Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: 8MkhIrwPMbKZVmLt8CajUIg5xh4+ShKSmz5gwBGBxtE=
Subject key identifier: B5:5A:B5:BF:CE:27:FA:17:E1:FE:82:5B:96:27:47:54:97:C5:FE:0F
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 019A503E48BB35806CB754388F16D9F0496C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 16AE
Signing time: Tue 04 Nov 2025 19:00:50 +0000
Manifest this update: Tue 04 Nov 2025 19:00:50 +0000
Manifest next update: Wed 05 Nov 2025 19:00:50 +0000
Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=)
2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=)
3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: ft4S4qL2OpOReUz07uOdkp/41hy99GZBRQe9Cy2wYMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:48:bb:35:80:6c:b7:54:38:8f:16:d9:f0:49:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Nov 4 19:00:50 2025 GMT
Not After : Nov 5 19:00:50 2025 GMT
Subject: CN=b55ab5bfce27fa17e1fe825b9627475497c5fe0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:12:53:56:e7:4b:9c:c7:b9:fb:2c:f5:3a:
9a:29:f8:93:73:35:69:53:43:39:42:05:44:17:44:
ed:99:c5:d3:dc:a9:20:2b:b5:c7:83:64:da:78:10:
e2:c6:a6:35:f8:88:80:4b:4d:50:d8:1f:43:d5:08:
94:5d:6e:b7:12:bb:b7:f3:32:c0:b0:91:36:20:9d:
84:dd:b2:8b:a5:4e:bc:9d:c5:56:9d:93:2c:6e:56:
d1:6e:b7:ed:1c:51:f2:48:ff:97:d5:6e:d4:4d:17:
14:06:42:9b:4f:15:b1:fb:6a:a5:aa:bd:2f:91:31:
dd:bf:0d:62:e8:5d:1e:69:0b:3a:4e:40:10:17:75:
36:6e:e8:0e:79:e5:8b:ed:dc:76:00:bb:48:d5:a4:
f0:a0:e3:86:a8:7f:8a:0f:d1:df:cb:23:1c:0b:cc:
5b:5d:78:4b:18:41:7e:e5:2e:d3:5d:f9:f1:8c:c0:
75:f5:cf:6f:2b:65:bc:57:06:4d:9f:c2:8e:81:26:
26:63:99:70:71:ff:6f:c0:b2:ca:6d:4d:43:f9:2e:
b1:37:8b:08:39:86:19:f1:2b:b4:43:5c:1f:06:9c:
05:d3:cd:09:cd:60:00:6c:02:4c:c3:6d:a1:b0:50:
d9:99:b8:16:92:73:49:b7:2e:41:ae:74:e4:8b:0f:
a0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5A:B5:BF:CE:27:FA:17:E1:FE:82:5B:96:27:47:54:97:C5:FE:0F
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4e:1d:15:ae:ac:61:71:05:ad:ae:dd:d4:44:1f:0c:76:c8:
29:a3:e0:0e:ad:36:c0:77:d4:91:7b:60:97:76:d4:b7:c2:f8:
e9:fd:ca:f6:e4:58:36:11:3b:ea:24:12:51:ac:f8:b2:f1:02:
d9:0b:3d:0c:4f:96:0d:54:80:e3:78:0c:eb:fc:b0:21:ff:c3:
bb:82:70:ba:41:72:a2:ff:81:95:8c:a5:fc:92:7f:55:60:0c:
74:80:f0:70:6c:8a:cd:fb:22:1c:c6:2d:e9:3a:6e:8c:71:26:
4b:ca:5f:8d:7c:4d:32:57:11:f3:82:9c:2f:8f:4e:20:f2:a2:
c3:0d:b0:47:a9:33:0f:a3:52:0f:67:11:a7:43:de:3a:ec:d7:
82:50:7f:37:ab:98:f1:4c:16:ed:73:d6:01:98:02:66:75:b2:
12:37:79:0f:06:a7:49:f4:2c:e6:7b:58:ad:ee:1e:f8:9d:1c:
a8:f2:88:3e:31:9b:93:d3:cb:b9:c6:9a:c1:8f:20:6a:97:b4:
30:36:de:c3:78:66:ae:42:c5:53:5c:2b:2c:15:19:a7:9f:01:
cc:a6:c3:78:e5:f2:d8:e1:40:b6:a5:6c:2e:0b:00:8f:28:ad:
92:4f:ae:cf:e0:cf:7e:80:57:d1:76:4e:45:d4:a8:14:c8:a3:
9b:52:f5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:00 2025 by rpki-client