Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
File: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft (raw, json)
Hash identifier: VMqZ0Ry57KUUU9+ZMcLkYfMeHOpGHna0idw2VZE35VU=
Subject key identifier: 7D:87:2F:94:06:5F:21:A4:18:42:17:5C:77:FE:36:72:6C:3C:50:7F
Authority key identifier: AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
Certificate issuer: /CN=aba10057bcd00762eef43823c030e7e32d572241
Certificate serial: 019A4E4FFF459C7131CC837AE999447EE2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:56 +0000
Manifest this update: Tue 04 Nov 2025 10:00:56 +0000
Manifest next update: Wed 05 Nov 2025 10:00:56 +0000
Files and hashes: 1: 1P9fVQVtxSb2G4sWpvSG7bw0bpw.roa (hash: 6VyhtcepI1NTxHwb+zyOQuM2NICKUmki0vqcGxvdoCg=)
2: 5XE0gfIHPBVwos97p8SFxETissU.roa (hash: 6gs7iKR2AXCvfwIabzt43SR9/MCH860ldfvLILxKt+M=)
3: anHJmbU7C2zjE1lGpkfnKPRRqS4.roa (hash: svRwOAhrUBlYXwTbfNYBTqirI+LGeE+CWUjAVTOIKpw=)
4: q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl (hash: pEXDtaFJnJV2I2OkxyqQX7vhoCT9ycf6+uNOzbWTWxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ff:45:9c:71:31:cc:83:7a:e9:99:44:7e:e2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba10057bcd00762eef43823c030e7e32d572241
Validity
Not Before: Nov 4 10:00:56 2025 GMT
Not After : Nov 5 10:00:56 2025 GMT
Subject: CN=7d872f94065f21a41842175c77fe36726c3c507f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:64:d4:f8:2d:8c:93:52:20:8d:75:1e:5c:
10:a6:3e:8f:10:3f:4c:5b:f5:b9:54:dd:3a:1c:6a:
81:54:f0:4c:b0:05:69:17:23:ef:e9:9e:94:7e:94:
1c:74:27:4b:29:5a:d8:dd:14:37:4e:92:7d:55:d1:
56:2f:b8:46:15:68:02:fc:ae:0b:db:9f:b9:4f:b1:
62:85:96:2b:93:32:5c:8f:e4:cc:48:94:ca:4c:9b:
4a:73:25:85:fa:9a:55:fb:ba:f5:b0:db:c0:07:1c:
e6:25:cf:3f:e2:3d:50:7c:19:50:2f:87:66:f5:7f:
15:56:2c:20:68:14:dc:f3:d8:79:af:e2:22:93:a4:
be:af:fd:2f:b9:20:ac:ef:82:5a:5d:71:60:71:52:
d5:41:d7:45:2e:78:51:5f:a8:0a:b6:22:a8:f0:b9:
29:d3:51:2a:4e:d1:ba:84:89:3f:a3:00:1b:9f:cd:
2f:c4:02:92:18:aa:12:cf:a4:ec:8c:7d:e1:ed:e8:
4f:a9:6c:3b:04:11:9c:a8:7f:27:80:32:33:01:ab:
56:2d:89:f7:c2:89:bd:f4:87:c1:65:f8:22:bd:42:
c3:68:11:56:b3:c8:5c:f7:09:58:77:50:a8:e0:53:
12:f8:59:49:bf:a8:3d:14:d0:19:fa:1c:87:be:da:
ba:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:87:2F:94:06:5F:21:A4:18:42:17:5C:77:FE:36:72:6C:3C:50:7F
X509v3 Authority Key Identifier:
keyid:AB:A1:00:57:BC:D0:07:62:EE:F4:38:23:C0:30:E7:E3:2D:57:22:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/80353d-4f22-4d94-bead-dd20e2994cd0/1/q6EAV7zQB2Lu9DgjwDDn4y1XIkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:e9:2f:cf:48:3c:4e:45:2b:f2:71:5f:c4:e3:76:96:09:bd:
ed:21:7c:ff:5c:3f:d8:b7:68:f4:a4:05:84:92:42:ca:6e:a7:
5d:f8:a7:2f:9c:67:bb:27:8d:c8:68:03:30:9a:40:d9:1b:20:
ae:6e:fc:19:5d:a1:34:2a:ac:e7:75:2d:38:b8:11:21:90:55:
c7:ab:df:ee:c5:19:57:c1:41:a6:8e:80:ca:a8:3c:ac:1c:79:
81:87:2b:7a:76:87:ad:ee:02:bd:46:01:02:82:28:f3:f0:97:
3d:d4:ab:a7:09:7e:ed:19:61:1d:b3:81:66:b6:1a:0a:0f:bb:
3a:e6:72:55:81:a6:db:60:1b:e0:53:b9:40:61:8e:f7:09:ee:
d4:0e:23:e9:62:50:12:7b:0f:13:3c:0d:8a:a1:c0:97:f4:b5:
0c:8c:91:4b:21:3a:48:de:9b:89:39:f2:ab:63:fb:c0:2f:3a:
5b:75:55:3d:90:75:de:99:a0:12:65:e6:83:e8:11:3e:02:cb:
e1:99:0e:70:e3:c7:ac:d6:7d:b1:44:94:e4:8f:d1:52:36:c4:
c2:e3:bd:39:bd:5a:aa:72:f1:1e:42:71:28:13:5a:c8:0f:97:
74:47:93:3a:c9:36:8d:c8:6c:21:3e:e3:b4:d2:f7:66:49:5a:
14:9d:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:09 2025 by rpki-client