Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier: Fb315wYVO6lhDnY5S6jb/RqvwQvqw4wzetfHNA5Q9I4=
Subject key identifier: 9F:C8:DB:4F:7C:C2:FA:3B:07:AA:FB:D9:8E:7D:85:0F:9D:4F:15:66
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial: 019A4DE16BA24A0B776EC00A3FFB50AD9F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=)
2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: qJZIY7Blj+v4XzNI2G5sAEubQ1ratH2ebnL/iqvNQXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6b:a2:4a:0b:77:6e:c0:0a:3f:fb:50:ad:9f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=9fc8db4f7cc2fa3b07aafbd98e7d850f9d4f1566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:7e:b3:ab:93:80:ab:96:cf:33:d7:1a:95:
46:dd:4b:77:34:37:ef:ba:1a:0c:08:43:fd:71:8b:
09:46:bc:d2:56:42:4f:8c:f4:88:76:f2:b7:be:cc:
73:76:4b:38:89:f6:a6:65:74:e1:bc:e8:6a:66:84:
e8:63:47:56:ac:e9:5e:0f:c3:c5:4d:af:26:47:1c:
9f:da:4d:1c:8c:ed:63:86:43:c3:33:d0:5f:86:41:
ea:d3:7d:9e:a6:58:ff:76:e1:83:65:87:6e:84:dc:
a3:db:5b:1a:76:84:5f:4a:81:e0:cd:a5:86:08:17:
ee:d2:7c:43:86:be:cb:69:aa:37:19:9b:5f:de:f5:
4a:4e:f1:08:30:d2:8a:54:ef:26:7f:9c:ab:5a:47:
85:ee:73:95:b7:54:75:2a:53:e5:9f:3b:aa:4f:b1:
de:30:66:7b:5e:2d:14:7d:e2:b6:42:d9:98:51:eb:
fb:d5:ef:22:9d:a7:f4:9f:2b:09:57:90:ee:fa:06:
68:ba:b0:b5:54:02:e4:10:a1:e2:4b:79:81:9c:9b:
9b:09:b3:29:9b:2c:72:26:af:2b:76:18:89:74:20:
2c:0c:70:3b:14:2b:8c:2b:51:d6:c9:51:23:b4:e2:
1e:38:c4:f4:ea:6c:23:35:df:29:9d:43:52:60:40:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:DB:4F:7C:C2:FA:3B:07:AA:FB:D9:8E:7D:85:0F:9D:4F:15:66
X509v3 Authority Key Identifier:
keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f8:1d:14:ce:70:84:84:70:69:18:d0:25:18:fe:08:e2:69:
82:fe:0c:95:ca:19:34:89:54:da:7d:99:28:ed:d0:a8:8d:60:
24:73:54:09:c1:33:c4:3b:33:fe:5c:68:3f:5a:2b:2a:50:13:
2a:6f:22:1a:a7:d2:75:10:21:76:3a:76:83:87:68:d2:f5:0d:
f9:1b:97:3a:32:be:e2:99:32:72:91:a1:f3:d7:f6:44:a8:7e:
fe:1a:1a:05:50:83:c0:22:72:43:7f:f0:3f:8d:af:dd:0a:b8:
b7:49:5b:cb:94:fa:13:a9:5e:93:b3:bf:ef:2e:b3:25:2c:c7:
00:71:ce:20:fa:44:74:50:d6:af:a1:fe:ee:44:f4:2d:84:e9:
04:d4:9f:3a:ef:7a:6e:30:60:63:ff:5a:1a:16:6c:f4:7e:a0:
4a:bb:ae:1b:d5:b3:36:c0:ac:48:db:53:be:af:32:e7:de:15:
f3:2e:dd:0f:af:3e:7d:0f:b3:03:8d:b9:cc:e4:a0:8d:a1:9b:
19:2e:81:ec:38:ae:03:a3:44:53:f8:76:40:50:54:61:00:95:
f9:37:47:4c:a6:dd:62:93:04:18:85:72:d2:80:f4:93:b4:4e:
98:bd:d6:76:0d:ab:b7:67:b7:9e:01:61:c2:bc:df:b1:5b:e8:
0d:40:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:45 2025 by rpki-client