Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: 8XDnQ7uPYDrp45XMZpHxHLrFCwbUuInIrfB9K3VbuFo=
Subject key identifier: FD:4F:4C:44:B3:63:E5:93:1C:DF:56:73:78:EF:E4:E8:21:38:73:3C
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 019A71B8CE99C94FA793495761E627B843EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: BQhpVaqeI1zUsoQ1jwxKqse5Oo2+aZ41QkOrfu8GgR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ce:99:c9:4f:a7:93:49:57:61:e6:27:b8:43:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=fd4f4c44b363e5931cdf567378efe4e82138733c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:44:d2:85:fe:2f:5c:94:d9:42:1c:8d:6b:
22:a6:0a:a0:fa:65:ac:49:b5:cf:39:b2:f1:29:be:
3a:63:71:74:c5:00:03:d0:07:7d:04:62:80:93:ed:
a5:8f:de:15:cc:fb:d8:46:09:16:c0:8f:2c:75:dc:
e5:d3:ab:47:17:01:e5:48:59:0c:26:3a:26:91:c1:
cb:a1:72:3b:99:65:08:42:37:c1:1d:c6:a7:85:d8:
6b:f2:a4:c6:38:0c:dc:50:bf:15:4b:20:8d:b8:7f:
6c:e6:ca:fd:ab:55:fb:3c:fe:56:8d:ac:85:d0:e8:
d3:f5:f4:00:07:43:90:fd:7b:76:58:97:cd:83:d9:
26:1e:87:21:72:18:c5:de:b9:6e:e2:92:59:4c:07:
ae:dd:5b:fe:84:ce:40:18:84:95:be:b2:50:2d:22:
98:f9:8e:8b:f9:54:8c:0b:c7:fe:4b:db:18:31:04:
66:45:2c:72:b7:b6:bb:eb:09:81:fc:e6:7a:62:91:
b0:6a:25:a5:90:e4:48:8b:6b:01:af:7a:16:26:c3:
5e:61:de:63:a8:1b:f3:a1:2e:99:ce:2c:ee:ee:2f:
c3:84:d8:29:ed:5e:84:b4:dc:c0:5d:fd:df:ec:69:
5e:78:18:24:f9:84:d3:db:e1:3d:a1:f4:56:23:7d:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4F:4C:44:B3:63:E5:93:1C:DF:56:73:78:EF:E4:E8:21:38:73:3C
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:85:61:fb:98:30:46:89:c3:80:19:21:7c:40:69:1e:0e:25:
50:9b:15:00:19:19:ce:25:97:44:c3:0e:bc:3c:3a:39:26:f7:
9c:70:a8:6b:0a:20:95:c3:b2:d4:55:e0:11:07:c8:e0:ee:ad:
35:d3:76:f8:bb:26:b8:e5:e6:7b:1d:e3:83:bc:44:a5:5d:a7:
e1:79:e7:f9:55:b2:ab:9c:8d:79:82:c6:f6:a2:c8:79:07:b8:
c4:de:a7:96:1c:9f:c7:60:ef:ba:cd:87:77:1c:11:65:23:07:
c7:e2:1b:53:82:a9:09:3d:e2:ef:ca:04:0b:da:ea:70:7b:f4:
a2:cc:0f:2f:46:d4:07:73:16:a6:d2:a6:d8:11:36:8a:f9:5f:
f0:7a:e0:e9:df:b3:53:94:ed:a9:d4:79:06:82:f6:a6:e4:8d:
15:d7:42:61:ae:c4:f6:e9:9e:57:34:83:1e:6c:9c:e7:9e:78:
58:5e:9e:72:9a:c7:03:55:97:26:94:e7:ab:27:d6:0d:c3:03:
ca:d6:f8:49:b3:13:cd:34:60:d7:a0:9e:fc:2e:37:8f:00:bd:
f4:25:ca:5b:94:ca:c4:d8:bc:2b:94:8f:1f:f2:c7:31:5e:9a:
df:85:9e:f5:fb:07:6d:bc:4d:3c:fc:44:4c:4a:e4:6c:ec:7b:
96:28:e5:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:40 2025 by rpki-client