Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
File: q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json)
Hash identifier: f8R+aXF4LRFYCbvt0WOYBqPHc5tFi85nu4slJ3ByZnU=
Subject key identifier: C3:D1:B0:A8:A2:0E:E7:E3:51:92:ED:35:AD:95:78:38:2C:F0:F0:C3
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial: 019A725C95FC86E35F787C2DBA544EAA678C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
Manifest number: 0B87
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa (hash: 6iS4lGatjNwdjx3TWoy83KW0n9N+x6+eWhAvA99wwRM=)
2: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: nf4cHug2lavN9f/t6t+TUOD312cAtnNOJwk0RcM24w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:95:fc:86:e3:5f:78:7c:2d:ba:54:4e:aa:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=c3d1b0a8a20ee7e35192ed35ad9578382cf0f0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:eb:11:30:d1:ba:04:e4:59:e4:e5:1e:09:
4e:03:09:3a:a1:5e:05:ec:38:e1:ba:25:3e:65:23:
99:17:c4:7a:7b:51:c2:d5:01:16:41:ec:cd:a8:fa:
de:99:94:c6:cb:86:73:cb:52:ce:9a:cf:6c:7b:b8:
28:2b:a4:d8:e1:1f:aa:52:9e:0a:39:69:e0:dd:52:
4f:d4:37:f0:12:5c:90:a4:0e:d1:26:56:9c:3e:8f:
07:65:be:39:86:07:d0:03:c9:15:72:8d:da:94:aa:
2e:6d:19:ce:03:7f:9f:c6:c7:c8:26:ac:79:86:1d:
74:08:c0:68:2e:51:34:64:b0:64:9b:fc:c7:f1:26:
e4:46:42:0e:48:81:15:c7:bc:3a:86:a7:23:18:c2:
5a:47:3a:04:bf:9d:1a:55:a0:8f:75:0d:e5:07:b0:
49:07:ab:8a:b3:c1:23:79:b9:34:8a:09:eb:f9:4f:
b5:e0:72:4c:3a:95:0f:79:80:dc:39:a9:bd:33:2e:
cf:da:d0:84:b6:da:f0:57:fe:3f:70:e0:8c:15:99:
1f:b1:39:36:37:e4:da:e9:ce:c6:d2:61:00:3e:92:
93:a5:ba:64:75:de:73:46:e5:4e:8c:c8:9f:6a:ce:
62:c5:15:9b:02:7c:32:42:2b:ad:da:85:78:94:d5:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D1:B0:A8:A2:0E:E7:E3:51:92:ED:35:AD:95:78:38:2C:F0:F0:C3
X509v3 Authority Key Identifier:
keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:60:28:14:c6:bb:66:51:91:d3:1b:57:e8:50:ca:43:fe:b5:
c8:c9:13:31:d1:f0:95:f6:49:9b:97:a8:37:57:86:9c:7c:d8:
ef:b0:58:83:e0:44:28:5e:0f:96:c9:92:31:39:ad:b5:49:52:
e9:8b:b4:2d:12:64:05:1d:0b:96:a3:90:dc:c4:65:cc:c3:d7:
7c:41:08:90:83:cd:61:8b:6c:1c:77:3f:4c:b7:7d:de:91:87:
27:06:25:5c:a7:4b:46:bc:00:52:85:5b:e9:fe:1a:1a:27:58:
9b:95:64:94:3a:28:a9:9e:92:55:ae:c2:12:9c:67:f4:99:56:
7b:3c:c2:e9:7e:49:c0:9e:7b:d7:ac:18:95:1f:16:1a:8b:09:
a7:aa:02:bb:6a:32:e5:06:6c:e9:69:f6:f8:53:ff:1b:94:3d:
c5:95:83:9b:8d:c9:fc:3e:5d:58:d5:f2:21:38:56:5a:1a:d0:
26:1e:9b:61:59:50:a5:a9:32:e5:41:27:0c:97:20:b4:0a:65:
94:48:c1:b8:75:b6:cc:83:94:c0:57:5d:aa:f7:52:a6:cb:68:
1e:23:94:b7:22:e5:7c:eb:b8:0e:7b:0d:9e:91:05:01:ac:a0:
58:ea:58:fc:99:7d:37:52:95:dc:c7:0a:ac:1f:06:6f:d4:1d:
ab:bd:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:31 2025 by rpki-client