Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File: rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier: ahscXRPyjzmTEkiBX+NKjOI6i2ZK3VJt+UWK/D4b90U=
Subject key identifier: 0B:30:1B:91:1A:21:74:CA:86:F1:29:25:6E:35:EE:E2:9D:BC:1A:83
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial: 019A4BBC9CD5C531813FF06C31A390EFBD41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number: 01D0
Signing time: Mon 03 Nov 2025 22:00:43 +0000
Manifest this update: Mon 03 Nov 2025 22:00:43 +0000
Manifest next update: Tue 04 Nov 2025 22:00:43 +0000
Files and hashes: 1: JwcsFNQrZCdoPIC0dUAZcHysppo.roa (hash: FF/t/K7QA2jOU+o41VoGD+jy9dDqvhlPL/hHJRA3zzM=)
2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: wKOaRUzbmtzrQfrr7G8VJ+5nEltl9Uh9amj2CHifoUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:bc:9c:d5:c5:31:81:3f:f0:6c:31:a3:90:ef:bd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Validity
Not Before: Nov 3 22:00:43 2025 GMT
Not After : Nov 4 22:00:43 2025 GMT
Subject: CN=0b301b911a2174ca86f129256e35eee29dbc1a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:c1:c0:41:80:bf:22:37:f4:d5:68:aa:47:
a9:7f:ea:21:c6:7d:74:6e:70:94:68:be:0a:45:0e:
91:92:0b:40:80:8c:25:6a:38:59:03:55:1b:da:ac:
10:30:8b:d8:1a:3e:95:84:44:9a:ed:98:97:78:90:
b9:be:1d:19:18:dc:77:ba:b4:db:00:62:2b:a5:63:
7f:be:50:00:27:77:70:38:7a:9f:6f:30:19:68:40:
d0:7c:a8:a9:07:8b:2b:29:f7:e1:3e:3b:92:b7:70:
cb:0e:63:19:b3:e3:35:6c:0b:0e:50:0c:b1:df:f9:
a2:9f:58:0f:59:30:e9:ad:f6:5a:c1:b8:b4:5c:4e:
72:43:b8:9b:cb:2f:00:64:0f:f3:ab:f3:f3:7e:a7:
cb:dd:16:eb:de:80:47:d6:c3:2e:a6:91:a3:d6:a7:
ab:37:51:64:54:13:85:5f:e5:de:8d:9a:70:33:bf:
17:7d:d8:25:b7:65:3f:d3:8a:42:0f:68:3b:5f:a6:
08:fb:fd:e3:8e:50:36:14:85:e2:80:01:0f:ea:c0:
a1:37:c5:57:59:68:02:5c:7b:55:82:c3:a5:bd:08:
d2:0b:f3:d9:e2:59:84:8c:21:5d:31:d3:7a:84:a7:
63:d9:be:29:8a:e1:92:d2:11:a6:a0:25:6e:73:6a:
b0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:30:1B:91:1A:21:74:CA:86:F1:29:25:6E:35:EE:E2:9D:BC:1A:83
X509v3 Authority Key Identifier:
keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b2:ca:e4:1b:f4:5b:e6:b1:64:ca:48:6f:65:43:56:b1:b3:
38:82:9d:65:9f:3f:d1:ad:81:a0:d6:03:a9:82:b3:16:14:eb:
34:41:78:4b:76:68:73:73:c4:07:92:f3:98:39:0b:59:2e:ba:
77:3e:c9:3f:cf:7a:14:72:cb:1d:ef:cb:aa:bc:0a:23:ae:16:
e3:f0:54:71:65:93:af:48:63:10:dc:8a:12:73:85:59:71:5d:
63:95:17:65:cb:74:c3:14:97:d6:bb:ca:9b:6d:ce:c2:f5:57:
bd:05:a9:1e:77:8c:1e:b5:bd:04:a1:3b:c2:f6:86:44:87:60:
cb:e3:eb:2f:70:73:27:12:2f:3a:d5:88:65:14:91:5a:9a:91:
e3:f2:dd:f4:95:37:87:c6:1c:a4:83:eb:f9:b4:3b:b1:e9:32:
09:8c:3d:42:b6:8e:fd:6e:eb:fe:f3:49:75:c5:ae:ae:a9:c5:
f2:0e:38:29:f5:88:de:29:98:a2:ed:3e:06:a3:d4:1d:ea:07:
ff:0e:f4:7d:3a:3a:c7:1b:0c:74:85:8f:d8:49:b6:04:7c:69:
0e:e1:db:93:bb:a1:9c:ad:3b:12:96:2d:b9:66:46:2b:bb:07:
ee:e9:dc:06:16:c1:90:91:37:86:ec:a6:56:27:89:09:1e:e5:
cb:e2:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:47:42 2025 by rpki-client