Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File: qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier: tT8oPbA6SnFU0y+N4Eiq7n7UdwER9CYIVGLonaWn7BI=
Subject key identifier: C7:ED:07:17:F5:85:B9:AC:9E:05:D0:70:2F:F9:74:8F:16:3D:AB:C2
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 019A7149D1488B65AC42A5F309B749A66052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number: 0E14
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: S5QAMqel7NMB40IeUaEOdfG/ZdEsQeQldy69lDtP2+s=)
2: qqQQvs9nXt1HjpZfeqvOvwFytUQ.roa (hash: 63Z1XFDv2thWE6305aK6hjX0RMocIGGlkCydM7bw3MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d1:48:8b:65:ac:42:a5:f3:09:b7:49:a6:60:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=c7ed0717f585b9ac9e05d0702ff9748f163dabc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:2a:10:2d:b5:a8:d4:aa:0e:78:2e:b0:4c:
cd:7f:76:69:36:b1:34:51:dd:7c:d7:81:62:e7:39:
47:f7:05:3f:2f:4a:25:22:92:65:12:b6:1b:67:8a:
b6:5d:69:15:35:a2:40:fb:25:81:dd:09:e8:23:9d:
2b:59:be:69:b6:60:2e:3b:1c:d7:b6:cf:9f:bc:92:
a2:85:7d:86:7f:96:37:80:38:d5:23:a7:f7:5c:57:
91:40:fe:24:8e:90:6c:32:96:75:89:90:75:30:9f:
25:be:ef:b9:d3:41:f0:22:0e:39:4a:ce:63:ae:08:
48:68:6f:f8:f6:89:40:f3:b4:e4:0f:4e:68:6b:e1:
ef:fe:a1:be:d9:7e:ce:a8:e3:d6:bb:9d:09:bc:4c:
ed:9f:b4:da:dd:84:e6:25:57:0f:b5:ca:2c:c7:cc:
45:61:a1:02:c9:79:52:44:d8:3e:58:5f:7e:c7:ca:
a9:66:62:a0:c6:21:df:fd:b2:bf:20:5d:b4:44:dc:
01:54:8f:1b:80:e6:05:fc:ee:3e:96:82:86:6c:df:
76:7c:41:42:8c:b3:2b:c0:ca:56:ff:22:02:df:68:
a7:68:a4:c7:ec:12:f0:62:08:24:f8:14:f4:56:20:
4e:97:51:05:e3:56:1a:91:14:19:28:e1:0a:99:00:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:ED:07:17:F5:85:B9:AC:9E:05:D0:70:2F:F9:74:8F:16:3D:AB:C2
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d6:1b:29:90:b6:46:b7:50:8a:49:f8:ce:0d:a4:8b:ce:83:
1c:34:b2:37:d0:aa:a6:c8:9a:06:84:94:c8:a7:6f:a3:c8:f2:
ff:2a:48:56:31:71:4c:75:d8:2a:0e:dc:dc:db:06:4b:f2:04:
10:9e:27:fc:f4:f1:a3:f5:c8:af:d4:4b:11:4f:eb:65:e6:d5:
ad:81:3a:85:1f:e6:1f:ee:fa:17:b1:a1:54:78:ce:fb:82:73:
7b:9d:84:2b:60:b9:ea:68:25:ae:ec:8b:61:1f:9e:5a:7b:52:
cb:3a:62:0e:3f:5b:44:e0:2f:26:5b:d5:16:24:1d:06:91:08:
ce:d0:40:69:59:e6:8b:37:2c:ab:73:f8:38:2c:27:0a:02:82:
2e:31:b9:e6:3f:7d:32:ec:9d:cd:f3:e8:76:7c:cd:d6:f1:26:
dc:e3:dc:99:f5:51:b4:ee:d7:b6:8c:17:03:b9:e8:5f:6f:31:
6b:2f:4d:85:da:6e:d1:d6:5e:7f:86:5d:6c:0c:13:1e:04:9b:
ab:62:c5:1a:02:04:75:df:bc:eb:cb:24:f7:da:5a:50:35:1c:
46:d7:33:2c:82:9b:86:02:27:cf:fa:a4:37:d8:f3:5a:8e:21:
73:04:31:b0:5f:3d:8c:c7:b3:47:a2:74:15:7a:84:a9:d1:0b:
3e:41:e6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:39 2025 by rpki-client