Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: 9VQuzhkswMLUHsgNq4/mtmAYPPurQRSPKIp5dhTsvVw=
Subject key identifier: 6E:ED:8F:5B:AF:4C:50:E9:41:96:EC:15:8E:0C:63:55:AA:AC:FF:8B
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 0199FE7E0E5AA791AB1C634D002F8A93C25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 170C
Signing time: Sun 19 Oct 2025 22:01:38 +0000
Manifest this update: Sun 19 Oct 2025 22:01:38 +0000
Manifest next update: Mon 20 Oct 2025 22:01:38 +0000
Files and hashes: 1: FkdMBqbfdch6CFhxD4QwLgELMKU.roa (hash: wdLh3ZrKjP6g2Oc4Gepc/YnCstfM0S94slpL4xRfAig=)
2: NUZ62speWa0hfYDy7wa7hz3yElg.roa (hash: kF9c9XUwfNAZlikdfObuH2Z3J2bnJMLn8HSb5Ko9hw8=)
3: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: 4UssttWL6LTGu1tOvXucw7+KuUwgVPia9plCWZvLhjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:0e:5a:a7:91:ab:1c:63:4d:00:2f:8a:93:c2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Oct 19 22:01:38 2025 GMT
Not After : Oct 20 22:01:38 2025 GMT
Subject: CN=6eed8f5baf4c50e94196ec158e0c6355aaacff8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:aa:52:53:8c:ea:8c:3b:fe:1e:51:77:76:
94:5b:79:20:36:1f:cd:7f:6a:f4:bb:0f:3a:31:7e:
ef:d0:bc:75:51:3b:d7:76:1c:1e:6d:28:48:4a:c7:
12:cf:15:15:1d:59:7a:91:e9:27:27:65:f8:47:bd:
0e:f0:e7:35:d6:54:52:d1:e8:0c:9b:1b:12:79:22:
cc:16:00:d7:6b:0f:1d:1e:77:e1:4c:bd:0b:27:e4:
cb:c7:c3:df:10:9d:39:30:51:42:03:0f:90:49:08:
20:92:3d:68:b6:c9:d0:42:1d:f2:06:e0:61:fc:30:
8c:85:dc:cb:f2:2e:6b:3c:2c:2e:04:a3:8f:08:42:
a2:66:39:36:60:6e:11:07:7a:92:ba:f4:8e:c0:25:
a4:5b:23:69:8f:c9:4e:2e:e8:5d:09:9f:dd:dc:c9:
3c:5e:f4:ff:43:c6:98:b4:03:32:a7:cc:d6:4e:50:
68:b3:c4:69:ff:53:7c:4a:4f:f1:f5:8a:48:4a:86:
5b:a6:d5:c5:59:d8:58:51:8a:d3:6b:b5:82:79:09:
94:87:66:51:bc:51:84:c5:3b:35:e3:11:08:d2:b6:
78:01:9f:9f:95:cd:2f:59:2a:0c:de:31:65:fc:11:
d7:ee:6a:1a:ed:94:a3:90:ed:64:b9:65:a8:55:b6:
04:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:ED:8F:5B:AF:4C:50:E9:41:96:EC:15:8E:0C:63:55:AA:AC:FF:8B
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f1:64:6b:e8:29:23:90:c4:1d:c2:ae:0d:88:1d:bc:b9:a6:
41:5d:c2:e7:99:b8:a2:9f:14:5d:f6:a1:f9:05:02:7d:6c:5d:
ec:ad:bf:d7:b7:d5:47:e8:e3:ba:8b:50:a0:f2:0c:68:cc:8d:
4f:ec:27:f7:34:84:46:f9:bf:a2:e7:af:80:64:f3:2d:7b:02:
33:80:cd:85:ea:08:06:fb:fb:a4:c9:27:3f:00:50:4b:1b:05:
ff:45:87:58:07:48:62:b4:39:bc:48:17:24:50:e4:5e:7c:4e:
bb:46:80:96:f1:3e:39:a9:38:d4:8d:2d:c8:35:b9:84:dc:8e:
d6:55:ab:fa:da:ef:96:ad:2f:79:a2:03:da:36:05:e7:ac:33:
b9:bb:92:96:c0:b5:6c:05:f9:7e:09:1c:ea:1c:bb:1d:aa:25:
4d:49:11:7c:81:67:33:fb:fa:96:36:1c:69:92:53:52:f9:10:
40:15:72:ca:e8:24:d6:03:c4:97:77:3d:d9:d5:b9:a6:12:b0:
d1:27:aa:12:63:52:a1:9a:91:e0:98:28:63:89:8b:c8:bb:be:
bc:63:ea:5a:78:56:fa:82:69:14:c4:22:fd:09:8e:b2:ac:89:
d8:3b:42:8f:92:3c:ed:06:e1:c7:23:b7:d7:49:52:ad:be:eb:
99:c0:af:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+fg5ap5GrHGNNAC+Kk8JaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ODA3ZjZkNTBkOTdkOTcxZGNmMmUyZTUwNjRlOWI5MDdh
ZGIzZWMwHhcNMjUxMDE5MjIwMTM4WhcNMjUxMDIwMjIwMTM4WjAzMTEwLwYDVQQD
Eyg2ZWVkOGY1YmFmNGM1MGU5NDE5NmVjMTU4ZTBjNjM1NWFhYWNmZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2KqUlOM6ow7/h5Rd3aUW3kgNh/N
f2r0uw86MX7v0Lx1UTvXdhwebShISscSzxUVHVl6keknJ2X4R70O8Oc11lRS0egM
mxsSeSLMFgDXaw8dHnfhTL0LJ+TLx8PfEJ05MFFCAw+QSQggkj1otsnQQh3yBuBh
/DCMhdzL8i5rPCwuBKOPCEKiZjk2YG4RB3qSuvSOwCWkWyNpj8lOLuhdCZ/d3Mk8
XvT/Q8aYtAMyp8zWTlBos8Rp/1N8Sk/x9YpISoZbptXFWdhYUYrTa7WCeQmUh2ZR
vFGExTs14xEI0rZ4AZ+flc0vWSoM3jFl/BHX7moa7ZSjkO1kuWWoVbYEAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7tj1uvTFDpQZbsFY4MY1WqrP+LMB8GA1UdIwQY
MBaAFKmAf21Q2X2XHc8uLlBk6bkHrbPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzIt
MGQ4ZjdkZDhjY2U2LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9jYTlkYmUtMDA5NS00MGYzLWI5MzItMGQ4ZjdkZDhjY2U2
LzEvcVlCX2JWRFpmWmNkenk0dVVHVHB1UWV0cy13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPFka+gp
I5DEHcKuDYgdvLmmQV3C55m4op8UXfah+QUCfWxd7K2/17fVR+jjuotQoPIMaMyN
T+wn9zSERvm/ouevgGTzLXsCM4DNheoIBvv7pMknPwBQSxsF/0WHWAdIYrQ5vEgX
JFDkXnxOu0aAlvE+Oak41I0tyDW5hNyO1lWr+trvlq0veaID2jYF56wzubuSlsC1
bAX5fgkc6hy7HaolTUkRfIFnM/v6ljYcaZJTUvkQQBVyyugk1gPEl3c92dW5phKw
0SeqEmNSoZqR4JgoY4mLyLu+vGPqWnhW+oJpFMQi/QmOsqyJ2DtCj5I87QbhxyO3
10lSrb7rmcCvAQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:12:42 2025 by rpki-client