Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: X5GbL8VazA23hurzTM8uVvnOV8wk1X2g5y0iyxi45xE=
Subject key identifier: 62:16:65:65:A1:08:04:98:2F:37:45:09:E9:3A:EE:F4:A7:FA:27:DB
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 019A50E3C2434E616776C234A69DD3B5E7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:34 +0000
Manifest this update: Tue 04 Nov 2025 22:01:34 +0000
Manifest next update: Wed 05 Nov 2025 22:01:34 +0000
Files and hashes: 1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: 7txpiG3REDq9msVkTVe6jbuptARzQkUWpi9ZIBu4AUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:c2:43:4e:61:67:76:c2:34:a6:9d:d3:b5:e7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Nov 4 22:01:34 2025 GMT
Not After : Nov 5 22:01:34 2025 GMT
Subject: CN=62166565a10804982f374509e93aeef4a7fa27db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:b7:fa:35:26:f0:a9:1c:fa:89:63:c1:65:
a7:7a:39:22:e4:04:7d:25:cf:76:e0:96:32:4a:43:
e3:ee:f0:f3:f4:19:52:17:6c:c1:a0:e1:4a:23:c3:
82:55:2a:96:af:54:e3:bf:6b:6c:35:9f:54:f1:d3:
96:92:b4:06:e3:0e:92:e4:cc:3b:d9:a6:6d:3b:d1:
ae:57:04:d8:6b:b0:eb:c9:d8:a5:9a:97:39:92:21:
5d:80:65:d9:58:7d:fb:dc:34:e1:d9:3f:38:49:83:
c0:f4:16:4b:39:43:13:67:f9:46:d1:60:d6:ea:c4:
6a:f9:4d:b8:bf:a5:d4:51:cf:aa:fc:f8:84:28:d2:
20:5a:d8:f7:3c:fd:97:d2:8c:1a:92:96:ff:5e:8c:
18:24:c2:e4:84:04:a8:32:ba:0a:c6:0e:51:90:94:
fa:16:85:02:d7:f0:ab:c4:44:35:ee:b6:62:bc:54:
67:65:b5:99:e7:79:f2:fa:7a:41:e6:44:32:81:ee:
d5:e5:fb:db:81:3e:77:24:f6:ca:7e:f6:97:f7:c6:
64:ec:64:0a:d8:49:58:75:bc:e0:db:c6:18:5b:da:
03:58:62:5b:30:b6:92:ed:2a:f9:fd:cc:43:95:d6:
18:24:bd:e8:82:2a:1d:38:26:5f:2b:b4:d1:ac:34:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:16:65:65:A1:08:04:98:2F:37:45:09:E9:3A:EE:F4:A7:FA:27:DB
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:dc:83:d9:3d:58:f7:59:eb:bb:5f:20:8b:86:c7:d4:a8:4a:
3b:d7:b8:10:63:c9:95:ab:bd:14:58:42:82:b8:6a:04:65:d2:
a8:06:4e:c4:1c:0a:af:f4:3d:19:ca:92:97:6e:7a:a5:6f:d9:
91:c6:c1:49:11:13:42:cb:c1:db:ec:2a:d5:0f:2e:eb:bf:eb:
ce:3a:f1:32:f7:27:f7:8b:af:46:42:4e:12:4a:b8:67:09:35:
e8:56:2e:ce:ee:4c:bb:81:a6:5a:80:51:e2:48:88:19:f0:09:
e6:61:f0:22:63:74:67:b9:12:dc:d0:b2:4a:ca:50:c8:10:2f:
71:75:23:a0:2e:ed:75:99:f1:1c:7d:0d:7f:57:b7:36:3f:de:
5c:58:3d:91:35:a0:57:5b:ae:2c:6b:b2:23:69:d9:59:4b:a1:
7c:cb:81:5b:c5:1c:f7:3e:54:b5:58:c3:45:bf:61:b5:51:45:
57:3f:1e:aa:95:39:b1:eb:04:b0:73:4e:5f:c8:0e:d9:9e:f9:
8f:fa:e7:a5:88:e0:c6:58:6f:84:35:7e:68:5f:f2:0c:af:ae:
37:ac:07:ac:a5:2f:e2:22:fb:60:79:e0:14:b8:2c:f2:ad:da:
e5:6f:db:bf:a7:c7:85:42:83:78:91:57:d0:f9:6c:e5:32:39:
6c:a2:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:39 2025 by rpki-client