Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File: qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier: 89KfpKVL45VK1Eqj+v/4qIzwSeupWopisR0bq17HmHQ=
Subject key identifier: 68:78:38:BC:BB:D0:FC:0C:16:13:EC:89:06:24:9B:D5:BF:FA:BB:AC
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial: 019A4E86772B76662BF53D66F6FC9F830F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number: 171C
Signing time: Tue 04 Nov 2025 11:00:26 +0000
Manifest this update: Tue 04 Nov 2025 11:00:26 +0000
Manifest next update: Wed 05 Nov 2025 11:00:26 +0000
Files and hashes: 1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
3: RXbwxnxv5i77bPKXOPNg3gLHQ2Q.roa (hash: Hb7ewCgNUReilTcVx5Y6r0li4yOFHBvAH9Jj35wZEN0=)
4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: gbfxO6kdWnYMUgHFp81PjodeRaunZKrkH0PZcDrgJ/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:77:2b:76:66:2b:f5:3d:66:f6:fc:9f:83:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Validity
Not Before: Nov 4 11:00:26 2025 GMT
Not After : Nov 5 11:00:26 2025 GMT
Subject: CN=687838bcbbd0fc0c1613ec8906249bd5bffabbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:0b:b2:4a:3d:78:3c:ac:bd:e9:58:3e:0c:
1f:75:df:6b:fd:86:cb:ad:86:74:21:40:e1:85:83:
ad:89:66:af:a8:dd:85:d8:d1:6e:1a:e1:26:c6:f6:
54:41:72:3b:a0:3f:0c:8d:4a:58:e5:e8:80:ce:34:
fb:01:1b:8a:fe:c1:6a:9c:f0:ea:d8:d2:76:38:f8:
1e:38:c8:49:34:c9:e5:a9:ad:b5:5b:77:40:fa:98:
09:07:90:1a:60:64:0c:aa:9f:33:c1:71:b2:f5:41:
f7:8c:a6:5e:84:1c:6c:21:e3:87:6a:4f:ae:ad:22:
eb:d3:e9:34:e1:50:ef:ac:1b:4f:d6:b4:81:22:7e:
a2:f7:bd:32:fb:72:4d:e3:70:92:5a:83:e7:f7:75:
c6:0f:cc:40:2d:68:4f:c7:e4:14:8d:4b:54:b0:70:
16:f9:19:fe:22:5c:f9:cf:89:41:df:4c:5b:79:d1:
a0:84:e4:54:29:dd:1c:81:d2:37:17:fe:82:ba:d5:
e9:50:83:d2:f9:c4:dd:82:50:71:5c:f4:5c:ba:e0:
ff:84:59:16:64:56:3c:79:e3:d3:4c:48:11:82:e9:
dc:d7:74:1f:ac:e9:a8:dc:d8:31:1f:88:6e:a1:38:
2d:38:a4:8b:5a:fe:3c:3f:72:3c:49:47:6a:b3:49:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:78:38:BC:BB:D0:FC:0C:16:13:EC:89:06:24:9B:D5:BF:FA:BB:AC
X509v3 Authority Key Identifier:
keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8d:cd:08:c0:6b:31:05:e0:15:5a:77:c6:f0:01:35:d2:c8:
0e:8c:e9:2f:f3:20:37:c4:bd:13:f7:76:8b:63:fc:fe:c3:8e:
e9:47:af:1b:4d:11:dc:6e:c3:99:a1:06:f2:55:27:af:98:b6:
d3:54:5a:c3:d5:dc:11:3e:ae:f4:38:d7:84:2b:26:3b:46:62:
a2:57:99:ba:79:0c:81:a3:fb:30:3d:e4:f2:db:7d:dc:4e:43:
85:38:ac:fe:02:e5:d2:37:08:55:84:fe:2f:de:76:46:0f:c0:
e9:3d:04:b9:38:50:90:7a:76:89:54:77:2f:d9:e9:26:6d:cf:
db:25:40:40:97:4e:04:02:bf:17:59:16:4d:82:84:0e:ed:5b:
8a:9e:c0:84:d4:7b:51:24:13:f6:bf:0f:66:73:2e:bf:a4:51:
53:00:b6:98:ae:19:25:bc:f9:72:61:50:cf:50:a9:3a:d3:63:
fc:97:b1:ad:01:6f:15:75:8b:e2:5a:fc:5a:8a:06:b3:74:19:
ac:cd:f1:fe:bc:82:ef:ea:fb:1e:62:5f:0b:ed:d4:97:fa:81:
13:09:f8:99:8a:be:f9:c4:8a:67:fe:4e:22:1f:91:33:49:20:
15:db:6b:19:ab:91:4b:d0:8c:9e:c0:df:19:21:ba:a6:71:19:
32:85:d0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:47 2025 by rpki-client