Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: xOR0M53eBrVVjB6lexBSVN2JGBe1IoYvzSCV5U4Zksw=
Subject key identifier: CB:0A:25:FA:95:4C:C4:70:AE:B6:F3:C6:DB:BB:62:38:97:99:66:32
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 019A71B7BDD3CB180F4CC0F3DBA9657C59BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: JLsWf4ypDqy3C3Vznf4c_jhkWzQ.roa (hash: W+Y7OMJT6eANPHdTBze3RK40F6OnPRrXmssah9nRki0=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: J+ykE9xv/gUr6Dq7jQKB12mPaBY3CoBnU/kZNwV74B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bd:d3:cb:18:0f:4c:c0:f3:db:a9:65:7c:59:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=cb0a25fa954cc470aeb6f3c6dbbb623897996632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:18:06:26:13:79:d5:c6:ad:04:bb:1a:26:
ff:62:f3:77:61:66:17:27:bd:7d:7f:f2:8e:ac:04:
76:41:1d:43:c9:da:ef:19:a9:c2:50:aa:a2:96:2a:
bb:31:24:64:34:10:32:9a:49:74:e5:f3:32:f8:d7:
20:66:29:ad:96:00:9f:fe:7b:d2:7b:22:f9:40:35:
02:24:54:e2:cf:fc:89:34:cc:89:66:4e:09:e2:3d:
5d:9e:e1:ca:d9:b9:f0:df:d0:b3:03:2b:1c:d7:cc:
6e:82:26:63:33:b9:be:fa:4b:0a:0b:99:22:cb:6c:
ca:8f:6a:7b:73:55:44:fd:29:4a:3e:1f:4e:4f:70:
8a:63:51:bb:c5:79:d8:03:54:a3:13:51:c2:f6:8a:
3a:1c:5d:d5:88:09:1e:d5:00:9f:33:45:1d:c7:bb:
54:44:5d:86:1d:81:c8:13:8c:41:09:12:d7:44:ea:
c6:61:47:48:08:61:b8:bb:73:90:bd:fe:a9:f9:ef:
45:12:78:9f:34:fd:5f:74:22:4b:d8:8c:5a:06:05:
62:15:bb:d1:1d:fc:4a:61:f6:d8:b4:71:0a:20:76:
d3:f4:9b:50:7c:d8:1b:a1:a6:60:36:b3:96:2f:d1:
83:ec:29:ec:4e:c1:f5:57:21:87:ce:51:32:d7:79:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:25:FA:95:4C:C4:70:AE:B6:F3:C6:DB:BB:62:38:97:99:66:32
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:37:3b:40:d8:cc:a6:61:71:d7:d2:09:32:d3:c5:07:c6:77:
ad:6d:3d:fc:6d:cf:ff:2e:35:6e:e8:e5:be:7c:bc:fc:7e:a5:
2d:43:be:e9:dc:df:19:ff:6e:9c:1c:91:81:86:2f:cd:a6:2b:
0d:fb:cd:f2:6a:28:73:34:fc:dc:40:c0:f8:60:c4:9f:4e:14:
cd:96:2a:80:17:0c:2a:6f:c8:45:44:80:0c:e5:d5:c2:1d:a0:
3f:5d:7c:f3:ad:44:0a:3d:32:24:4b:82:f1:f9:39:dd:d3:79:
d6:23:7e:a5:a4:af:97:01:70:84:04:1f:b4:6b:b1:f7:1f:b9:
a1:94:d1:14:5b:3f:c9:b2:41:e7:50:fe:98:77:07:cb:46:81:
77:ee:0c:e9:e4:a3:9c:1a:d9:c9:ff:9e:ba:df:84:42:11:07:
61:a3:e9:7a:bf:e8:68:5c:3a:c4:3e:b5:f3:c4:c4:ab:f5:bf:
97:86:ca:24:db:8d:09:80:20:5d:40:b2:08:20:fd:f8:e6:62:
17:32:48:4a:b8:53:6f:4b:e4:08:fa:11:a4:a6:3f:f7:66:13:
9c:60:9b:c8:88:1e:02:5a:17:b3:24:16:cc:74:e2:d9:ad:de:
a2:b2:2e:2f:5e:e1:02:2c:05:7d:1a:2d:6a:91:f4:68:02:21:
95:98:81:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:36 2025 by rpki-client