Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
File: qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json)
Hash identifier: /cXTadR0EgW5kG7tqbXXJM8WYtfiPjuzW0wb8JwK0Vc=
Subject key identifier: F3:E7:8D:72:82:CB:02:44:44:65:D3:08:95:59:48:2E:AC:6F:CA:06
Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
Certificate issuer: /CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Certificate serial: 019A50E2E5F4ECDE892672D4D2806195CC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 22:00:38 +0000
Manifest this update: Tue 04 Nov 2025 22:00:38 +0000
Manifest next update: Wed 05 Nov 2025 22:00:38 +0000
Files and hashes: 1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: hrTqpJ712/VIO7f6DHG3CxJgPC5PI6iQT2oc8/i1Qr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:e5:f4:ec:de:89:26:72:d4:d2:80:61:95:cc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Validity
Not Before: Nov 4 22:00:38 2025 GMT
Not After : Nov 5 22:00:38 2025 GMT
Subject: CN=f3e78d7282cb02444465d3089559482eac6fca06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c6:4e:8f:04:6c:bb:70:72:7c:3f:1e:83:c1:
54:7b:93:79:7a:d0:dd:40:57:cd:e8:e7:5e:46:4b:
56:78:43:59:30:44:2d:fe:6d:53:3f:f4:2d:13:c7:
78:f0:d2:b0:c8:7a:c4:2c:ed:78:05:7a:c5:3f:4d:
61:a7:e4:3a:c1:4a:b2:5e:a8:d9:12:4a:9f:ee:4c:
5e:d8:e5:32:cc:2d:a6:15:45:df:35:76:ce:7f:eb:
46:b8:ca:94:b8:67:10:a5:46:5e:bf:97:7a:14:30:
a4:b6:64:f2:e0:a2:8e:d8:2a:dd:65:93:a8:de:60:
23:8f:8a:60:9e:74:de:12:87:f2:c4:5e:83:68:21:
91:20:eb:81:16:44:9a:58:4f:e7:59:77:13:7b:0e:
23:d5:93:08:d6:85:92:02:eb:70:68:f4:8f:48:88:
13:5c:37:4f:a7:b3:ef:0c:54:05:2f:a8:51:ee:77:
5b:dc:c4:bf:7d:45:77:e0:ba:22:31:be:ba:d8:cd:
c2:28:fa:54:fc:bd:37:49:ef:d0:d5:5b:eb:ca:cf:
13:71:2d:72:b3:d0:c3:ca:ef:c0:06:b8:66:7f:c3:
6e:68:56:fa:5a:f5:bf:70:9e:4f:ff:2f:31:82:e3:
da:de:72:21:ca:3c:08:11:86:5d:87:68:b0:54:ff:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E7:8D:72:82:CB:02:44:44:65:D3:08:95:59:48:2E:AC:6F:CA:06
X509v3 Authority Key Identifier:
keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:bb:e8:c4:f2:fc:3c:a5:96:60:66:6b:fc:54:0d:88:d4:
11:3a:fb:30:53:c0:8a:f5:01:94:80:05:b1:7e:f3:80:08:c1:
99:59:1e:f1:28:0b:11:f5:90:74:d4:b4:e1:7c:e1:93:cb:25:
97:5a:fa:5e:52:da:12:64:e7:88:43:72:f5:3a:16:dc:6d:80:
f1:69:b4:70:82:2f:78:91:64:55:ff:fe:90:dc:70:21:a2:39:
e4:2d:77:55:a7:30:18:3f:a2:20:d4:86:02:3f:9f:b8:38:e1:
c5:9e:50:01:2c:3c:c0:58:cd:34:cf:f2:bd:f8:73:92:ab:91:
7a:9e:b5:9a:0e:ec:a1:15:35:4c:9a:9d:5f:68:fa:b7:c2:47:
f9:d8:1c:dc:2d:d4:c5:5c:f1:ad:93:38:7c:2d:6e:57:0f:03:
42:d7:c1:41:d2:62:d2:f9:c6:c8:ff:05:3d:c5:f7:9f:a0:2c:
58:31:fb:41:4f:50:d9:08:e0:15:04:a3:86:f4:e1:a4:30:35:
06:da:04:98:0c:47:e0:c7:ee:b5:a9:48:e2:4c:e4:1c:15:36:
06:13:d9:f4:9b:72:af:a4:cd:c7:77:b7:c5:53:0f:4f:5f:c7:
aa:b1:12:37:bb:26:f9:dc:31:32:9c:7a:e9:9f:3b:7d:20:a6:
59:5e:85:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4uX07N6JJnLU0oBhlcwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NmE1MzYxMGQ4ZWY2NjRhMTI3NWI3MWFhZWFiYjI4NTEw
NGMyNGYwHhcNMjUxMTA0MjIwMDM4WhcNMjUxMTA1MjIwMDM4WjAzMTEwLwYDVQQD
EyhmM2U3OGQ3MjgyY2IwMjQ0NDQ2NWQzMDg5NTU5NDgyZWFjNmZjYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMZOjwRsu3ByfD8eg8FUe5N5etDd
QFfN6OdeRktWeENZMEQt/m1TP/QtE8d48NKwyHrELO14BXrFP01hp+Q6wUqyXqjZ
Ekqf7kxe2OUyzC2mFUXfNXbOf+tGuMqUuGcQpUZev5d6FDCktmTy4KKO2CrdZZOo
3mAjj4pgnnTeEofyxF6DaCGRIOuBFkSaWE/nWXcTew4j1ZMI1oWSAutwaPSPSIgT
XDdPp7PvDFQFL6hR7ndb3MS/fUV34LoiMb662M3CKPpU/L03Se/Q1Vvrys8TcS1y
s9DDyu/ABrhmf8NuaFb6WvW/cJ5P/y8xguPa3nIhyjwIEYZdh2iwVP+j6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPnjXKCywJERGXTCJVZSC6sb8oGMB8GA1UdIwQY
MBaAFKlqU2ENjvZkoSdbcarquyhRBMJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi81YTAxN2MtYTNkYy00NGNmLWI4MGUt
YTIxMTE3NWMwNWUwLzEvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi81YTAxN2MtYTNkYy00NGNmLWI4MGUtYTIxMTE3NWMwNWUw
LzEvcVdwVFlRMk85bVNoSjF0eHF1cTdLRkVFd2s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6G76MTy
/DyllmBma/xUDYjUETr7MFPAivUBlIAFsX7zgAjBmVke8SgLEfWQdNS04Xzhk8sl
l1r6XlLaEmTniENy9ToW3G2A8Wm0cIIveJFkVf/+kNxwIaI55C13VacwGD+iINSG
Aj+fuDjhxZ5QASw8wFjNNM/yvfhzkquRep61mg7soRU1TJqdX2j6t8JH+dgc3C3U
xVzxrZM4fC1uVw8DQtfBQdJi0vnGyP8FPcX3n6AsWDH7QU9Q2QjgFQSjhvThpDA1
BtoEmAxH4MfutalI4kzkHBU2BhPZ9Jtyr6TNx3e3xVMPT1/HqrESN7sm+dwxMpx6
6Z87fSCmWV6Fmw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:27:03 2025 by rpki-client