Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: OZ4QQwlbWEgGHhjLzFLmBkY58eF/U4GZTn+0Rwb+A34=
Subject key identifier: F7:DF:DD:B2:4C:7D:F6:4B:AC:E9:35:52:82:23:B9:93:F8:5A:8F:9A
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 019A70A526D0F21AEC72E3F92632423F7F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 02:01:02 +0000
Manifest this update: Tue 11 Nov 2025 02:01:02 +0000
Manifest next update: Wed 12 Nov 2025 02:01:02 +0000
Files and hashes: 1: Se8jY-LoM2MVsZ37wmyygWUdZqw.roa (hash: 460xRSiSARjue5TmuazrIkrxiYolcj28Woj0bWcIVJo=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: v30VmKx3yclVMaFiYkIRmuZcLl02QBTb0/IsGKXiZnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:26:d0:f2:1a:ec:72:e3:f9:26:32:42:3f:7f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Nov 11 02:01:02 2025 GMT
Not After : Nov 12 02:01:02 2025 GMT
Subject: CN=f7dfddb24c7df64bace935528223b993f85a8f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:63:5f:ad:23:e0:49:f2:47:4b:49:a1:27:
19:fb:01:f1:7c:10:f7:0a:9f:94:fa:6d:d7:57:8f:
f1:42:ba:35:fa:c5:b7:75:09:eb:9c:ec:e6:02:e2:
27:a9:f0:e8:17:7d:79:57:0c:7c:65:0a:6e:a6:71:
30:38:51:27:f6:ed:03:f0:33:1b:ec:cf:45:c5:a4:
6e:f6:a0:6e:14:b7:eb:79:bf:7f:b6:d0:9e:ac:f4:
88:df:89:3a:9e:6f:cc:5f:0d:a2:06:f9:21:23:43:
19:46:c9:f2:d5:89:c5:65:06:dd:42:39:5c:de:24:
b5:55:36:b2:29:93:67:2e:13:3a:42:af:74:d3:89:
06:fc:e4:dd:d4:f2:ec:0e:25:c9:59:45:7f:6a:36:
03:ea:8a:2f:f2:00:93:2e:5f:89:76:df:4c:1f:ca:
f8:a9:f9:7f:5d:5d:2f:8d:6c:9b:44:06:24:21:d6:
86:3b:b0:b2:1d:8e:00:c5:a1:e7:ec:23:90:9a:9c:
d8:e8:77:5e:de:5e:5f:1c:33:da:44:72:50:26:d0:
ef:1a:51:66:96:0e:f3:66:58:f8:9c:0a:2a:dc:98:
62:73:4d:b9:89:6d:bf:13:05:6c:89:9c:f6:d9:58:
f2:b9:ee:6d:15:99:5f:3a:e8:41:8d:1a:00:92:54:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DF:DD:B2:4C:7D:F6:4B:AC:E9:35:52:82:23:B9:93:F8:5A:8F:9A
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:15:de:63:a2:92:8c:2f:c3:39:38:81:43:bf:ed:68:07:06:
f2:16:e4:b4:78:55:49:f8:3f:cc:39:1b:2b:0f:05:5c:70:0b:
f9:2c:3d:dd:f1:87:6d:3b:8b:dd:9a:dc:fe:8f:26:ec:b0:12:
52:c2:ed:b0:fe:29:d6:de:a1:12:6d:06:7c:78:aa:7b:44:46:
89:56:15:5e:46:9e:49:7a:28:4f:e8:c4:b0:fc:fc:a5:db:84:
c6:2b:46:89:ed:c6:94:64:c6:60:f8:fa:73:6b:0d:88:dd:be:
83:4d:4e:6b:42:2c:ec:16:22:b2:9b:31:0a:77:7e:e7:0c:6f:
31:2b:24:c9:4a:62:b8:88:7f:1f:79:f6:3e:27:87:03:d3:ec:
6d:ee:98:f4:1f:5c:1e:fb:0c:a6:e5:2b:a9:68:7a:8f:32:ea:
b5:7a:79:7a:4a:11:a4:54:33:c2:44:ab:39:2d:66:31:63:55:
06:2c:27:92:64:37:fd:69:0c:1f:4b:9b:3d:00:cd:76:00:e4:
fe:fb:77:cd:2d:1d:8a:c7:f7:0c:57:f1:f4:69:4e:1f:42:8b:
41:ed:65:35:be:d6:84:fd:1c:d3:88:69:f6:0b:cd:7c:60:c0:
4b:f9:04:77:ad:3e:9c:34:c2:d8:d2:5f:2b:ad:b9:18:d2:f0:
3d:06:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:49 2025 by rpki-client