Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: cc9tvmdJ0bd8fOu9E2YhsjH3+sVhhQvGab+589esBvg=
Subject key identifier: 45:49:9C:80:0B:C6:18:DA:D5:28:42:B9:AB:F3:6A:86:1D:D5:1E:C3
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019A006C69203621F3F6249A9116216EED5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 170D
Signing time: Mon 20 Oct 2025 07:01:36 +0000
Manifest this update: Mon 20 Oct 2025 07:01:36 +0000
Manifest next update: Tue 21 Oct 2025 07:01:36 +0000
Files and hashes: 1: FkdMBqbfdch6CFhxD4QwLgELMKU.roa (hash: wdLh3ZrKjP6g2Oc4Gepc/YnCstfM0S94slpL4xRfAig=)
2: NUZ62speWa0hfYDy7wa7hz3yElg.roa (hash: kF9c9XUwfNAZlikdfObuH2Z3J2bnJMLn8HSb5Ko9hw8=)
3: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: AlJ7ubYTiC6mghakQFsp7NqAE9smw+uy8gcNoIeEtKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:69:20:36:21:f3:f6:24:9a:91:16:21:6e:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Oct 20 07:01:36 2025 GMT
Not After : Oct 21 07:01:36 2025 GMT
Subject: CN=45499c800bc618dad52842b9abf36a861dd51ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:18:30:d2:d9:13:43:b9:b8:57:88:dd:d8:
c7:14:2a:18:fa:97:1e:66:e2:9a:4d:06:13:b3:8d:
b6:79:d6:28:9f:fb:db:1e:09:14:75:f7:1b:c7:a3:
a7:31:93:de:bf:58:93:1e:19:60:1a:11:c5:02:c8:
54:85:05:b7:cf:b4:30:90:c3:12:77:59:df:e2:39:
e1:77:c7:8d:1c:aa:b0:1a:e6:03:88:d4:e2:4a:57:
2c:ea:e2:67:24:f4:5a:27:81:8c:95:6d:f5:c9:fd:
1b:7c:f3:c6:4f:4f:d7:cf:7d:b1:36:d8:35:67:89:
91:0a:09:67:e4:5d:0f:7b:3e:ea:f4:b1:25:13:a4:
b2:e8:59:82:d3:9b:d8:7a:05:22:85:4e:4b:33:36:
11:67:a6:39:a2:37:ea:1f:55:cd:82:90:a9:d0:b4:
d6:51:c0:99:96:5b:ad:61:9e:5f:5f:67:7b:87:97:
a9:01:7e:31:59:f7:74:9c:bc:31:8a:54:be:33:6d:
de:8c:a6:69:30:9b:65:4e:65:9f:33:d2:0d:35:a9:
b4:0c:ce:9d:56:da:24:8c:4d:b1:9b:14:57:87:a7:
88:bb:5b:0e:bd:1a:5a:02:8a:3d:f7:3e:78:84:e9:
bf:f4:d6:4b:98:92:8d:8b:e9:7c:ca:c3:83:c7:14:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:49:9C:80:0B:C6:18:DA:D5:28:42:B9:AB:F3:6A:86:1D:D5:1E:C3
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e4:53:81:f5:a6:f2:5d:6a:e8:32:db:1d:e5:d1:4d:a3:cd:
1f:31:4b:54:99:d4:3f:48:0a:de:c7:17:2c:74:65:e9:d5:1f:
41:1a:d3:48:a9:76:c8:dd:a6:ab:84:ad:5f:e2:7e:59:19:9c:
4e:11:a8:11:51:09:2a:3d:e5:51:97:e3:d7:87:2a:d9:3f:7e:
ca:0c:9e:36:7c:a1:8d:a5:9e:89:27:9b:ab:04:13:6f:5c:c6:
59:35:6c:cf:a0:fc:00:13:66:e5:b1:4b:85:dc:18:c3:7a:b3:
90:00:cd:76:b9:b4:fb:46:b4:c0:e3:27:ff:74:5f:9b:05:d0:
9d:cb:6b:7b:53:f7:fc:1e:06:2e:a7:4e:c1:37:9e:5d:6b:69:
23:e3:70:f8:2c:56:dc:77:b6:04:57:60:bb:dc:9d:4f:60:30:
f5:70:23:db:86:36:28:2a:62:63:de:4d:73:71:17:68:34:8c:
10:97:a2:c8:79:1c:88:47:08:d0:fa:d6:b5:57:92:fc:1f:6b:
4b:68:8f:1e:14:cc:5a:15:b1:15:96:e1:73:ca:4b:6a:0a:fe:
ba:5f:c9:1e:e7:fa:9f:7d:3e:ab:37:d3:87:8a:80:02:26:8d:
0e:52:cd:96:a4:09:e1:f3:83:bb:18:d8:27:9e:fd:33:eb:c7:
b2:7e:d4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:07:52 2025 by rpki-client