Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: JZgTQ1Cqai7ibbdgXNOqBveEu3Vs7BygEUJMKnz/ooo=
Subject key identifier: 82:6B:F3:8C:84:C7:18:42:BD:17:EE:ED:F8:43:93:9A:18:4B:9D:1F
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019A71B81DA3BFD94F7B297346A9FDBB4608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 07:01:22 +0000
Manifest this update: Tue 11 Nov 2025 07:01:22 +0000
Manifest next update: Wed 12 Nov 2025 07:01:22 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: dHM0BZ+mJJzF2i2exo/31ld01h246KVZDx2ftaSp4Sg=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:1d:a3:bf:d9:4f:7b:29:73:46:a9:fd:bb:46:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Nov 11 07:01:22 2025 GMT
Not After : Nov 12 07:01:22 2025 GMT
Subject: CN=826bf38c84c71842bd17eeedf843939a184b9d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f3:52:de:b7:bf:b0:93:18:20:dd:15:9e:a3:
c5:62:4b:8c:6e:25:fc:d2:a3:da:6f:ae:f5:50:67:
6c:da:fa:bc:7b:24:7d:97:32:c5:66:60:4f:5f:26:
21:55:6c:9d:5c:70:b7:9d:0b:62:81:cf:4f:44:4c:
ea:48:75:0e:3a:5e:cd:96:37:46:8c:63:a8:44:d2:
67:eb:ab:31:bd:ae:63:57:0d:fa:eb:9f:46:11:25:
22:4c:b4:6d:ed:13:07:d5:d3:94:02:36:d7:77:ef:
27:ee:94:31:f7:8b:b1:dc:49:33:fd:4f:da:f2:72:
14:cf:25:6c:e3:1a:01:02:7b:c8:0a:09:61:04:44:
5c:04:6a:1e:c7:1f:ad:e4:c1:71:b7:6f:89:0f:c5:
32:f7:dc:de:e9:61:2f:2a:23:14:10:d8:f8:77:79:
ca:a4:86:82:af:28:e4:57:e2:1a:e6:18:84:b0:48:
85:0d:42:26:48:a0:d6:ae:6d:84:f8:d7:f0:38:46:
2b:1e:11:17:5e:f9:ae:b1:24:ef:5f:b1:3a:ad:ff:
ec:ec:97:b2:93:58:e5:50:9f:99:f1:f6:f1:a7:20:
3b:2a:5f:78:01:d6:ea:7e:45:72:47:cf:0b:47:c6:
e7:8c:a7:66:ba:64:58:5b:27:fd:e4:c9:c0:e1:c4:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6B:F3:8C:84:C7:18:42:BD:17:EE:ED:F8:43:93:9A:18:4B:9D:1F
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9c:57:b5:98:a1:5b:04:59:97:b1:0a:83:11:1e:2d:8c:ea:
b5:76:78:b3:b3:b9:ae:f0:8b:f5:6f:9c:03:3b:c4:d2:7b:4a:
a7:8b:e9:dd:ed:10:ac:d4:9f:e5:38:51:6d:03:29:66:78:81:
69:5b:31:8c:7e:fe:cb:ca:5f:ac:5b:a3:d0:fd:a9:47:5c:d4:
e6:6f:e3:47:da:45:11:22:0e:5c:6f:16:75:a1:ef:2e:f9:e8:
3d:df:f9:95:45:6c:8e:e5:f3:6c:5a:cd:e9:28:00:d6:15:13:
06:1a:4e:90:cc:8e:d2:bc:4f:5d:ed:5d:f1:21:76:91:25:0f:
f6:de:03:4a:74:01:98:d5:71:5b:9d:a8:c7:57:01:63:bd:a7:
e1:b6:4b:a2:65:08:2d:bc:f0:e7:37:88:2d:5e:a2:85:07:fe:
93:ae:76:c7:01:02:bc:29:9c:19:57:00:ec:73:1c:51:66:50:
86:dc:a4:51:66:cd:3f:ac:5a:aa:72:80:07:4d:42:f2:a5:71:
2d:b0:46:cd:a3:22:6d:af:84:3d:50:af:87:6c:15:c3:3c:62:
d2:d9:2f:55:44:3a:a7:5b:66:45:29:4a:08:45:b9:50:ab:dd:
b1:23:4b:7d:2a:f0:f0:d4:18:ce:9e:68:e1:d6:0d:ba:3e:c3:
1d:6a:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:13:57 2025 by rpki-client