Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json)
Hash identifier: ht4GLkH+PefJP3USQrvQPsXs+qUNE0pK0NGVsP8ZOYw=
Subject key identifier: BE:0B:2A:7C:08:E0:0D:C3:1E:12:52:60:EA:46:3A:1A:BD:0B:4F:D5
Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Certificate serial: 019A71B7FCB9B235C7DE604253E0A823319C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
Manifest number: 09E6
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: CWLz88nmzrjeAerKBd0Cpa/vz4lX/Fb1VjHWetC/xA0=)
2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fc:b9:b2:35:c7:de:60:42:53:e0:a8:23:31:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=be0b2a7c08e00dc31e125260ea463a1abd0b4fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:da:10:d1:21:8d:77:06:40:e3:09:81:3c:
10:6d:ba:de:0f:ef:40:72:1e:e0:fb:ed:d3:aa:b2:
16:38:1a:2d:d3:6e:2e:85:76:18:8b:32:01:73:4e:
ff:ee:64:16:ec:2c:fc:ea:9a:ba:64:c8:a4:df:cf:
ff:3c:3a:1d:cb:ef:e3:47:40:e6:48:20:65:10:00:
71:f5:4c:8d:21:85:77:14:9d:b5:d2:f7:58:10:c6:
79:ad:dd:54:95:07:5f:d6:8f:f4:4c:42:63:4e:0c:
c1:9b:f2:82:61:af:90:3d:28:de:dc:b8:b7:4b:38:
52:12:45:6b:45:22:36:99:65:a1:1b:ca:40:26:6a:
8a:d0:f2:97:4d:06:24:8e:d5:ef:a5:af:27:ff:b2:
2c:6f:26:26:e9:1f:2e:4f:84:c2:40:53:ea:b4:51:
f6:0c:bd:fa:ec:cd:2d:91:c0:6c:6e:69:04:f5:b9:
5d:c9:e3:12:c9:3b:8c:97:04:af:52:6b:c6:e8:5a:
47:f3:1f:e7:dd:2a:01:0e:25:db:6b:a9:95:42:08:
13:5f:81:19:82:b9:de:5f:f6:bc:b4:0e:af:16:1a:
2c:d4:c1:70:dc:0d:cb:ba:be:d7:3b:f8:da:31:4c:
5f:de:55:aa:84:20:d3:db:9e:6b:06:8d:01:ba:82:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0B:2A:7C:08:E0:0D:C3:1E:12:52:60:EA:46:3A:1A:BD:0B:4F:D5
X509v3 Authority Key Identifier:
keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:22:36:5b:fc:02:b3:8a:a7:0a:1e:0a:2e:cf:ef:22:05:fb:
78:70:76:7d:68:75:2b:3b:f2:d9:da:68:80:d1:8b:9b:8e:b9:
c8:19:c6:04:88:0c:32:4b:1f:3b:6b:9c:d0:b4:33:3c:63:f2:
5a:b4:91:95:4a:3e:14:57:47:20:b6:b0:11:7d:72:c7:a5:7e:
e2:2e:a6:ae:b8:76:7e:80:31:71:dd:5c:72:1f:14:96:de:0a:
7b:1a:02:3e:78:0c:f4:2c:78:11:47:87:f8:2d:d4:d2:e5:c5:
ce:5d:fd:71:71:b5:7c:d9:14:09:5d:85:c1:f1:23:6e:88:ae:
ec:09:7c:42:81:8d:1c:a1:bf:96:1d:12:af:6e:a6:5d:cf:99:
3e:cb:3b:46:64:93:92:13:73:3e:ac:bd:e9:09:90:b0:a3:01:
13:bd:1f:f5:90:e2:63:78:26:3b:81:c1:aa:e1:84:de:dc:9e:
18:6f:bb:7d:94:e3:d2:4e:ed:0d:b8:b7:b9:4c:88:5c:9c:5e:
0a:f4:4c:53:65:bb:6f:ef:c7:a0:07:b5:ea:3d:d3:09:a8:31:
cf:ec:b3:c4:b4:4d:67:f7:cd:ab:d0:47:a9:fe:ce:51:9d:2f:
22:81:fa:d0:eb:7b:59:49:8b:3f:17:15:30:3f:e1:c1:37:ee:
19:af:0b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:26 2025 by rpki-client