Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: bLvHjU0JI7wnlPZ1Z8Bu9OUb/gzy18ZR5aOb7gC7GZc=
Subject key identifier: E5:6B:F4:4A:E6:0D:4A:36:FC:8D:AA:37:8D:45:18:8B:19:AD:F3:D5
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 019A236574BAB4FE91E61CACD567024406E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 168B
Signing time: Mon 27 Oct 2025 02:00:42 +0000
Manifest this update: Mon 27 Oct 2025 02:00:42 +0000
Manifest next update: Tue 28 Oct 2025 02:00:42 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: X7pMc9SRy//CnWEbzRPBwOiVkKMZ+RcawoSxHPZf6PM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:74:ba:b4:fe:91:e6:1c:ac:d5:67:02:44:06:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Oct 27 02:00:42 2025 GMT
Not After : Oct 28 02:00:42 2025 GMT
Subject: CN=e56bf44ae60d4a36fc8daa378d45188b19adf3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:93:3f:1c:5c:85:3c:39:1c:73:13:74:79:
c4:5d:aa:f6:7b:d5:c6:7a:80:f3:e0:61:ae:d4:3d:
b5:0e:56:2d:b9:1f:2e:43:40:29:66:3a:6c:3c:1e:
47:5a:48:73:50:b6:52:6e:d9:45:c9:57:29:ae:e9:
4d:33:18:9f:49:12:22:3b:78:dc:50:c1:ca:b1:93:
5c:1d:97:e6:00:56:1c:d8:35:9c:c4:9e:99:a5:ff:
35:4c:16:c7:89:9d:1b:4b:94:23:82:17:06:b9:4e:
5d:92:cd:87:5a:1d:d8:71:2c:55:8b:96:c7:02:19:
cd:c1:3e:d9:49:97:0a:f7:1e:6d:19:0d:ab:77:b3:
bf:2a:fa:b9:32:4e:3d:91:4c:3b:34:99:cb:9d:e7:
d9:f1:59:4c:a8:49:f3:f1:ea:f3:c0:76:64:b2:51:
39:8d:8b:fa:a0:8e:a0:a7:1a:98:a4:2f:26:15:ee:
32:93:61:dc:a9:dd:a4:d9:5e:d8:78:dd:e7:b0:45:
e3:c5:fa:e9:7c:ea:19:35:89:3f:c3:84:6b:60:c2:
3d:33:4d:bd:b7:e8:40:75:15:ea:76:dd:2b:5d:6c:
e2:2b:f3:4a:d1:8c:33:5b:a0:e5:fb:92:a2:79:7e:
ec:c3:87:aa:81:16:87:02:37:6d:c2:1b:dc:f2:e2:
f3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:F4:4A:E6:0D:4A:36:FC:8D:AA:37:8D:45:18:8B:19:AD:F3:D5
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:01:47:25:fe:31:cf:f8:fb:aa:ef:00:0a:58:f9:0a:11:0b:
6f:fe:23:04:c2:dd:b9:9d:3d:49:db:ce:1c:af:1a:0e:b0:ae:
6c:23:84:84:0e:ec:27:21:98:19:04:8b:e3:a9:40:89:cb:03:
28:b2:6b:5b:5e:37:b6:7f:e6:65:f8:fe:ac:37:00:79:95:65:
32:91:08:8a:8f:51:94:1a:03:73:75:e3:55:5a:08:ea:38:2a:
0a:73:f5:4d:18:a4:bb:3e:e6:c0:ec:7a:8e:65:b1:61:bc:c7:
e5:4f:23:51:fd:ff:f9:f1:fa:21:70:cc:ba:ac:d7:c5:a5:cd:
f8:92:73:ca:63:1f:ad:aa:ae:ff:e8:e2:a3:76:23:e4:52:56:
1d:68:4b:5a:72:68:90:be:09:88:1a:bf:bb:fc:68:bf:c1:e1:
a0:4e:d2:74:30:ee:97:6f:9f:c8:37:0a:86:8c:44:ec:53:44:
79:af:ac:d6:28:1b:e3:20:ce:7d:35:63:e2:c1:91:56:5d:89:
32:e4:26:f1:60:78:43:e3:49:a0:04:cc:ae:73:7a:41:83:73:
cb:52:91:f4:52:b6:c4:cb:b5:a7:fe:eb:b5:a2:a8:ba:b8:5d:
f6:3d:09:6a:87:a2:f8:e6:ea:4a:86:80:8e:48:19:12:90:54:
27:ed:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:17 2025 by rpki-client