:e3:c5:7c:b1:14:fb:41:a7:
5b:c6:40:ce:95:f9:5a:f1:47:c0:ea:7b:0c:cc:3f:
e1:c5:6a:b3:bd:90:13:02:8e:33:d4:d2:46:35:14:
96:5e:59:57:e9:8f:8f:27:33:6c:1c:10:67:79:d4:
82:b3:2a:5a:05:65:f5:d3:1d:1a:e2:a3:61:d1:5e:
7f:78:58:5d:f1:01:ce:ce:bc:12:d2:23:98:a6:d5:
48:ac:db:d1:0e:45:ba:35:12:ac:76:5c:1f:87:2d:
74:2b:30:04:8c:48:e5:c5:de:cb:e4:70:3d:a3:87:
fa:02:ca:4c:1a:10:bf:aa:dc:cb:e4:46:aa:ba:b8:
64:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:67:E6:28:97:0A:AF:DF:22:CA:3F:57:9F:D5:2D:94:D9:CB:B1:90
X509v3 Authority Key Identifier:
keyid:A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e3:44:8e:e1:2b:1c:b3:74:47:ef:59:95:47:ec:3d:18:5b:
52:ea:68:2c:b0:d4:4d:52:23:04:62:b0:83:92:82:12:25:1c:
e8:3c:22:97:7b:bb:06:cf:7f:c7:de:cd:5b:3e:d0:8c:d4:b4:
d6:98:c8:1f:1c:52:3b:9d:4c:a0:7b:a9:2e:a5:82:8b:04:eb:
35:bc:b2:d9:54:6c:7b:3a:ee:17:58:3d:0a:0a:f9:a5:3e:43:
85:f7:2a:d1:22:c3:96:af:34:da:57:1c:69:ce:a0:56:2e:2f:
88:14:fb:7f:b5:0d:fe:0e:67:37:e4:d8:91:0c:de:5a:d6:91:
6e:ed:52:f2:49:39:61:bb:f1:90:28:97:f5:6c:e1:86:ba:a1:
5a:5f:96:11:6f:a5:7c:02:0e:c3:ff:8c:93:2d:02:22:da:c5:
70:ff:7d:57:e1:eb:84:54:3c:66:2b:45:7e:38:96:83:9e:4f:
31:32:c5:26:cc:01:2e:fc:fa:f0:fc:63:eb:15:6d:49:2c:1a:
48:84:d2:58:77:e4:79:cd:55:1d:70:3b:c8:6c:40:fe:ca:38:
c5:75:5a:6a:66:ba:e4:0a:57:15:69:7f:5f:61:f0:ff:8a:27:
aa:29:6f:9c:93:84:bc:ab:59:4b:ff:b3:7e:9d:fd:8f:80:f8:
d5:cd:d0:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT3VdKGEfkNddupm6iWmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NzhjMzY1NWM1YTYwOTcxMmU3NTUxMDBkOTg4OTJhZTFj
OGU1ZWIwHhcNMjUxMTA0MTAwMDIxWhcNMjUxMTA1MTAwMDIxWjAzMTEwLwYDVQQD
EyhhZTY3ZTYyODk3MGFhZmRmMjJjYTNmNTc5ZmQ1MmQ5NGQ5Y2JiMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZyxvD//fbiKRMENJK3RAoqhdwX1
b6JtxUn5DpXvOoNL4y15oHa2qLhp37UrEhaGmL5UCgkwHIrj1x+90ZdTuL+cn64j
lzbxQkFn8JxUgEX2NkuwoxhQdj5z+Exwbq7YOkdOzI7KoHkRzp8ZuCHe2s2WiGth
L6FGBAX8cqYL48V8sRT7QadbxkDOlfla8UfA6nsMzD/hxWqzvZATAo4z1NJGNRSW
XllX6Y+PJzNsHBBnedSCsypaBWX10x0a4qNh0V5/eFhd8QHOzrwS0iOYptVIrNvR
DkW6NRKsdlwfhy10KzAEjEjlxd7L5HA9o4f6AspMGhC/qtzL5EaqurhkgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5n5iiXCq/fIso/V5/VLZTZy7GQMB8GA1UdIwQY
MBaAFKl4w2VcWmCXEudVEA2YiSrhyOXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVhqRFpWeGFZSmNTNTFVUURaaUpLdUhJNWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9kYTYxNGItZGQxOS00MWUwLWE3YzQt
NjZmZDIzZWVjMzRkLzEvcVhqRFpWeGFZSmNTNTFVUURaaUpLdUhJNWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9kYTYxNGItZGQxOS00MWUwLWE3YzQtNjZmZDIzZWVjMzRk
LzEvcVhqRFpWeGFZSmNTNTFVUURaaUpLdUhJNWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArONEjuEr
HLN0R+9ZlUfsPRhbUupoLLDUTVIjBGKwg5KCEiUc6Dwil3u7Bs9/x97NWz7QjNS0
1pjIHxxSO51MoHupLqWCiwTrNbyy2VRsezruF1g9Cgr5pT5Dhfcq0SLDlq802lcc
ac6gVi4viBT7f7UN/g5nN+TYkQzeWtaRbu1S8kk5YbvxkCiX9WzhhrqhWl+WEW+l
fAIOw/+Mky0CItrFcP99V+HrhFQ8ZitFfjiWg55PMTLFJswBLvz68Pxj6xVtSSwa
SITSWHfkec1VHXA7yGxA/so4xXVaama65ApXFWl/X2Hw/4onqilvnJOEvKtZS/+z
fp39j4D41c3Q1Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:12 2025 by rpki-client