
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: JTZF8i39CaHMT5PkslfWTdyKuYHEu5yhOkVGxTrMp1w=
Subject key identifier: CA:6E:66:64:BC:52:D1:F1:72:80:56:9E:C4:F9:CF:6E:C2:24:3D:F3
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 0199FB46283A59FC2BDCA085679D0109BC5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 1682
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=)
2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=)
3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: 8UXgOcGo/qjJ0mtYhlq9yoMvF94BHkDOg+yl1k6Zytg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:28:3a:59:fc:2b:dc:a0:85:67:9d:01:09:bc:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=ca6e6664bc52d1f17280569ec4f9cf6ec2243df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3c:6a:e8:dc:9a:7b:0d:da:1c:46:bb:cb:1e:
3b:c0:70:cf:35:e1:37:20:39:2c:bb:54:64:79:c5:
8e:20:70:2f:d3:34:f0:85:37:cf:e2:e5:3c:2d:1e:
9f:49:4e:fe:29:28:40:e7:7d:a0:58:5c:85:be:70:
7c:77:6d:2c:b9:2f:1e:81:68:2e:b8:6f:ad:3b:22:
97:0e:a9:5c:37:54:d7:45:41:2d:c1:42:bb:e2:d5:
5c:e4:1f:ee:70:a0:43:96:a7:f1:48:ad:9f:79:50:
98:76:59:89:59:f2:3e:a5:ed:9e:ee:bb:0b:85:a4:
f7:b5:d0:02:81:1b:6a:8d:5d:5a:5c:8d:24:67:a1:
cd:01:13:bf:af:d9:6c:85:48:7a:c1:c2:01:0e:c4:
84:7f:0a:80:15:03:4a:3a:68:b6:96:95:bd:6e:8c:
2c:03:56:9a:5b:f8:a7:13:7d:b2:d4:8d:d7:54:eb:
36:04:8f:5c:1c:fe:b7:1d:c9:03:ec:e3:e8:aa:a6:
c3:1e:33:77:5e:dc:b0:45:7e:53:2b:d6:d7:2d:cf:
d6:0d:2e:83:b5:f5:a9:0e:dd:73:e9:8c:4d:7d:6e:
36:c2:0d:ba:73:72:10:68:66:bd:9e:7b:88:e1:c6:
cc:eb:1c:65:76:0b:7a:2d:61:a9:26:3b:2c:4e:f2:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6E:66:64:BC:52:D1:F1:72:80:56:9E:C4:F9:CF:6E:C2:24:3D:F3
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d5:7c:26:43:f4:07:63:46:95:ee:f8:bc:27:11:80:01:c3:
eb:d9:7f:1c:d5:5b:12:50:55:47:4f:dc:35:a0:ad:be:c1:ea:
19:7b:03:01:32:f0:c2:4f:d6:c4:64:39:aa:73:78:a2:bb:12:
fc:f6:ed:49:59:01:9b:64:54:42:8a:c3:e6:7f:ee:6e:d1:a2:
b5:3b:f4:dc:40:9c:4a:41:42:51:f5:40:88:54:5a:04:b5:94:
1e:15:b1:e4:a6:1f:65:bb:89:dc:3d:a2:f1:fa:fb:a7:25:f8:
b4:af:7e:40:f7:26:64:73:1f:3d:b9:f2:1b:22:9b:bc:e9:0c:
4a:7d:65:33:ed:93:a1:97:e8:94:5f:48:cb:8c:11:63:a0:45:
69:7b:a7:0e:72:45:4e:41:f1:66:62:03:52:43:5f:ea:8d:12:
ab:f5:29:64:c7:3b:cf:92:21:e9:62:28:af:bb:0d:e4:ca:a4:
94:90:49:7a:d9:f3:93:1c:13:a7:05:d1:9f:fd:1a:0a:8c:69:
5b:2a:bf:1e:12:e8:2a:8b:a1:58:02:b9:1a:e5:ff:66:ba:e8:
35:cb:0d:4b:fa:e0:b0:69:3f:23:2a:c6:92:e6:fa:17:76:9c:
f7:a6:bf:50:50:e3:94:0d:46:06:90:60:33:62:b0:95:94:ef:
53:0b:e7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:47 2025 by rpki-client