Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
File: cqPGykNevb-W__pMXZjkYAgo9xI.mft (raw, json)
Hash identifier: v38n3hdknnmGUWzmkATlSzo0RH0xEjMUvmMOqY6fhMc=
Subject key identifier: 74:DD:1D:B2:20:DB:18:5E:A6:11:AA:8A:8F:46:A5:9B:52:66:B9:9A
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 019A25C1D719D1A3994925ADB445C631E044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
Manifest number: 123A
Signing time: Mon 27 Oct 2025 13:00:51 +0000
Manifest this update: Mon 27 Oct 2025 13:00:51 +0000
Manifest next update: Tue 28 Oct 2025 13:00:51 +0000
Files and hashes: 1: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (hash: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=)
2: cqPGykNevb-W__pMXZjkYAgo9xI.crl (hash: 4ne3e/q9dlXEd5Z3e3a5QlySLGOTQ0Z4psP4oq1AnXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:d7:19:d1:a3:99:49:25:ad:b4:45:c6:31:e0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Oct 27 13:00:51 2025 GMT
Not After : Oct 28 13:00:51 2025 GMT
Subject: CN=74dd1db220db185ea611aa8a8f46a59b5266b99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:db:fc:82:65:21:19:78:b8:4c:14:15:9e:
92:eb:af:c8:76:25:49:63:f0:fb:1b:34:e2:f8:e2:
d5:b5:11:4e:1e:6b:e5:c7:84:6e:e1:a2:bf:7f:52:
42:ff:86:a7:e3:fc:2c:41:62:64:d8:c7:c1:85:8c:
e1:2c:48:3b:ef:b0:ca:84:03:52:68:b7:11:d3:f4:
34:37:10:e0:6f:be:80:0f:86:34:a7:76:27:01:f7:
56:ad:8b:58:5a:55:bf:36:2c:50:9d:5e:fa:35:3a:
f4:73:94:36:cf:25:fa:5d:fe:71:f5:f8:36:15:1e:
88:0e:7c:fa:c7:87:7d:95:d1:fd:9d:76:7a:d1:5b:
0e:66:53:d7:7e:b5:db:99:62:ea:2a:5b:76:dd:12:
48:38:9c:e2:04:10:e2:b0:03:7f:ef:ae:8b:cf:88:
8b:14:dc:6a:88:b4:2c:94:9a:0a:44:86:2c:4c:81:
55:ee:62:3c:67:63:c4:aa:d7:06:b4:92:ec:2f:63:
a7:00:73:15:1a:9b:ac:4f:12:ee:e0:71:44:83:98:
ff:9c:a4:1a:e6:3b:61:10:a6:36:08:6e:54:f9:67:
8e:0d:07:a1:04:1b:a7:23:c4:b7:23:e9:af:7d:58:
56:73:cc:a0:85:a8:00:b2:f8:42:9f:3e:f3:58:b7:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DD:1D:B2:20:DB:18:5E:A6:11:AA:8A:8F:46:A5:9B:52:66:B9:9A
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:57:a4:48:e6:e3:a4:b8:10:d9:98:0c:b3:5b:5f:4f:f0:cf:
1c:a2:02:6c:e8:6d:1b:07:ae:0f:8b:de:9f:14:6d:fe:3b:95:
a8:61:3a:10:e9:e4:9d:2c:fc:8b:85:41:b1:6c:f7:c3:3f:83:
b8:54:27:f0:05:57:be:d0:de:04:74:77:b1:26:87:ac:6e:f6:
7b:f6:e0:b8:15:d0:ef:8f:2f:41:e2:65:b5:c9:a8:03:1b:cd:
91:1c:ee:37:ff:c4:20:ed:5e:c7:75:93:b3:9a:1f:17:56:2e:
8e:47:03:ce:f9:f7:59:4d:ce:40:ac:51:83:e9:17:0a:7e:d1:
24:0d:95:71:f2:3d:ca:76:ce:57:80:e6:4f:ad:63:e6:1b:0b:
de:3a:cc:d4:f4:ec:7a:1a:00:64:b9:e1:bf:b4:30:f0:5c:dc:
b5:12:37:83:dd:24:84:ea:42:6b:13:d9:1d:65:d7:fa:19:27:
f4:e6:92:ba:ef:94:51:fa:15:9e:e1:0d:87:51:12:c2:3d:3e:
7f:d8:e7:60:2c:b1:51:58:48:5b:22:dc:91:fd:d0:b4:57:1a:
5f:6f:74:20:38:51:b1:3f:0f:74:86:37:fb:9a:25:0d:08:9d:
0c:4e:f1:58:a4:4f:36:fe:c4:a4:5f:b0:09:6c:e2:53:f4:a8:
27:44:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:34:39 2025 by rpki-client