Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: ja6FIGJmI6W/IAOPlo8NN3XO7H5pOsMLbIWIl3Q/oZo=
Subject key identifier: 56:37:B3:65:24:83:EC:FF:36:74:6A:7D:A1:22:5A:9A:62:3B:28:2B
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 019A71B87E2283163163B23EFF5DB6291E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 0B2D
Signing time: Tue 11 Nov 2025 07:01:47 +0000
Manifest this update: Tue 11 Nov 2025 07:01:47 +0000
Manifest next update: Wed 12 Nov 2025 07:01:47 +0000
Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: EtSiXWki67wcZynBYdkNLL6RW07uN+l4Nf1so2cRxGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:7e:22:83:16:31:63:b2:3e:ff:5d:b6:29:1e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Nov 11 07:01:47 2025 GMT
Not After : Nov 12 07:01:47 2025 GMT
Subject: CN=5637b3652483ecff36746a7da1225a9a623b282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:65:dd:0c:92:f3:e3:52:94:ff:35:e6:a9:
35:58:a9:ed:4b:2e:c1:25:ac:3f:2d:64:e8:f9:a6:
9f:6f:bf:4f:ef:9e:7c:67:45:c7:0c:68:58:b5:96:
7c:bd:fb:c0:ba:1d:3f:f9:d5:da:70:e2:25:be:10:
c6:cc:2e:5f:36:2c:69:45:71:2c:99:72:2a:85:9b:
48:d2:8a:59:fc:e0:24:71:4a:fd:9a:a4:48:68:92:
a7:d9:2b:45:1c:65:4e:20:18:fc:02:3f:a0:7b:04:
03:d3:ac:32:87:eb:fd:82:b8:75:9f:54:71:cf:f0:
28:3a:e5:00:11:56:26:9f:8f:47:d4:ca:36:1c:6d:
e5:41:c7:de:94:2f:85:91:08:8a:62:ff:5b:26:58:
2a:46:1a:6a:8b:8c:22:ae:76:f2:9f:e5:2c:e3:9b:
50:f2:62:44:53:94:ab:2e:b4:0b:ed:f9:21:0f:b5:
17:e3:bd:f5:de:1c:40:21:3c:d8:bd:1e:75:52:78:
5b:aa:f2:e9:34:f6:43:85:f8:f0:b2:0b:19:f5:82:
95:e0:5e:b7:62:00:9a:ec:08:f0:3c:b1:ca:75:c7:
21:68:bc:48:c5:8a:e1:a9:7f:b4:3c:df:7d:95:13:
af:41:d8:34:64:44:9c:23:1f:05:c3:f7:ba:d2:69:
2c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:B3:65:24:83:EC:FF:36:74:6A:7D:A1:22:5A:9A:62:3B:28:2B
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a7:14:60:b6:f7:64:b0:af:d4:5d:25:5f:ef:60:5c:8d:1d:
e8:9d:80:3f:ff:c8:70:3c:b1:a2:02:04:91:45:2b:8c:d0:75:
c1:8a:ec:e2:69:71:20:b8:8f:a6:57:64:dc:f1:39:12:20:ac:
f5:8b:16:f3:89:00:c9:bb:a2:e5:cd:6c:f4:bd:11:8c:fb:c8:
8b:4b:83:40:6e:10:d8:a1:0b:39:d9:b2:f8:c2:7f:60:d1:dc:
ba:8a:8d:f9:35:69:ef:af:b2:78:61:13:4d:34:ba:79:ef:8f:
92:5b:cf:8c:82:71:d0:cf:f5:75:88:56:3e:ae:d5:1c:74:9e:
17:29:2b:65:10:cc:ad:31:94:fc:be:7d:b8:6d:85:08:f7:4f:
6e:3f:5e:dc:ab:a9:48:5a:56:e8:d8:02:24:3b:39:34:62:14:
bb:da:91:22:e1:a8:ee:ca:7f:99:10:92:29:c7:44:ab:71:44:
80:2b:5a:55:cf:4a:40:d1:0f:5d:03:6b:4a:ed:62:d5:30:c4:
33:86:6c:ec:ab:0c:58:32:5a:7a:7a:2f:4e:44:4c:f1:8c:2c:
64:c7:46:52:85:0c:35:46:2a:11:e3:39:21:ce:d3:51:84:5b:
68:c0:04:98:38:e4:d9:ff:05:14:b1:ea:79:70:a0:ef:a8:de:
92:f5:54:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:54 2025 by rpki-client