Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
File: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft (raw, json)
Hash identifier: WgtfVMRKXw+m+ByYL0dbmCMvt5HU17OIJcyHCugO6ZQ=
Subject key identifier: E0:86:B9:4D:70:17:B5:13:14:16:06:06:FC:78:3F:D3:62:96:5B:5E
Authority key identifier: A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
Certificate issuer: /CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Certificate serial: 019A4D73992B654C04942E18908E3111090F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
Manifest number: 0AB1
Signing time: Tue 04 Nov 2025 06:00:12 +0000
Manifest this update: Tue 04 Nov 2025 06:00:12 +0000
Manifest next update: Wed 05 Nov 2025 06:00:12 +0000
Files and hashes: 1: 0QN5Ofx6WwMbvcTiOoejeiVWFBY.roa (hash: k+6IIDKqJuYMt9/EhXM2bPBbRQ5u5Kv99iIIWzz5/2A=)
2: 1-SuDyMrxWXM7X2VtIVu9aGgRI9Y.roa (hash: 18EMBTikkSXkhqeBREgORyh2My5yAHMuFmHNML82Td4=)
3: jAsntzTtn92HQL9aHBlPKpQ9oi4.roa (hash: t92FrYwTTmbFWyaQiww/KtMDvrJ45VQgGGv2qRGnF4g=)
4: qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl (hash: Xw91v9y0Avy1H698nCNJBvNwa2W/cMwVcy98k7jk5w8=)
5: w6nRqqLinLORL7W_fsNehh2pePE.roa (hash: hnUVitPfz7Hljib/HgZzf6AtllwvuxtgqDf0jZ0Pk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:99:2b:65:4c:04:94:2e:18:90:8e:31:11:09:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a952d0d266557385836aab7ae3fdced4ca74ad89
Validity
Not Before: Nov 4 06:00:12 2025 GMT
Not After : Nov 5 06:00:12 2025 GMT
Subject: CN=e086b94d7017b51314160606fc783fd362965b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:17:af:3f:dc:62:93:c0:b2:22:07:0b:84:
95:ab:b5:97:18:1e:04:08:0f:99:1a:69:83:67:f9:
c4:50:80:6b:d8:4e:65:6c:60:3c:39:98:5c:bf:83:
15:95:ab:be:dc:ee:ed:e4:af:21:07:e8:62:bf:8a:
39:c5:38:87:99:df:a4:35:f4:0f:40:8a:92:a5:e7:
96:85:b3:41:80:da:60:ec:5c:bc:ab:49:aa:1b:96:
b5:e5:24:b8:ac:a2:fe:d0:5a:24:23:ea:ae:c8:bc:
43:47:5c:5c:a5:f1:ae:3b:26:9c:32:df:60:c2:e2:
77:72:aa:23:74:70:00:df:0b:06:6b:dd:b5:2b:1b:
60:32:d3:8a:e2:fc:45:9b:7d:d9:79:b1:f9:7d:fc:
e7:f9:71:5d:50:3e:ac:1a:a7:19:71:5e:ed:d7:ee:
ad:b1:e9:27:db:23:53:99:91:70:ef:7b:c2:44:44:
bf:0c:1d:f7:5d:62:9b:9e:37:da:27:14:cb:7a:4d:
2f:2c:da:46:b9:60:6c:07:e1:26:40:f8:0c:fe:f4:
81:6c:bd:f1:70:1a:68:5d:f9:ad:e5:23:29:6d:6a:
1a:f0:69:8f:e0:fb:04:5d:17:76:c3:a9:d6:06:56:
18:a8:69:88:62:c8:14:9a:71:d7:65:69:03:77:b7:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:B9:4D:70:17:B5:13:14:16:06:06:FC:78:3F:D3:62:96:5B:5E
X509v3 Authority Key Identifier:
keyid:A9:52:D0:D2:66:55:73:85:83:6A:AB:7A:E3:FD:CE:D4:CA:74:AD:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/270a91-cbfd-4503-b960-4c21a505f346/1/qVLQ0mZVc4WDaqt64_3O1Mp0rYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b2:99:75:7c:95:96:a7:10:ca:60:88:b8:66:55:b8:8f:13:
34:04:c3:88:36:8f:fb:55:c8:92:d6:7f:1b:25:96:9d:e3:2b:
2b:fb:1b:34:55:3b:b7:de:f5:a0:ad:39:ca:f6:e5:6d:eb:cb:
69:12:ec:de:1b:56:1c:97:9b:c1:df:a8:48:4f:b9:e5:b5:6f:
92:ea:d9:80:d7:d2:6b:5c:91:07:40:0a:da:a2:9e:6a:c4:4d:
84:97:2b:b2:41:6a:28:d7:34:72:f7:cb:8b:4e:39:8f:37:48:
b4:10:a4:e0:32:32:ba:f6:02:07:bc:e0:be:4e:4c:f6:4c:92:
fa:29:54:9f:c7:4c:65:68:1c:5f:86:8d:42:ec:41:fb:17:b1:
c7:1e:39:87:2e:32:8b:dc:ff:f6:36:02:89:89:3f:5e:1e:4b:
43:9c:71:d2:48:9b:d0:c8:6d:d2:57:32:a4:64:0f:dd:81:f3:
e3:4a:09:64:84:ff:ed:6d:fd:b3:28:da:be:b1:ea:e5:ca:10:
d6:91:d0:6c:7d:c0:db:6b:4f:41:bd:df:a5:8e:06:c2:76:ff:
7f:53:73:a5:40:e7:29:b0:c2:de:cf:02:44:82:ac:b8:b6:79:
29:de:28:5d:8b:52:08:c1:91:e4:74:57:7c:08:ec:98:df:d2:
ab:10:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:27 2025 by rpki-client