Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: RR2FY4pPNLw+/xcThDl/k4PD4IS4voHQa1i2Z/iSKxc=
Subject key identifier: 95:4B:1E:12:02:7D:15:99:A5:03:73:5F:5F:8E:62:D4:D6:2F:6B:46
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 019A2A7A07094DFCE2A5FE8A17183A4DCC20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 10F3
Signing time: Tue 28 Oct 2025 11:00:31 +0000
Manifest this update: Tue 28 Oct 2025 11:00:31 +0000
Manifest next update: Wed 29 Oct 2025 11:00:31 +0000
Files and hashes: 1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: boVCe6QTnZUAMJeyxHsOXmNGZ08qZfblNV+zOOvlDrQ=)
2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:07:09:4d:fc:e2:a5:fe:8a:17:18:3a:4d:cc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Oct 28 11:00:31 2025 GMT
Not After : Oct 29 11:00:31 2025 GMT
Subject: CN=954b1e12027d1599a503735f5f8e62d4d62f6b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c4:93:c7:4f:49:d4:12:68:a8:35:70:21:97:
cf:34:ae:05:3c:4a:4f:ef:e3:9e:71:ca:2f:a4:c1:
79:25:2f:a6:8e:6c:38:e1:1c:c1:4c:9a:e7:05:46:
f3:6a:52:e6:3d:9d:0b:dd:9b:e1:a8:7d:11:c7:ef:
a5:6e:82:eb:26:bc:c3:1c:de:4e:f4:54:0e:f2:20:
4f:d7:a3:f9:0b:28:40:5b:df:f6:f9:7e:35:f3:d0:
b7:4a:fc:ba:54:5e:b1:61:14:82:44:ac:72:a1:12:
ff:53:b8:01:42:82:6a:97:f0:ca:b5:6e:19:2f:e5:
80:93:cb:02:f3:e2:30:c3:71:89:ca:34:95:ec:f0:
f9:87:21:47:e8:ea:b1:4e:9c:c9:0d:9a:a1:47:bb:
1e:ff:ef:b2:df:54:63:34:a8:9b:b4:b0:56:fe:3f:
35:f6:a4:b5:a1:a8:11:5b:7d:cc:b5:d4:c6:a8:a2:
31:41:42:fb:7a:2a:bb:97:88:87:2b:01:70:b4:80:
13:c4:8b:2d:07:5f:8f:60:6b:b9:87:54:27:ce:24:
72:9b:e7:df:6e:a2:71:70:ff:66:82:62:0e:8f:3c:
14:5a:7f:54:30:2e:b5:c0:56:04:e1:12:4e:08:b6:
b0:df:6a:42:09:00:70:6e:e4:80:03:4d:4b:57:93:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4B:1E:12:02:7D:15:99:A5:03:73:5F:5F:8E:62:D4:D6:2F:6B:46
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ca:32:75:f5:b0:ba:a3:3e:17:c5:18:43:5c:59:7c:ec:21:
72:90:99:fc:7c:93:67:c8:95:bc:49:96:6b:ed:cf:05:31:a8:
86:05:aa:61:7b:50:34:b7:b7:d9:9c:72:cf:56:0d:f8:7a:f6:
e7:ca:dc:f2:51:79:73:3f:87:bf:ba:fc:84:8f:d8:ae:dd:fe:
4d:6c:be:2e:a1:34:29:2e:c5:f0:5e:fd:b1:9e:9a:35:b6:d4:
ec:fd:3a:91:34:92:ed:18:41:49:26:60:f8:ef:19:2a:5d:6f:
61:97:5a:ce:46:76:d1:c7:23:fa:2c:d2:f3:43:85:52:3d:6a:
43:fa:bb:c3:4d:c0:f3:09:e6:58:de:a2:2d:d0:da:d3:8a:49:
70:87:57:5c:39:e3:90:76:59:7b:95:d7:83:28:db:34:9a:9d:
d6:d0:b9:75:50:bd:d1:1a:95:a8:fe:7f:2f:91:d0:d3:a5:07:
33:c1:9c:bc:35:8d:8a:69:ad:27:45:1e:d7:32:49:3a:5f:95:
0e:44:6b:ee:f0:31:9f:e2:04:32:06:fe:55:b7:87:0b:ff:3a:
53:74:bb:50:58:d5:74:82:b1:65:b9:88:67:8d:f4:a1:f1:d5:
d7:cf:46:b1:dd:9b:79:4f:65:40:4a:00:cd:74:2d:35:30:61:
c0:6b:4c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:51:08 2025 by rpki-client