Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: x8HrWyB471gFN9rEw+bKyz30p1PucLRHsDeJmIb5CcM=
Subject key identifier: 30:73:81:54:5C:52:13:3C:A8:EC:DD:9E:D7:2C:08:66:6E:E4:3A:3A
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 019A71134C45B35FF67C2E821E322AB658BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 1461
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: ouIXrmvszadrejouRIhuJ+wm9ulZmmwPIJdW0ybk7zM=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4c:45:b3:5f:f6:7c:2e:82:1e:32:2a:b6:58:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=307381545c52133ca8ecdd9ed72c08666ee43a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b5:14:8f:f9:85:8f:78:11:04:83:1f:42:71:
7d:4f:cc:a7:8e:e5:e0:a3:31:d4:42:5b:18:58:3e:
64:19:63:4a:1f:61:6a:87:43:e4:68:21:f1:5c:9d:
98:b3:89:0a:73:3b:e3:f5:2b:74:03:fc:79:5b:1d:
a4:8a:8c:b5:1f:5f:c9:99:f7:cf:21:75:b4:2b:51:
ed:f5:42:52:46:86:68:62:86:47:2b:29:78:17:8d:
11:15:22:49:ab:cc:0b:97:b0:09:ae:1b:d4:23:02:
9d:f0:b4:f9:02:22:5d:e1:cc:02:21:93:e8:c1:7a:
bc:2f:27:a9:e4:7f:31:45:7c:cb:55:a3:2a:86:e5:
2e:93:58:dd:73:fd:b1:a1:b0:01:a0:6e:27:d8:e9:
ff:0b:c8:cf:47:4a:9c:43:89:70:39:a9:e1:57:68:
46:a9:5e:d8:03:82:97:d7:7c:8b:43:df:7a:ba:fd:
c7:59:52:66:94:5f:dc:e3:42:03:52:62:39:e6:cd:
8d:d9:e5:ee:fb:87:fd:e4:b3:38:cc:31:4b:08:15:
94:a4:bc:04:60:ce:ff:a0:79:6a:8b:f5:98:bb:57:
56:09:fb:5b:11:46:9e:53:83:45:da:9a:59:fc:1f:
da:d9:37:e8:67:12:33:85:25:27:af:ea:a3:b6:a4:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:73:81:54:5C:52:13:3C:A8:EC:DD:9E:D7:2C:08:66:6E:E4:3A:3A
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b3:52:cf:72:e7:75:95:18:ae:28:b7:ab:67:2b:4a:b9:b0:
62:95:a5:ac:95:de:e5:a8:59:b1:49:5e:e3:86:4d:1d:5a:be:
9b:f6:9f:76:f3:4d:1a:e8:bd:1f:56:85:d9:81:c9:06:d9:ef:
5d:64:f3:3f:2a:ca:35:cb:4c:77:c5:a2:53:dd:2d:05:6a:7b:
22:65:8d:69:3c:f0:e8:3b:9f:09:4d:4f:88:bf:71:3d:cf:a9:
54:50:10:a7:b6:0c:80:b6:fa:49:03:ba:5a:dc:cc:cf:68:e4:
1b:2a:e5:d0:ed:7a:8e:cb:0b:39:75:df:37:81:10:0a:29:8a:
c2:8f:cb:27:b2:97:f2:ea:0c:ba:eb:92:9d:db:34:10:d8:1e:
06:3c:47:22:97:9e:a1:bb:9c:3e:1f:c1:c6:3f:ef:9f:38:eb:
53:2f:46:9e:b5:8c:cc:dc:a9:c1:9a:ab:07:1c:60:fe:ac:42:
99:d9:fe:31:18:cb:f1:ea:9e:82:60:48:46:c0:40:a1:b0:e9:
ee:4f:cb:f8:dc:03:52:45:18:88:c9:3b:a5:84:0d:63:44:a2:
fd:03:c1:a8:7b:cc:ac:9e:f7:02:51:43:fc:0f:be:81:72:c3:
0b:ed:59:ff:29:70:56:ac:55:f4:d8:a7:c4:2e:97:c1:0e:f8:
d4:21:41:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:25 2025 by rpki-client