Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
File: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft (raw, json)
Hash identifier: m3IhZna/tVDEGfy64tblUOPtEJJ9lF/LJAu43JX/dLc=
Subject key identifier: 52:AC:23:0C:F3:39:D5:45:90:18:2D:C8:27:DD:5C:8B:F1:D0:9D:2A
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 019A10153347A2678CF096C68BE25DBF2D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
Manifest number: 07BB
Signing time: Thu 23 Oct 2025 08:00:15 +0000
Manifest this update: Thu 23 Oct 2025 08:00:15 +0000
Manifest next update: Fri 24 Oct 2025 08:00:15 +0000
Files and hashes: 1: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl (hash: pvqgNdRPZ6EmdIdYShl5IwHyqzbXq5opY1v1SaXUDM0=)
2: vJJQ7dMyrgz7V87aem8R5eRT1tU.roa (hash: YVuwtpk4uTSArI127axgnPV75XcPEeuaWjYEyG0FBxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:15:33:47:a2:67:8c:f0:96:c6:8b:e2:5d:bf:2d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Oct 23 08:00:15 2025 GMT
Not After : Oct 24 08:00:15 2025 GMT
Subject: CN=52ac230cf339d54590182dc827dd5c8bf1d09d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:30:e6:3d:e7:fd:aa:09:b2:53:73:c5:ee:
49:2d:20:7b:e8:55:7c:71:36:28:4a:1f:64:27:ac:
8c:da:65:ed:4d:00:f3:3f:15:d3:55:f0:46:ae:47:
f4:b3:9a:3a:84:cb:5b:7d:06:bb:92:97:2e:18:36:
b5:52:b1:e0:45:b7:c9:d3:c6:02:d8:24:60:4c:eb:
d4:4b:ed:cf:a4:f1:09:a9:0f:e8:43:40:7c:00:71:
b3:ed:72:de:e0:08:e5:46:bd:01:99:ae:aa:de:6c:
e1:92:c3:30:2b:e8:33:89:32:f0:e1:5c:e3:a0:a8:
5b:59:a9:9e:b9:31:1e:27:14:d1:f6:26:2b:67:bb:
7c:57:50:b7:19:d2:00:3f:9a:61:99:b5:de:57:ab:
ce:36:af:f2:82:f2:56:d8:3f:19:4d:ec:c6:02:f9:
00:94:96:70:15:e9:cb:d1:42:af:1b:1f:3b:c8:ca:
2a:96:ab:d8:fb:7c:87:59:fa:63:8e:0a:8f:9d:96:
ed:ad:6d:82:31:a5:b1:9e:3d:98:73:f4:6d:b7:73:
43:7c:03:e9:31:af:14:c1:f7:a5:b5:77:16:ce:d4:
d3:91:7c:a9:dc:b5:07:27:a5:91:ef:87:b5:9e:99:
59:28:83:c7:f1:6b:e3:f0:60:a7:35:51:8c:c3:2d:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AC:23:0C:F3:39:D5:45:90:18:2D:C8:27:DD:5C:8B:F1:D0:9D:2A
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:3d:3b:38:40:62:ac:2a:90:eb:fe:f1:f5:81:16:45:56:94:
06:66:0a:27:2e:1b:f7:b8:30:d2:93:70:b7:2d:0b:0b:4a:ea:
f6:4e:a9:ee:f2:50:c2:de:83:2b:dc:84:4e:c2:a8:bd:4e:33:
ce:dd:33:c5:a2:37:b9:f0:46:79:83:6a:f9:11:87:65:b8:dd:
fd:60:f5:67:24:aa:17:61:7a:08:33:0e:07:18:bf:98:e0:a7:
f4:65:6b:5b:37:db:76:85:76:cc:40:16:9a:d9:d6:0c:e2:3f:
d3:ea:a6:7a:5c:68:52:27:57:ca:f3:56:c8:b5:bb:09:10:41:
4d:5f:88:65:ef:1b:c3:e3:84:ff:14:05:4b:80:30:7b:32:e7:
65:91:1a:94:14:d5:7c:bf:ad:cc:bf:86:b5:24:0e:4a:c2:7f:
40:bd:61:39:18:b5:d5:7e:f7:b5:1e:19:53:7d:63:26:64:09:
7f:78:4c:9e:8b:cb:9c:e2:40:b6:fd:c2:d2:a4:ed:56:ef:78:
6d:d5:7f:29:f8:59:90:28:cc:eb:0f:cf:df:88:86:e1:86:f9:
d0:fb:a8:27:4a:16:e9:06:c9:ce:70:5d:6d:57:56:07:57:3b:
24:f3:ab:95:c1:e4:c3:12:0e:b0:a7:07:b6:c9:6e:70:51:c0:
7d:e2:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 15:51:53 2025 by rpki-client