Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: zLaLHmXcru3Nk2nQSgTIYLlaXTpS0zBXikklZ3d3W60=
Subject key identifier: 46:39:5E:F7:EF:5B:52:0A:05:22:56:A1:FE:B0:8E:18:94:41:09:0B
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019A4EF420F551FF84DE74361340AE4A5DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:13 +0000
Manifest this update: Tue 04 Nov 2025 13:00:13 +0000
Manifest next update: Wed 05 Nov 2025 13:00:13 +0000
Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=)
2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: RbHqgZnJSOeiMCQ1tUcNiUPQhrP7VOCfDUb6MfGMkG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:20:f5:51:ff:84:de:74:36:13:40:ae:4a:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Nov 4 13:00:13 2025 GMT
Not After : Nov 5 13:00:13 2025 GMT
Subject: CN=46395ef7ef5b520a052256a1feb08e189441090b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:ed:7e:e6:4f:8b:a7:29:48:48:0b:33:19:
0a:a1:85:63:5d:11:bb:f0:77:64:f6:41:d4:93:1f:
88:f9:35:55:4d:38:32:32:ab:fa:8d:25:44:b8:99:
43:4e:15:51:e6:88:9b:ce:72:0d:21:04:96:6c:c6:
7c:31:ad:b1:b9:59:82:86:19:d4:49:b4:23:ee:40:
42:56:e4:c8:85:8f:0d:1d:c8:b9:a8:bf:f4:bb:7c:
0f:50:4d:06:12:e1:09:57:d1:33:5d:7a:94:71:d0:
2e:14:03:81:9f:97:d9:f0:55:3f:82:16:63:2a:8e:
0b:87:d8:fd:f9:cd:72:d3:1d:c1:33:90:34:4c:c5:
dd:07:35:55:45:9b:13:b4:9b:89:d1:42:02:c4:bc:
6a:94:0e:e9:51:2e:d5:16:94:a9:89:8b:43:40:4c:
1f:80:3a:4c:ac:fb:b5:c0:a4:0c:2d:56:46:2b:40:
f7:75:02:f6:cb:16:88:e4:88:ba:9d:1d:93:c0:41:
98:d4:9a:e3:7d:cf:70:ae:8a:fd:62:40:69:09:c9:
ec:b6:9c:f2:e8:00:bf:98:da:b2:2a:19:81:8a:d9:
8b:6f:10:f8:75:43:48:c0:24:cc:af:b5:c4:a8:6f:
d4:fd:dd:71:72:86:5c:27:6d:97:86:2a:64:5a:42:
a3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:39:5E:F7:EF:5B:52:0A:05:22:56:A1:FE:B0:8E:18:94:41:09:0B
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c9:a2:f5:fd:9b:05:a7:7b:98:0e:d6:12:a1:50:22:90:46:
c6:f4:d1:9d:9f:85:11:90:ce:c1:a7:20:cf:10:08:4f:c1:c9:
57:5e:0a:a6:f6:26:41:fb:fb:bf:31:6c:16:05:ae:15:39:b1:
28:90:2b:6a:6a:de:ea:9d:bb:90:cd:de:b3:e4:8b:e9:a5:89:
9b:d1:df:65:a3:3b:22:ea:e5:45:4a:cb:b1:64:8e:e5:b8:c9:
31:fb:6b:66:46:8a:18:4d:95:11:49:35:73:d7:f9:02:0f:f7:
f7:a7:45:c3:85:fe:fb:62:e6:ce:9a:4c:b7:9e:05:12:b0:a9:
5c:0c:3d:cd:9c:65:22:07:4c:42:ba:1f:b8:56:e1:5d:6a:60:
99:16:32:80:23:e3:68:6f:6e:06:e1:ea:4f:01:cb:be:a9:cb:
8d:2b:cb:f5:46:c0:1e:c1:53:97:a9:8a:14:c2:7b:95:17:31:
23:18:d8:35:f1:b0:f4:ac:bd:8f:e1:d5:3a:9d:53:1a:48:1b:
93:0d:18:53:3c:e8:a9:66:2e:5f:fe:58:ab:bd:ee:de:66:cc:
31:3c:6b:74:45:78:b9:7e:9e:db:78:ad:6f:85:ea:fe:e5:bd:
2b:1e:e4:42:bf:26:96:5e:bd:d2:03:36:a6:5c:48:a2:d1:c3:
33:1d:0f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:45 2025 by rpki-client