Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File: qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier: rxILjG61i5gFLt9gCCmmaQk1TPDknYV96jRUuwuliT8=
Subject key identifier: 4B:B6:F1:55:26:A9:64:5B:B6:1B:7C:99:B9:7A:F9:26:7E:82:1D:4E
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 019A4E18BB0AFC7E7C6AD2CD25FA07E41693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: BvjHm2eLgQsE-EhNaMGys6XuvSA.roa (hash: 3dR8rduC7LW0RozAGEED/FwSFwjDp9QTVfVqQtjf3mI=)
2: kD9wFsIkyemJmyZR5NsOicAOk6Q.roa (hash: 5lwx2dujcX+QPN65pRSgkqXQZ6JloT7CVxLAGTDZ7oM=)
3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: t9v5rXKKcyk3wcHHuk4LmLvkXcg5QO1/xLr+R92XI84=)
4: y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa (hash: TREazVziiS/zSuZ98yUE1lCBdvTaOvsRUmgllHq3JrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bb:0a:fc:7e:7c:6a:d2:cd:25:fa:07:e4:16:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=4bb6f15526a9645bb61b7c99b97af9267e821d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:c9:10:aa:f4:55:a8:a0:5c:3a:47:da:f5:
ae:34:a7:d3:18:f6:72:a2:d2:01:9e:9c:34:e0:9e:
b5:80:3d:f6:e5:0d:8c:d7:b6:ec:39:13:8a:b9:ad:
61:0b:d6:0b:5c:35:7a:f1:d4:64:67:cf:93:17:5c:
dd:ff:df:2a:9b:b8:a9:04:40:5f:47:0a:a9:85:68:
e6:64:0d:9f:42:45:41:4b:d3:25:58:d0:91:98:f2:
ad:96:ac:9c:d2:4c:ac:4c:51:9a:e6:9a:8e:66:83:
1a:db:a3:ce:35:64:0c:bb:e4:af:a0:2e:98:ab:f8:
a3:57:46:26:65:13:e3:65:dd:5d:d1:51:06:d4:b3:
13:bf:b4:5f:26:ce:f1:e3:5c:86:9b:19:05:e2:4d:
9f:11:4e:c1:75:bb:98:81:28:a7:05:75:72:02:07:
6c:5c:a6:ed:da:61:7d:61:0d:7f:c0:4f:16:d3:8d:
e8:64:c2:23:ec:3b:f3:9a:c1:80:cc:40:b3:34:55:
99:32:83:75:93:3e:35:91:30:da:25:6a:0b:60:44:
67:0a:4d:7c:b2:4a:ba:7e:9d:cc:c7:c0:03:c1:54:
ab:b9:21:f9:0a:33:e0:a3:a2:4c:05:5b:c0:3b:2a:
85:9c:70:fe:ae:b0:98:b7:c0:93:67:40:18:da:f3:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B6:F1:55:26:A9:64:5B:B6:1B:7C:99:B9:7A:F9:26:7E:82:1D:4E
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:78:84:d0:53:fb:a3:9d:a9:26:5d:89:ce:31:1b:4b:78:27:
67:9d:cf:32:c8:9c:b3:b7:fb:b6:ed:2b:79:03:a9:08:f7:53:
67:2a:de:ef:8d:aa:ee:4c:eb:ee:5e:8d:14:b0:7b:f6:b9:d6:
b8:04:d7:f8:fa:0d:2d:22:32:42:8a:5c:ed:1f:6b:d5:13:2f:
20:be:5a:e2:e6:9c:59:07:4f:43:26:85:a9:8c:c3:56:95:f1:
3f:5c:77:86:91:f9:7f:6d:a0:71:8c:ab:d0:cb:01:aa:1b:a7:
61:a8:68:0f:0b:b6:b2:ee:e5:27:a7:28:89:29:d9:13:8e:4c:
a6:65:ea:30:63:cc:44:14:ff:1e:ed:ec:e4:89:2a:95:85:e7:
12:2f:0a:d9:58:64:b3:26:61:5c:9c:9d:0c:1c:8a:66:60:33:
2b:55:c7:aa:81:6a:06:2b:8a:fc:41:1b:f1:cf:a9:7a:d8:0e:
22:7d:ec:06:65:cd:a1:fc:2c:14:04:c3:a2:a8:c7:ee:18:04:
bf:3e:c6:cd:6f:9a:da:2a:e1:7c:2f:54:ca:2d:3d:39:e0:1e:
33:aa:ae:54:a5:02:34:70:5a:8c:cb:4e:27:dc:ff:f1:9f:05:
84:0e:13:af:5e:01:18:ba:4b:e6:e3:37:e9:1c:eb:16:08:8e:
61:71:d8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:22 2025 by rpki-client