Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json)
Hash identifier: 3MVsvJE/UobkZBBwYmTL+u6BeuTlJF/pM0GF9BowZi4=
Subject key identifier: BB:93:EF:34:41:8B:B6:22:62:40:EA:F4:F6:D6:C1:F4:45:6E:EC:BA
Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Certificate serial: 019A4B85178DE09B81F555588C0631345DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
Manifest number: 08B7
Signing time: Mon 03 Nov 2025 21:00:04 +0000
Manifest this update: Mon 03 Nov 2025 21:00:04 +0000
Manifest next update: Tue 04 Nov 2025 21:00:04 +0000
Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=)
2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: KYRm/01jdoE0EBwDiffGYcgmsh8cIzw2Lga12HuoYto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:85:17:8d:e0:9b:81:f5:55:58:8c:06:31:34:5d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828
Validity
Not Before: Nov 3 21:00:04 2025 GMT
Not After : Nov 4 21:00:04 2025 GMT
Subject: CN=bb93ef34418bb6226240eaf4f6d6c1f4456eecba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b7:74:60:51:9d:7c:48:4f:71:59:7c:9a:f0:
fb:53:68:ba:c7:e7:17:0d:9d:3d:74:56:d7:2f:67:
24:2f:8e:e4:a9:2a:d0:42:5a:18:97:75:07:c4:bd:
53:a9:f0:5d:1f:0f:9c:ef:2e:d8:b4:81:c6:bb:8f:
54:97:10:1f:f3:7e:32:06:e0:72:18:fc:99:36:d7:
f6:25:55:34:70:cd:22:27:d6:ad:29:9a:e2:06:54:
e3:38:36:d4:b5:a2:7b:f4:f1:d5:06:8e:ea:63:4a:
86:a4:bc:b4:a7:f4:ff:28:38:ce:1d:0e:65:e1:88:
1e:ff:f3:41:de:f7:a2:b1:4d:e6:35:85:d9:77:32:
2b:af:59:44:39:f5:ae:bc:db:eb:6b:ff:ea:01:fb:
3c:54:78:68:c5:01:7e:33:f5:a8:ff:73:e8:fb:97:
d3:c8:80:f0:29:df:32:28:c0:23:c1:7c:42:4a:3e:
dd:46:4f:bd:74:4a:fc:42:c4:73:25:53:9a:a6:83:
a4:80:25:57:ba:78:ed:5d:09:d7:8d:52:28:65:4e:
ac:7f:5b:7d:9b:c0:6a:7b:0f:e6:c5:6c:63:49:48:
f4:f6:e4:8d:49:e4:6d:22:07:d9:73:da:dd:ac:eb:
3e:48:ad:d1:94:25:b0:d7:ed:4a:c2:b0:0a:17:9b:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:93:EF:34:41:8B:B6:22:62:40:EA:F4:F6:D6:C1:F4:45:6E:EC:BA
X509v3 Authority Key Identifier:
keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:56:c9:79:9e:d2:2a:d5:93:91:12:ef:40:e1:cd:73:2a:d0:
ad:fb:fa:45:20:e2:3f:6c:50:c2:26:d8:66:19:13:2d:e5:59:
28:7f:3a:30:e4:64:37:9b:dc:05:bc:5b:9c:68:0a:2f:e5:5f:
74:42:c2:e7:15:33:6f:0e:73:d3:d0:ca:78:3e:9e:08:30:4a:
ed:d3:22:d0:d7:f8:f6:4f:6d:5f:61:49:46:25:38:71:9d:ca:
06:09:8d:b3:d6:ec:d7:4a:2d:ce:8a:1f:29:45:b8:ef:2e:e3:
a0:1d:94:e9:6c:a4:e9:b4:1e:68:bb:50:7c:29:50:15:e7:9c:
8a:ff:f7:27:ca:67:98:4b:e6:dd:70:db:2f:51:d8:d6:52:52:
3e:fc:91:6a:f9:42:7e:00:18:40:43:ce:af:7e:37:a3:d0:39:
97:9f:f4:b9:2b:e8:54:8a:4f:79:22:d4:02:13:23:74:f1:94:
85:34:f8:8d:5b:75:6f:9f:d1:36:91:c6:f4:52:19:ec:14:23:
64:ab:ad:b9:89:44:8f:97:80:a6:cb:a6:85:38:69:e8:38:b3:
df:1e:90:cb:0a:77:ac:53:1f:e5:3a:f0:e0:41:13:d3:45:10:
5c:be:e0:c8:e0:68:ab:08:c6:03:1b:9d:24:3e:c7:12:a7:3f:
68:2e:82:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:00:41 2025 by rpki-client