Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: +vP81HE0qhl2CFgwFPt6ByBeVugavrZiVBOm4RuCu3Q=
Subject key identifier: AA:5A:AE:26:B9:67:9C:57:9F:E2:7C:38:73:39:90:BF:91:11:BA:56
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 019A511966FA05448A5504BC1506C6E18B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 16E9
Signing time: Tue 04 Nov 2025 23:00:10 +0000
Manifest this update: Tue 04 Nov 2025 23:00:10 +0000
Manifest next update: Wed 05 Nov 2025 23:00:10 +0000
Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: FoqiKuf3xnDmYAxlpZZ854A6nFiI0W5vUNYbWZGUKh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:66:fa:05:44:8a:55:04:bc:15:06:c6:e1:8b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Nov 4 23:00:10 2025 GMT
Not After : Nov 5 23:00:10 2025 GMT
Subject: CN=aa5aae26b9679c579fe27c38733990bf9111ba56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:6f:1b:34:e0:02:20:e7:98:8f:12:c6:88:
bc:42:e2:db:6d:70:87:cb:ac:ac:6e:bf:e1:1e:fc:
0e:be:f3:40:25:30:1b:a6:dd:0f:e0:4e:5a:b2:56:
a4:10:a9:0a:c4:4c:77:c8:15:6f:fe:21:81:7b:b2:
a7:81:46:fd:d1:5c:92:04:22:db:f9:cb:3a:b2:b3:
5a:94:b1:95:9b:2e:4b:9e:c0:84:c3:58:bd:f5:90:
b8:50:0d:d7:ed:6a:50:8f:5f:c9:53:f2:c6:83:a9:
27:d8:17:c5:2d:80:9f:97:29:bd:4b:c7:b6:63:2c:
24:ac:7e:18:42:77:dd:9b:5d:dc:7e:91:74:58:c6:
85:0b:5f:82:6d:7c:1a:b3:c3:63:02:bd:d5:dd:d0:
01:b6:74:38:50:81:f4:72:88:39:bf:35:41:85:3a:
7e:39:50:6f:a7:fc:cb:32:2a:4e:e5:fe:e7:4e:e7:
ea:1c:ad:ef:0d:6e:73:57:fe:a3:39:64:77:09:3a:
59:e7:4c:ca:39:f3:3c:ab:76:6d:42:24:15:93:be:
b8:83:5d:a2:4f:33:e6:ee:11:4a:48:b6:bf:f4:73:
f1:84:df:a5:b1:e5:31:9b:2f:f6:f0:e0:66:db:52:
df:06:08:9e:65:0d:0b:99:59:44:05:92:9b:f9:d0:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5A:AE:26:B9:67:9C:57:9F:E2:7C:38:73:39:90:BF:91:11:BA:56
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ff:b4:3e:54:dc:7d:56:ff:32:da:79:94:e0:4a:26:a8:11:
6d:0e:bb:17:ea:98:7c:da:6b:39:e3:be:95:d8:69:58:76:87:
9d:f7:ab:05:6a:58:2e:c7:28:f6:d0:fb:f8:62:44:d3:a2:a1:
63:a3:e6:9d:d6:17:08:c2:ee:91:bd:3d:2e:10:d6:ba:b4:06:
b3:6c:ac:80:96:50:97:d3:43:2e:7a:00:a6:ee:46:a6:4f:a9:
c8:15:31:19:e1:e2:f1:6e:00:51:46:92:7c:0b:60:32:e5:4c:
84:b6:cb:f7:c4:00:0b:94:60:0d:7d:6c:c5:b5:0d:24:89:ec:
d6:dd:ac:eb:33:26:eb:a8:84:53:8f:a5:c8:da:0f:04:81:5a:
c7:a4:a0:92:02:09:8d:ce:9b:d1:79:57:89:0d:d6:a9:44:0a:
40:4f:ad:ba:aa:75:67:88:59:54:8e:93:87:73:eb:ff:51:d5:
23:01:5c:cd:43:53:d9:f9:87:25:70:5d:8e:73:9e:3c:57:63:
d6:ff:dc:78:b5:12:cf:7c:90:7c:45:2c:a8:8d:02:86:75:70:
b5:44:f7:06:37:90:74:9a:8b:2c:77:10:d0:cc:e9:8e:76:81:
44:76:ff:50:ba:fd:8b:d5:4d:86:b1:00:00:1d:75:ba:95:c5:
71:f5:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:55:49 2025 by rpki-client