Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: 7njYdY9GA0qzw2+HDbNkJL8VIutyMDs4Yl2cJTxug24=
Subject key identifier: 31:E1:6C:86:41:9B:C0:08:A5:88:8B:72:92:19:1F:BF:5A:0B:1D:75
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 019A1E3EDE04CB8BB0E2E4D7706BEB76C85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0D8A
Signing time: Sun 26 Oct 2025 02:00:27 +0000
Manifest this update: Sun 26 Oct 2025 02:00:27 +0000
Manifest next update: Mon 27 Oct 2025 02:00:27 +0000
Files and hashes: 1: BrNhX11GN3gzWV-434wlzWriATQ.roa (hash: e/gkiYTr4M+ZdV4GBEAw4FBFr5Cgb0NfH0gUAD5dMJY=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: WgckWtuaMgp5XHo/phYqYTkJcMh35oShMCQPqRZd5AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:de:04:cb:8b:b0:e2:e4:d7:70:6b:eb:76:c8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Oct 26 02:00:27 2025 GMT
Not After : Oct 27 02:00:27 2025 GMT
Subject: CN=31e16c86419bc008a5888b7292191fbf5a0b1d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:32:87:3c:35:e9:a7:44:95:42:4a:85:72:
4d:e3:fa:4c:07:69:4c:4a:51:3b:54:9c:7f:be:18:
d6:22:fc:b0:d6:e4:11:29:f3:b0:02:7c:a3:a0:ae:
9b:91:48:59:99:a4:04:2f:aa:a6:8f:32:02:a7:e2:
46:2c:14:61:5c:c7:18:ae:8f:da:dd:4d:a4:09:48:
84:af:f7:2b:d4:2b:2f:d4:69:43:fc:94:3c:5d:06:
e2:2e:44:eb:05:de:19:d7:1f:4f:6f:00:13:72:4f:
99:a3:29:92:25:c6:ba:a4:d3:86:51:eb:34:d0:d3:
39:d3:ea:73:bf:60:44:0d:dc:62:9a:92:d5:4c:72:
ee:d3:a8:a1:9a:5e:9b:c0:c8:17:f3:49:1e:9b:b0:
50:36:f1:de:40:31:2d:3e:52:51:eb:6f:8a:74:20:
fc:1b:7b:1c:38:f5:31:24:d9:4c:40:45:74:64:0d:
d9:40:7d:f8:25:29:e3:73:40:67:e0:63:8f:2c:98:
3d:fc:06:30:ba:05:94:04:26:57:49:8c:8d:ed:95:
e7:e3:17:4b:da:44:39:f6:20:27:31:70:ce:6d:c2:
6d:bf:93:25:dc:59:ba:20:36:bf:9a:a8:2d:e5:49:
83:e5:41:22:a9:ce:d7:2b:42:83:e8:91:79:14:21:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E1:6C:86:41:9B:C0:08:A5:88:8B:72:92:19:1F:BF:5A:0B:1D:75
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:d0:2d:f1:ad:fe:e1:c3:81:55:83:77:08:9d:c0:7b:7f:b5:
03:42:64:e5:fb:67:9d:fe:39:70:fc:e8:0b:ca:cc:51:36:33:
6e:7d:0c:11:48:fe:46:80:3f:81:c7:91:0a:fb:80:c1:52:1e:
a9:55:d4:ce:a7:1f:5e:d2:0a:a7:03:91:7e:b9:5d:5c:ef:d2:
ab:cf:e2:f2:de:44:d0:1f:bb:56:a5:12:af:c3:4c:30:eb:3d:
67:40:dc:ca:17:6d:95:cd:7a:e7:40:51:27:92:af:e6:99:1d:
a1:82:65:a1:d8:b0:f4:90:4d:b2:f1:4b:92:22:5c:53:5f:ba:
56:66:95:4c:9c:40:9a:55:06:9a:fe:d1:35:0f:e2:ac:59:34:
79:3d:dc:f2:0e:7a:a6:18:e3:34:13:c3:3a:db:b9:16:41:74:
16:15:90:69:96:d0:f9:a1:62:a3:5f:43:d4:43:14:60:ff:40:
88:4e:2f:b8:11:48:1f:6e:5a:2c:bf:4b:d2:86:7f:a7:8a:9a:
ac:3d:5f:17:9e:cc:d6:23:a8:48:86:f7:83:95:c5:62:ad:10:
f2:a1:ea:c7:90:aa:7c:00:7e:ec:1b:67:77:c2:75:14:be:05:
c3:0a:85:98:0f:64:73:70:c9:3d:60:f2:2a:e2:dd:58:82:10:
8d:13:1d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:14 2025 by rpki-client