Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: OpCBwCxO3G/rSZzj3ARnxGxIrJJXA+IaMeIY6a0Ek58=
Subject key identifier: A5:82:2C:3C:FE:C7:1E:25:EE:C2:6D:61:70:87:5B:63:9E:83:D6:59
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019A4E4F313985F26AFF1518DF9868AA4EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:03 +0000
Manifest this update: Tue 04 Nov 2025 10:00:03 +0000
Manifest next update: Wed 05 Nov 2025 10:00:03 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: KYIuVRHqS42RGmW8q/kSKkjvHwHes0hllVtU43bcUC8=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:31:39:85:f2:6a:ff:15:18:df:98:68:aa:4e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Nov 4 10:00:03 2025 GMT
Not After : Nov 5 10:00:03 2025 GMT
Subject: CN=a5822c3cfec71e25eec26d6170875b639e83d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:bd:e4:48:05:a7:44:d6:02:b0:9e:4c:f9:
a4:2a:4f:d1:98:94:cf:68:e2:69:23:3c:0f:cf:bc:
64:77:8a:3f:d4:86:6b:aa:44:3a:55:a0:cc:36:83:
2e:2d:e4:18:42:25:dc:7b:30:53:20:d9:eb:a1:3b:
c6:a9:1f:79:e6:b5:3c:24:c1:b3:7b:08:67:72:2e:
f4:af:47:4e:2c:d7:42:67:01:30:a5:06:ce:e4:0f:
8e:44:98:28:17:01:73:65:70:9f:1d:6d:0f:3d:c2:
12:6e:a4:f7:9c:dc:96:b3:09:f8:06:8e:ca:5d:8c:
cd:af:33:78:8f:cd:cd:99:96:cb:76:21:94:57:cc:
7a:4a:44:a0:de:5d:4b:dd:31:20:6d:ee:63:8a:52:
e8:25:c4:e6:85:89:05:a8:65:07:17:14:74:e2:8d:
92:21:08:1d:ea:fa:b3:a3:d6:02:9e:01:f2:ff:c7:
2b:4b:4b:b5:69:a8:85:05:a8:80:69:52:77:ad:0d:
b9:24:1e:f3:db:b2:72:b3:62:c2:81:0c:ac:8c:57:
43:ad:29:fb:16:2f:e2:bb:4f:1f:2c:c8:a7:a9:ca:
63:74:45:f4:e4:65:ce:3c:ab:23:31:e1:8d:f5:bd:
ca:c5:41:26:31:89:3b:07:16:56:50:bf:09:13:7d:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:82:2C:3C:FE:C7:1E:25:EE:C2:6D:61:70:87:5B:63:9E:83:D6:59
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:be:ec:6d:5b:26:bb:1b:21:f6:62:00:91:19:82:f8:d7:a0:
9e:c1:2a:4e:fe:0a:76:0c:fa:ab:4d:03:9f:03:46:fb:d6:61:
6d:f4:78:17:ee:16:a2:25:31:ab:4a:07:cd:d7:08:7b:58:c6:
bb:fa:e8:23:85:b1:76:59:c6:8f:a6:c5:04:a4:8d:2b:cf:06:
01:e1:28:36:f3:93:db:b6:7a:ca:47:a6:2b:42:1a:80:36:20:
a7:ad:a2:f8:fe:de:c7:76:e0:2a:90:c8:e8:e1:ac:4d:c3:7d:
d8:00:25:16:32:3e:20:a9:af:eb:11:9e:37:8d:dc:9b:91:c4:
69:2c:c7:8c:3d:f0:74:4a:93:b9:86:43:d3:43:09:47:6d:df:
db:bb:2f:96:a6:62:2b:a4:3e:fa:27:cf:6e:70:68:ef:f5:99:
ee:e1:01:59:e7:90:33:d6:6c:09:0e:82:d2:94:b7:a6:0b:b3:
00:e0:16:0c:d1:ac:6e:3f:78:96:96:e3:f5:e9:3f:14:cb:97:
9e:ec:11:00:a0:1b:37:78:44:2a:d9:e3:41:72:be:b8:a8:76:
ec:e6:c8:a6:0c:ef:36:45:45:c4:9e:11:4f:78:38:cf:e8:32:
dd:da:49:06:54:5b:30:b5:63:32:be:e4:1a:d3:84:42:f7:9f:
d9:bc:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:54 2025 by rpki-client