Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: zvSX1xciBWSN1QJuIgLZ1RPv0lqV7N+aXvJectpxz7c=
Subject key identifier: 04:CB:2A:4E:BB:41:5D:8F:79:5B:83:BF:07:66:AA:C6:0B:54:F9:E3
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 019A70A51FA8E144E12BF133F4C902BB091D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 02:01:00 +0000
Manifest this update: Tue 11 Nov 2025 02:01:00 +0000
Manifest next update: Wed 12 Nov 2025 02:01:00 +0000
Files and hashes: 1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=)
2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=)
3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=)
4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: oUPCMa0TZPoYEC70GEJCm7T52Y12/Ih6RCsbGUcxcm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:1f:a8:e1:44:e1:2b:f1:33:f4:c9:02:bb:09:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Nov 11 02:01:00 2025 GMT
Not After : Nov 12 02:01:00 2025 GMT
Subject: CN=04cb2a4ebb415d8f795b83bf0766aac60b54f9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ea:83:27:be:15:88:fe:5e:e4:84:54:61:82:
bb:5b:af:ab:e0:eb:cd:2f:c1:51:98:26:6a:66:7a:
d0:aa:36:15:eb:6a:48:ac:81:9b:aa:28:b9:59:39:
47:59:56:5b:59:8f:92:0e:66:20:08:e1:32:7c:0c:
3b:eb:c3:69:57:64:13:6f:1a:12:75:6f:0f:59:e6:
45:16:c4:ac:37:f9:16:12:80:54:bd:36:76:e0:df:
7e:b2:f1:e8:bc:0c:db:f1:6c:c3:28:9b:10:8e:26:
dd:d4:96:c4:18:6f:3e:2d:20:c8:6c:88:44:92:df:
c1:e2:c7:47:dd:75:4e:26:ad:96:24:e5:48:6e:4c:
45:9e:39:78:bd:f4:b4:97:78:ba:d6:e5:0c:62:01:
ec:42:e5:d3:97:bc:89:01:52:4b:66:b6:e4:8e:46:
6a:15:5d:60:8d:dc:63:d3:aa:b9:d9:dd:fa:66:ff:
c1:ad:fa:b8:d9:24:9b:b2:a6:d0:24:1e:ea:5d:be:
2a:15:fc:9a:6f:62:1f:a0:64:9d:c0:7e:a5:d4:83:
31:c3:11:a7:e6:58:41:93:66:4e:db:a9:57:20:08:
e9:90:56:64:46:b0:e4:1e:80:04:41:a7:dd:ca:7c:
80:45:99:53:63:1d:22:64:fa:98:f2:0c:dd:e6:12:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:2A:4E:BB:41:5D:8F:79:5B:83:BF:07:66:AA:C6:0B:54:F9:E3
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f1:cd:91:c1:5d:e4:54:14:a5:5b:b3:de:b8:9e:4e:23:13:
e4:d3:e0:1b:d2:2d:92:02:2f:a7:65:a4:6e:60:7b:52:6b:49:
e4:ad:4c:b7:82:98:6d:3d:a5:90:ce:b9:fd:0f:88:6f:b3:17:
57:1d:8a:a0:0a:58:af:7e:fa:6a:52:40:01:16:c3:a9:59:cb:
75:52:af:e3:a5:66:bb:32:35:cc:33:fc:73:21:5d:67:95:c4:
a2:b6:3b:9e:1e:d6:28:9e:56:44:f6:34:be:8b:41:49:de:cd:
a6:87:94:8f:a1:2a:b7:ad:cd:32:57:5e:fd:c1:26:b7:20:2c:
5f:e5:d7:99:52:0f:a1:1b:c8:79:7e:84:2b:4d:cf:b5:15:7e:
0b:c5:8c:12:49:b5:a1:22:87:71:fa:2c:d1:77:64:9c:0a:c7:
ef:b7:85:d5:f3:74:0a:d1:fb:7b:9d:ad:fb:97:39:05:9e:01:
0a:76:0f:d8:76:de:a5:b9:42:2e:92:4c:b0:e3:25:2a:8a:74:
67:75:d3:31:16:7b:aa:1d:e1:31:51:7b:6a:40:fe:07:1d:93:
41:ff:47:5e:c0:ad:5e:23:78:b9:ee:59:6a:d0:e5:ff:3a:3d:
13:f4:e0:be:00:9c:67:af:db:0a:49:ee:39:f3:82:c3:ba:47:
b7:fd:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:19 2025 by rpki-client