Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: mg6TOarQ17qyY2XmBzXmqlQGuyhHcNPFFPIvbPYO1GU=
Subject key identifier: E5:E6:5C:5A:A7:06:89:50:2D:E6:0A:90:4A:AB:52:5D:D6:67:C5:40
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 019A405CA5392B7168D7D6C0F21939B2655C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0700
Signing time: Sat 01 Nov 2025 17:00:04 +0000
Manifest this update: Sat 01 Nov 2025 17:00:04 +0000
Manifest next update: Sun 02 Nov 2025 17:00:04 +0000
Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: boAXQThz/L5pSkRcF0UQwTJl4HWiSS40z8yEw99dPoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:40:5c:a5:39:2b:71:68:d7:d6:c0:f2:19:39:b2:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Nov 1 17:00:04 2025 GMT
Not After : Nov 2 17:00:04 2025 GMT
Subject: CN=e5e65c5aa70689502de60a904aab525dd667c540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:b6:6e:07:54:a6:00:7c:5a:04:7e:71:49:
52:12:e4:cf:fb:81:73:31:33:26:b0:fd:83:96:5f:
de:c7:35:7f:fd:bb:20:23:c0:a6:1b:3c:93:58:d9:
70:a2:27:07:61:2e:cd:93:69:d1:43:37:87:3b:8d:
9e:59:21:cf:6a:b1:c3:aa:30:b6:98:8d:b5:f5:60:
12:48:63:62:a4:a7:3e:13:50:ec:29:15:f2:c1:2c:
94:c3:28:0e:5b:67:39:c7:10:f2:33:cd:9f:53:2e:
fd:ca:72:b2:92:46:02:47:42:e6:3a:c2:cd:65:e7:
52:4a:21:10:a5:5c:03:52:f2:12:b1:f0:7f:bd:88:
b4:74:7d:a6:1d:a3:94:b1:57:cd:26:05:5c:aa:64:
c0:3c:9e:84:8c:98:09:d2:2d:20:ca:39:23:e1:5c:
34:3a:c0:b4:d3:55:7f:88:74:ff:63:56:e2:93:40:
01:df:8a:e3:6d:df:cd:a0:8f:13:95:f2:4b:25:06:
ab:2c:36:8a:4f:94:0f:64:77:59:39:07:a7:ff:01:
dd:8b:87:40:e4:c2:17:ff:4b:14:29:c2:f4:86:26:
36:a0:80:4f:6d:5d:c0:dd:34:fe:8f:d6:bd:6b:0c:
79:13:ad:d8:52:a1:72:31:70:6d:d8:80:54:2d:57:
0f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E6:5C:5A:A7:06:89:50:2D:E6:0A:90:4A:AB:52:5D:D6:67:C5:40
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:81:74:20:12:4f:b0:eb:a6:60:4d:bd:bd:b8:0a:cd:b9:0d:
b9:ef:3c:e2:86:b0:e0:6c:1d:cb:82:f8:3b:8b:2c:e7:d6:8d:
7a:aa:05:e3:71:7f:a9:96:8b:1c:2a:5a:ed:3f:cc:bd:de:b2:
72:e8:a7:86:07:94:35:1d:ab:85:9f:46:9f:b5:ae:d2:a0:f7:
df:9a:ea:8f:bd:b0:e1:c2:bf:db:80:82:18:a2:43:58:94:e5:
b4:9d:a9:56:11:8a:b1:34:bc:7b:3c:ef:9d:65:a6:47:36:f0:
a2:c0:53:4f:b0:77:79:48:bf:54:a6:08:db:3b:95:44:33:2f:
f0:ad:35:77:dc:bb:32:b4:fe:6e:29:40:ba:aa:56:6c:9c:cb:
b9:33:13:9b:40:3c:23:f2:00:62:f3:2b:28:f9:39:ec:85:8f:
18:5d:8e:c4:87:a7:c0:e3:ef:da:0e:47:4b:4f:04:d5:ec:03:
33:ff:64:87:fb:23:b6:d4:01:68:b4:fc:b6:aa:90:b3:4e:48:
59:d0:01:8e:15:86:dc:f5:b9:5d:96:2e:3d:e0:5f:5b:32:72:
68:33:30:f4:40:ae:3b:8d:75:cf:24:aa:77:02:92:6e:d7:a0:
96:e9:f0:21:46:0f:ee:26:38:81:d6:67:80:36:e9:f4:a3:02:
87:60:9d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 02:40:45 2025 by rpki-client