Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: kU5TUInpoqiQv6R/bYwIBSBs+Ul7ohUoeE8rXoezqXM=
Subject key identifier: D5:65:8D:A5:3F:01:23:37:E8:EC:FF:F7:44:38:F1:C4:31:E2:CB:FF
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 019A4EF4756C1D327501D22730477EED82E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: HXIkrLCVknz9wtrBRSd93O6QsQgFiVXCv0CRUbhubcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:75:6c:1d:32:75:01:d2:27:30:47:7e:ed:82:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=d5658da53f012337e8ecfff74438f1c431e2cbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ce:d4:a4:1f:38:28:6c:1f:0a:47:d3:83:f2:
d3:cc:36:2a:94:a7:5a:fb:67:86:38:8f:49:95:a3:
de:b5:7d:df:f7:52:07:86:ad:16:27:ef:34:2a:2c:
34:d6:ae:00:3d:9d:7b:d4:34:f7:8f:d3:2d:d2:03:
1d:1a:3d:d0:5b:fd:fb:97:05:f7:dc:27:e2:5e:4d:
aa:05:ee:a1:07:2b:31:a6:c9:26:da:b1:7f:26:9d:
5c:f8:a8:3b:4d:de:7e:bc:fe:02:b1:b0:5e:c6:de:
43:fe:60:60:b0:5b:5a:3a:59:e0:9c:50:cf:a9:1b:
ad:04:8d:b9:fd:5a:49:16:4c:d0:f3:c0:1a:0a:06:
0e:b0:e4:ba:0d:f9:88:d2:db:31:d4:e8:64:19:29:
34:3d:f9:3b:79:bd:f6:23:94:66:ff:b3:ab:39:77:
ed:a9:47:07:df:ae:64:94:d8:84:07:e3:c2:19:be:
f1:c3:02:91:1e:7b:88:6d:70:84:3e:ad:5c:07:95:
4a:4a:30:65:59:ce:0c:fd:72:6e:8b:08:cf:2c:e7:
d2:64:37:24:8b:09:95:5f:77:b2:3a:0f:9c:b3:ba:
ea:57:38:02:88:aa:ab:2b:ba:3c:28:ee:7a:20:80:
87:76:d3:f5:96:0e:44:99:3d:17:2f:e0:38:60:d3:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:65:8D:A5:3F:01:23:37:E8:EC:FF:F7:44:38:F1:C4:31:E2:CB:FF
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1d:e4:99:e2:d9:22:9d:c0:a8:c6:60:42:81:7c:43:79:fc:
ab:69:4b:12:9f:6f:bc:1d:fb:0f:ce:3b:71:30:fe:ed:f5:5e:
6d:26:60:3c:36:fe:ff:da:f7:6a:70:41:4b:3c:58:06:4b:de:
85:50:e0:3a:4f:56:57:fe:9e:9c:43:4e:5c:b5:a4:84:7c:82:
ff:60:eb:5d:20:5e:2f:fc:cd:c4:c8:ef:ae:ef:bd:6b:e3:f5:
73:f6:6b:f5:47:29:e1:da:d9:48:0a:56:e8:54:af:fd:3c:f0:
4b:98:7c:32:93:9b:f0:ea:79:ee:d9:ce:0f:de:03:d2:cf:e4:
c2:2b:c5:b0:3a:b1:43:27:a4:72:a7:6f:c2:71:64:b2:0c:5f:
a7:29:52:0e:fb:fd:c2:30:64:7c:1f:6d:f0:12:52:5a:22:52:
cf:46:6b:d5:74:ad:32:6f:31:8e:db:11:1c:12:68:7d:fe:49:
f2:88:3b:ea:9c:23:7d:ce:38:1d:a0:10:6e:02:af:17:df:7e:
3e:a3:08:16:21:98:19:fb:db:7c:0a:f9:11:aa:0d:12:67:5f:
cb:6b:9c:86:28:a0:d0:c9:d5:0a:e1:46:fa:a1:f5:bf:10:0f:
b0:8d:30:e9:df:b2:47:19:a4:e1:99:69:63:c0:59:27:b9:29:
89:0c:7d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:56 2025 by rpki-client