Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: lUABDUYZ1sZJGAJVGm5DdOI9+1FeRXmFeLmFs3XJlcE=
Subject key identifier: BE:26:EB:2F:48:DB:EE:D9:78:D6:1D:88:9F:74:A9:95:FD:F9:8F:B6
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 019A71B79813F1CF4CDC6AEBAFE58B6EC886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 1371
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: 1W5smHKXook3Cttl9rBFCphz4iU.roa (hash: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: qCdHJRJUb7oDlJNVITpBRfp+sM0rqPSR6M4HBO1gTJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:98:13:f1:cf:4c:dc:6a:eb:af:e5:8b:6e:c8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=be26eb2f48dbeed978d61d889f74a995fdf98fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1a:ba:23:2f:8c:04:af:d7:be:ed:34:92:9a:
9f:58:35:77:1c:ec:25:e8:64:c0:24:e1:04:94:b3:
13:9a:ba:a8:f0:eb:b9:ea:e0:b8:cb:37:ac:b7:e6:
e5:47:69:b2:e6:e0:15:4e:3c:ef:cf:5c:f6:06:63:
64:93:c8:df:4b:88:f6:e7:f7:fe:9b:fe:6a:b1:e3:
d0:dc:d8:01:9d:c9:c0:2a:7f:7b:d0:db:71:f3:58:
6e:78:0b:ca:02:dd:e9:a0:0c:2d:69:d4:eb:7b:4c:
5a:fd:70:66:70:fc:0d:66:ee:a7:52:f6:3c:1d:66:
3f:88:2b:54:bf:cd:b8:74:d2:4b:bc:6d:81:38:2e:
57:42:0b:70:d4:24:16:0f:62:7a:63:55:ca:3b:5b:
7b:bc:69:d3:95:0b:e6:90:f9:34:de:7a:39:ae:e1:
64:32:70:9c:ec:24:db:b2:72:b7:df:2a:73:26:2b:
c2:2b:a3:c0:a3:6e:85:7d:d9:22:8d:c0:63:d7:c9:
9d:47:48:81:d5:6c:c4:02:f7:a3:ee:31:e8:45:0c:
3c:3e:fd:91:ff:93:74:22:a0:c3:32:b9:44:8c:12:
66:e9:93:17:3b:3a:22:a3:9c:04:88:5a:c0:38:37:
6b:59:b5:c0:52:af:d9:fe:81:1a:2e:06:0d:e0:a8:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:EB:2F:48:DB:EE:D9:78:D6:1D:88:9F:74:A9:95:FD:F9:8F:B6
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6f:69:5c:bb:9c:dd:c4:02:c7:c5:6d:34:88:c0:74:d8:d4:
25:ff:bf:fe:f2:c7:25:64:92:95:52:eb:26:d0:d7:ef:ec:df:
de:d8:1c:9f:50:f8:f6:08:93:b0:6c:97:58:60:64:e9:93:22:
1a:c9:56:ea:b5:99:bc:88:87:3f:54:b2:9d:0e:32:be:67:d7:
c9:e2:56:55:a1:51:31:8e:f7:07:06:f0:be:63:85:ea:53:7b:
32:b9:ac:9c:7c:30:13:1a:85:7a:db:88:b7:f2:22:57:dd:ea:
51:96:c7:01:6a:38:6c:09:bb:a6:e5:e0:30:93:7b:ab:fe:ea:
a3:bb:1e:fb:47:c4:bb:7b:3b:cf:60:c4:96:61:37:7b:bc:30:
e0:33:51:39:fa:ec:9e:12:b6:98:96:e8:9d:74:8a:47:bd:26:
8a:31:82:a4:cd:b6:9f:38:09:9d:16:37:f8:23:f0:2a:1f:91:
c6:ab:40:3c:73:6a:1a:01:3d:fe:c6:5d:be:b5:53:0c:1b:52:
4c:60:0a:45:55:a0:a6:d7:ba:65:12:96:56:36:47:a5:05:8e:
3d:8d:80:2b:07:64:bf:80:17:8d:37:87:85:24:4e:16:e8:78:
80:a0:e2:e5:d9:fe:27:2d:1c:b2:b8:ff:60:95:1f:6b:5d:d4:
92:d3:ae:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:05 2025 by rpki-client