Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File: qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier: dYdzvpVWKyYiK5tooClNAw79VWEEcd1frk8dvTrnGqw=
Subject key identifier: AF:12:DC:3B:8D:45:3A:29:38:7D:76:66:EF:7E:C1:4F:AD:75:BC:53
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial: 019A5006ED5D3F2D146E39973A7C27D1196A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number: 09C4
Signing time: Tue 04 Nov 2025 18:00:22 +0000
Manifest this update: Tue 04 Nov 2025 18:00:22 +0000
Manifest next update: Wed 05 Nov 2025 18:00:22 +0000
Files and hashes: 1: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: EZ2QdXAYZJLaycOzs7+8cSj835IDfXPgFbWzDAebX0Q=)
2: tDo_atpT6VLkLCUrGS5di7JdOpY.roa (hash: 34FZjfIchoZn3cBM50GZegDU3woCBReTpheCA5hB7FA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:ed:5d:3f:2d:14:6e:39:97:3a:7c:27:d1:19:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Validity
Not Before: Nov 4 18:00:22 2025 GMT
Not After : Nov 5 18:00:22 2025 GMT
Subject: CN=af12dc3b8d453a29387d7666ef7ec14fad75bc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:df:86:76:df:28:9e:a8:c1:44:fa:35:e9:
06:19:53:dc:7a:3f:6e:9f:93:fa:33:1b:61:83:ea:
0a:2b:32:c5:af:bd:9a:0e:2e:b3:cc:0a:1e:49:7d:
f6:f1:f9:ed:6c:eb:2f:09:d9:3c:54:6d:7a:77:fc:
27:31:9a:ed:87:9a:9e:65:db:17:c9:4a:83:23:63:
35:e3:b9:5e:91:5d:ab:d1:74:3c:ac:ab:f1:f3:26:
b2:7c:15:ce:ff:40:03:33:c5:3b:87:bf:cd:03:ff:
68:fc:f2:35:a0:56:fd:64:56:b5:87:12:bd:1a:44:
6a:a8:f9:d2:20:43:4e:0c:22:09:5c:14:8c:7a:f6:
a4:b9:59:86:40:7a:54:54:e5:03:60:e4:04:75:70:
02:be:f4:f7:b9:e2:99:99:a0:21:69:9e:06:66:8d:
2e:bf:f9:e0:41:db:f4:eb:ce:30:5e:cd:f4:f4:35:
8d:24:88:3e:f7:a5:c8:8b:8c:38:b7:7e:26:04:ff:
c8:38:7f:34:97:c4:da:db:27:3c:76:6a:84:29:84:
7e:8e:e5:b5:0d:5e:85:af:e1:60:c7:5d:e2:44:55:
71:4e:34:c4:06:6b:a1:43:d7:98:ae:8d:0d:04:af:
5c:76:97:cf:5b:a5:c5:55:8a:64:da:30:02:92:5e:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:12:DC:3B:8D:45:3A:29:38:7D:76:66:EF:7E:C1:4F:AD:75:BC:53
X509v3 Authority Key Identifier:
keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:26:88:fb:ac:32:35:9d:0b:1a:6a:a0:52:5e:20:b1:09:9d:
15:98:33:fb:40:38:52:29:aa:d1:7a:58:0b:fe:b3:19:47:b5:
2c:1f:e1:42:29:3c:7c:56:c6:94:0e:66:c3:7a:5e:05:23:78:
93:78:9b:4f:de:d4:59:b1:dd:ee:29:3b:e8:70:2b:90:d8:70:
e1:76:3b:86:5c:de:05:b5:05:f6:e2:3d:a1:0f:d8:a7:87:4c:
96:94:a1:58:de:c5:00:80:64:13:d6:4b:bf:43:c3:7d:49:0f:
87:6f:a4:77:ee:4e:85:3e:1f:60:3b:e2:0d:88:43:fd:4d:b5:
e1:ca:71:79:dc:d1:5e:90:a7:27:85:f1:18:9f:d8:77:76:e9:
ac:70:d0:7a:61:c2:ec:33:5c:00:3b:65:e3:21:a8:ef:f5:95:
f3:ee:46:d2:fd:5c:13:b9:eb:1d:45:94:c2:aa:4b:a1:97:6c:
f8:5f:f6:cd:fa:99:97:2e:d4:eb:60:4b:8d:74:9a:66:8f:07:
4e:c1:11:f6:99:f1:a6:6f:6c:3b:e9:72:0c:2d:52:c1:d0:72:
2c:19:96:01:f5:6a:ef:cb:60:bb:9f:85:f6:a6:14:02:04:6a:
ca:df:ad:18:46:ed:92:3e:c1:0c:42:f3:0e:d6:83:6b:e2:e6:
a5:25:45:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:58 2025 by rpki-client