Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: yISoa9QnAqAzXQRojMQvy9eXmA74+0zEx4Kn09tQXSc=
Subject key identifier: 7B:F1:7B:4A:3A:B6:9D:0D:44:86:F8:1F:85:82:EE:7D:E4:18:CC:03
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 019A71EE9AD3FAB703C2465BE2D9D1772787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0C8D
Signing time: Tue 11 Nov 2025 08:00:53 +0000
Manifest this update: Tue 11 Nov 2025 08:00:53 +0000
Manifest next update: Wed 12 Nov 2025 08:00:53 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: wWbpAV+hRWbkR3Ry84AvHI1opz5MhzsK6Sr4TTyiWWg=)
2: fFstVPrb_3K-jl7g58_b4ihHTfY.roa (hash: sDN8YMAsFynzsUb+KhP7tCE7b4tst1zO6K3vmsmzSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9a:d3:fa:b7:03:c2:46:5b:e2:d9:d1:77:27:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Nov 11 08:00:53 2025 GMT
Not After : Nov 12 08:00:53 2025 GMT
Subject: CN=7bf17b4a3ab69d0d4486f81f8582ee7de418cc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:c3:58:08:28:0d:85:71:03:7e:10:f2:92:
7d:29:3a:63:74:48:f4:5f:74:e1:a3:85:a4:d5:e3:
c2:43:ad:8e:6e:cd:36:79:06:c1:2f:24:16:08:04:
06:8a:45:04:87:19:4b:1d:c2:9f:01:fe:0c:62:a1:
3e:be:02:87:d6:67:75:c2:f7:bf:ef:43:8d:a3:0c:
64:bf:9c:27:69:02:22:8b:fe:76:f2:60:e1:2c:fa:
15:ab:e5:31:5d:85:76:21:f1:66:fd:52:a8:33:c9:
74:71:f3:ec:c6:e3:a2:0a:24:24:6a:5c:68:1a:a2:
a5:d9:d6:98:c1:4e:06:46:03:4c:9e:8f:e5:ba:28:
22:19:9a:18:df:66:61:50:60:ab:d1:0b:95:9d:ed:
16:00:2e:c6:1a:93:78:7e:09:6b:a0:fc:6b:fb:67:
68:22:dd:49:db:d9:8d:8e:b4:7a:b4:1e:5a:24:ca:
ed:ea:50:ff:89:65:36:60:c9:58:50:0a:9e:02:9e:
b7:b3:71:ae:21:a4:6b:3f:ce:76:3a:a9:ac:c2:9e:
66:32:55:ba:a0:20:7d:c4:6e:1a:33:f8:fb:48:f9:
c6:f2:82:57:68:3a:89:60:2a:61:4d:a2:81:2e:b0:
18:0e:21:db:a9:25:3c:d4:22:53:6d:66:1f:1f:b9:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F1:7B:4A:3A:B6:9D:0D:44:86:F8:1F:85:82:EE:7D:E4:18:CC:03
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1f:db:65:86:4c:c9:6e:52:dc:35:0f:99:bb:5e:66:4f:c3:
8b:26:4d:d5:fa:18:b3:47:c7:a2:9d:8a:86:1e:c1:99:4f:07:
f1:53:63:9a:ff:42:0f:2a:c7:14:8e:9e:7b:93:90:9b:2f:28:
90:e7:89:3b:74:4b:02:eb:74:75:f8:a4:ed:94:0b:a3:26:33:
32:5d:bd:43:25:3d:4d:73:53:41:14:cb:fb:57:b0:3d:ed:20:
f9:2c:b7:13:27:fd:62:b7:51:9a:b8:88:d8:62:72:2d:5b:89:
c6:d9:d4:9e:4c:13:ba:cc:f9:71:3e:a9:3c:0d:65:4e:33:9d:
b2:80:f7:73:ce:63:e2:13:a3:36:17:c5:4a:58:0f:fc:6b:80:
57:1d:a0:16:05:ec:8e:28:bd:10:67:48:34:46:b7:27:cd:a2:
8e:c7:89:76:2a:9e:d7:d7:29:99:2d:fd:58:13:2e:0f:c4:ef:
ec:69:14:43:31:b5:80:9e:ef:45:78:03:bc:5d:f8:4e:d3:e6:
ca:67:ba:95:bd:d8:7d:2c:0a:92:8a:31:f8:4e:80:40:d1:16:
d4:9e:ea:22:74:0f:94:74:84:b4:8c:b5:55:8c:04:35:62:e8:
74:9c:0e:a0:4e:02:f2:4e:ff:48:2b:e1:19:14:2e:54:86:03:
ce:4a:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:20 2025 by rpki-client