Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
File: q6-0Li5v0JBX_KIbmQhNrDt68tA.mft (raw, json)
Hash identifier: lgx4b5XUN0FTigHh2GrrCrV+h+j3YEpVAZVZDff/lY0=
Subject key identifier: 01:70:1E:62:4A:8F:92:F3:AA:0D:C1:C9:70:5D:84:56:7C:E5:06:52
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Certificate issuer: /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial: 019A4DE1FE1CDC9D09F90237F826C073EA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:47 +0000
Manifest this update: Tue 04 Nov 2025 08:00:47 +0000
Manifest next update: Wed 05 Nov 2025 08:00:47 +0000
Files and hashes: 1: m33s4sgep6-q8UmRmhXl2lkYj9Y.roa (hash: SAyf+MEL6W5SBqvzjsdQj/Xgc4QN6O97LJUm4XtKLGM=)
2: q6-0Li5v0JBX_KIbmQhNrDt68tA.crl (hash: lsbU0XbmnTbRV0AWfXxVYVORvHsesMY7LgW8GpeW81U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fe:1c:dc:9d:09:f9:02:37:f8:26:c0:73:ea:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Validity
Not Before: Nov 4 08:00:47 2025 GMT
Not After : Nov 5 08:00:47 2025 GMT
Subject: CN=01701e624a8f92f3aa0dc1c9705d84567ce50652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a6:34:88:1b:96:ea:6b:44:7d:27:ab:4b:8e:
41:da:1d:a2:d0:23:3f:9a:26:14:76:06:e5:25:b7:
45:bd:a5:b7:54:1a:90:8a:d7:1b:76:d4:34:a9:8b:
87:22:3a:30:d6:0e:ad:3d:93:df:60:92:52:ce:cc:
21:4a:cc:fc:1b:34:63:5b:99:02:80:cd:21:fb:f4:
7f:34:1d:6a:b1:cf:f0:06:55:ed:d1:db:6b:a4:fe:
80:05:ce:3b:da:a2:1f:9b:08:24:c3:d7:73:e8:4a:
cb:08:8b:1b:d6:fe:a0:1a:18:ce:6e:a6:7d:fe:7a:
3e:cc:57:69:83:87:b7:14:cb:ba:ea:b8:37:d8:d1:
33:5c:4d:90:c0:bb:49:34:35:1c:13:43:5a:82:fb:
55:6e:c0:d0:95:f2:33:09:f5:9c:76:8a:75:b6:ac:
e2:96:90:c7:1e:5b:9c:a3:98:d9:4e:c8:2b:ed:85:
e3:cd:87:d9:17:ef:b8:42:27:12:10:53:59:53:23:
8d:f5:bc:8c:9c:7d:2a:be:06:5f:cd:c8:71:57:fa:
5d:8b:b4:d6:52:b7:e2:71:df:c4:a9:76:7e:af:16:
4c:d9:ae:78:c2:fa:22:f0:83:1f:41:86:ba:ad:78:
fe:98:3d:f9:a6:2f:49:b5:2d:01:2e:82:7d:45:ee:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:70:1E:62:4A:8F:92:F3:AA:0D:C1:C9:70:5D:84:56:7C:E5:06:52
X509v3 Authority Key Identifier:
keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2b:b9:14:f5:fb:23:e8:97:b8:17:ed:2f:99:40:cc:b0:56:
f7:9d:72:f2:e2:23:a1:68:89:9f:af:59:f5:da:20:11:66:84:
8f:d8:a9:f2:45:12:2f:6d:a7:e7:b5:aa:40:2a:18:85:67:30:
ce:e0:d9:89:39:fe:f9:7b:47:7d:a2:fb:b7:56:e2:84:31:e9:
15:cd:4a:a1:8f:51:79:b3:7f:7c:fb:fc:c7:3a:f6:d1:c1:60:
7e:0c:f6:40:8e:73:2e:e2:fb:4d:fb:38:94:45:d5:e5:06:80:
b6:8b:63:80:18:bb:0e:c8:2c:1d:a8:1e:b6:3a:9a:d2:53:c9:
cc:99:e3:dd:8a:b4:28:50:73:e2:f0:f5:36:7c:cf:58:5f:d3:
bd:24:87:04:3d:ea:7a:f9:85:c6:c6:57:44:08:dc:99:12:6e:
d3:bc:09:a4:15:46:ed:fb:85:97:bb:3b:49:d0:40:2e:55:db:
c3:85:d5:7d:83:23:6b:1d:80:83:55:d4:e9:7c:bf:33:39:e5:
7e:4f:2b:01:89:e9:cf:4a:6a:35:66:06:86:a3:4d:c4:dd:39:
ac:5d:41:16:9b:f5:68:7f:4d:46:b2:e2:d1:5c:a7:56:2e:1b:
1c:84:67:65:94:6f:b7:7e:a3:83:11:6f:c9:c3:ba:fe:f3:40:
1e:e6:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:42 2025 by rpki-client