Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: KSlVOUr02/Sqob/5Fpg5t0TqbVzbuX7IHgXWEDp0XZE=
Subject key identifier: D2:0B:92:2C:50:2B:B2:A8:78:AD:38:2C:D6:4A:E0:6B:70:09:A2:17
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 019A6D6D1B49EF78ABBE2152E94D8785CC80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0EAA
Signing time: Mon 10 Nov 2025 11:00:58 +0000
Manifest this update: Mon 10 Nov 2025 11:00:58 +0000
Manifest next update: Tue 11 Nov 2025 11:00:58 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: l97aSdLf2K5R28HbDzMOx9lEUjnqGMUJD8LN7wXzZ2o=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 08:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:6d:1b:49:ef:78:ab:be:21:52:e9:4d:87:85:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Nov 10 11:00:58 2025 GMT
Not After : Nov 11 11:00:58 2025 GMT
Subject: CN=d20b922c502bb2a878ad382cd64ae06b7009a217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:b4:8c:58:d7:90:e3:f1:12:55:ef:1f:2f:
52:0d:8c:be:f9:f1:c0:44:f1:e8:21:7c:ca:dc:72:
b7:b9:0a:11:23:b7:ac:d7:8d:dd:6c:88:d9:db:fa:
4a:c5:9a:a0:7c:05:70:28:1d:90:03:08:fb:2e:3c:
18:21:5c:57:5a:8a:82:e2:83:48:4f:20:c0:36:c1:
4a:e7:a0:4b:ea:d4:73:0f:f3:20:a1:0b:22:aa:e7:
34:77:1d:fe:d8:3b:0b:f3:21:23:a0:08:c2:5a:a6:
22:8b:06:9c:10:16:1b:2d:55:85:c6:0f:ce:e4:e4:
94:85:0c:a0:60:ec:5c:c8:07:98:b9:22:f6:79:6c:
01:04:b3:30:02:e5:f5:3c:7b:87:c6:7a:1e:77:3a:
7c:3d:c6:5d:eb:dc:ed:59:7a:d3:88:73:2e:8b:93:
9e:2c:85:d6:96:e9:99:b8:1a:46:52:cb:85:6e:68:
60:01:11:61:5c:b0:f8:8e:02:2e:da:2d:dd:97:ec:
dc:78:42:2d:38:5e:48:01:22:0b:a7:1b:bd:2b:bd:
b2:4b:e7:99:ac:c8:e0:29:d4:51:da:ba:86:2e:fa:
f2:25:32:0a:a8:8f:ed:de:46:13:2d:04:6f:6a:29:
05:36:f6:de:04:e0:97:ec:54:75:59:e2:13:53:06:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0B:92:2C:50:2B:B2:A8:78:AD:38:2C:D6:4A:E0:6B:70:09:A2:17
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:46:7e:ac:30:1b:1d:a4:d6:17:b2:4f:b8:ac:2f:93:c8:43:
6e:f2:77:e7:ce:05:9b:62:32:90:f1:01:3e:a7:e9:6d:9c:b2:
7e:27:0f:a9:88:ad:ee:e3:f6:5e:94:d2:4f:06:35:b8:3e:b1:
9f:bc:08:12:eb:5a:21:93:63:3a:d6:3a:76:88:62:0c:fd:eb:
0a:3b:d1:ea:02:f0:c1:53:1c:35:ec:b9:bb:ce:4d:fd:a8:a4:
b5:e1:0a:b8:35:1d:e1:fb:37:2f:7e:fc:3f:4b:9a:de:c3:26:
dd:b2:f9:5d:91:20:f5:0c:69:b3:90:6f:26:d8:12:c0:61:5a:
04:b5:e1:c2:e1:9e:f1:28:73:eb:ef:a8:61:ba:1a:ce:b3:da:
a7:1b:75:29:a0:17:c7:11:75:ac:7c:b7:d7:99:91:14:a7:f8:
3e:ad:1a:81:1f:15:81:77:a7:02:4c:14:6a:8f:c4:47:b6:a2:
64:49:57:19:02:48:ea:f8:f9:72:f5:d4:a2:fa:be:55:ff:e7:
83:85:f9:bc:0f:76:36:03:84:26:71:c1:dd:55:55:b1:47:1a:
0d:22:86:ae:c4:c0:a1:c9:64:3c:a8:80:26:98:d5:6d:be:c2:
63:15:a0:22:6f:7f:1f:38:7e:a4:28:1d:78:23:48:ec:07:7b:
3a:c1:a4:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZptbRtJ73irviFS6U2HhcyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw
OTMwMjcwHhcNMjUxMTEwMTEwMDU4WhcNMjUxMTExMTEwMDU4WjAzMTEwLwYDVQQD
EyhkMjBiOTIyYzUwMmJiMmE4NzhhZDM4MmNkNjRhZTA2YjcwMDlhMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA60jFjXkOPxElXvHy9SDYy++fHA
RPHoIXzK3HK3uQoRI7es143dbIjZ2/pKxZqgfAVwKB2QAwj7LjwYIVxXWoqC4oNI
TyDANsFK56BL6tRzD/MgoQsiquc0dx3+2DsL8yEjoAjCWqYiiwacEBYbLVWFxg/O
5OSUhQygYOxcyAeYuSL2eWwBBLMwAuX1PHuHxnoedzp8PcZd69ztWXrTiHMui5Oe
LIXWlumZuBpGUsuFbmhgARFhXLD4jgIu2i3dl+zceEItOF5IASILpxu9K72yS+eZ
rMjgKdRR2rqGLvryJTIKqI/t3kYTLQRvaikFNvbeBOCX7FR1WeITUwbd/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNILkixQK7KoeK04LNZK4GtwCaIXMB8GA1UdIwQY
MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt
NTk1YWRjNWJmZDc0LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0
LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0Z+rDAb
HaTWF7JPuKwvk8hDbvJ3584Fm2IykPEBPqfpbZyyficPqYit7uP2XpTSTwY1uD6x
n7wIEutaIZNjOtY6dohiDP3rCjvR6gLwwVMcNey5u85N/aikteEKuDUd4fs3L378
P0ua3sMm3bL5XZEg9Qxps5BvJtgSwGFaBLXhwuGe8Shz6++oYboazrPapxt1KaAX
xxF1rHy315mRFKf4Pq0agR8VgXenAkwUao/ER7aiZElXGQJI6vj5cvXUovq+Vf/n
g4X5vA92NgOEJnHB3VVVsUcaDSKGrsTAoclkPKiAJpjVbb7CYxWgIm9/Hzh+pCgd
eCNI7Ad7OsGkWg==
-----END CERTIFICATE-----
Generated at Mon Nov 10 16:01:00 2025 by rpki-client