Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: EFp5iDGx3Xvrj8Ts0XBs4xFL6DIZP0OGLPArLS+nMi0=
Subject key identifier: 71:6F:99:36:D9:0C:1C:27:08:EB:97:EC:6C:5E:72:53:87:3B:B0:06
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 019A2B8C65F6B28DB589E5B534B1C1A94FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 0125
Signing time: Tue 28 Oct 2025 16:00:12 +0000
Manifest this update: Tue 28 Oct 2025 16:00:12 +0000
Manifest next update: Wed 29 Oct 2025 16:00:12 +0000
Files and hashes: 1: g6lOJZk_IOKaTF7q4TnhPviaoeE.roa (hash: 3uBzUH3gzYo8KFcFQD+b7edt/srB4qwjOtcspxNTXPs=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: QP46O9EyxpBEAP9lOfJp78l9N5iCyJWqgFC9RbV8BYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:65:f6:b2:8d:b5:89:e5:b5:34:b1:c1:a9:4f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Oct 28 16:00:12 2025 GMT
Not After : Oct 29 16:00:12 2025 GMT
Subject: CN=716f9936d90c1c2708eb97ec6c5e7253873bb006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:df:a2:1d:e5:11:a0:af:7b:d4:33:39:47:
e5:92:47:af:48:87:86:d8:ae:44:d8:4c:5b:56:c2:
e9:d8:65:97:16:3e:a7:02:b1:ee:c1:85:66:c3:5c:
7e:2a:a1:c1:5e:c1:25:6b:9e:b5:a2:e7:3a:02:25:
a5:0b:b5:bf:14:64:36:06:80:20:e6:d1:93:27:0e:
36:60:50:15:72:ee:3c:bb:33:56:fd:5a:06:94:76:
d9:6f:2e:7a:0c:b4:ad:89:47:b3:df:0b:53:06:2a:
b2:e8:44:4a:32:d6:80:51:49:41:1f:05:91:8b:28:
54:8e:a0:80:71:62:4d:5c:87:19:f8:25:12:eb:51:
25:75:26:8d:0c:6e:be:35:38:12:66:13:ad:b3:de:
44:3c:c4:38:e6:2d:06:c7:f8:22:03:bf:8e:51:72:
c0:55:8c:8d:31:a2:49:61:f2:28:0a:db:e7:ad:6e:
70:90:f9:ed:30:c0:44:49:3d:4a:c6:28:d4:85:83:
ac:49:61:ab:40:34:76:e2:95:e4:d7:f7:21:2e:8c:
f3:36:46:cc:8c:f3:8d:7c:5b:13:dd:5b:2b:3e:04:
dd:4a:02:b2:f8:10:52:d7:30:89:e1:56:7a:ae:f3:
6d:43:57:b4:ef:82:57:39:80:e5:ef:ce:77:1e:52:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6F:99:36:D9:0C:1C:27:08:EB:97:EC:6C:5E:72:53:87:3B:B0:06
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f3:fa:f0:3d:04:6e:71:4f:d2:87:d5:eb:cc:c3:9e:35:4d:
0d:6a:93:22:8c:31:8c:13:05:a7:be:49:8c:7a:94:87:94:35:
da:1a:e4:48:45:06:ab:9b:5d:e6:92:d6:2d:3d:76:6d:75:53:
77:6d:17:85:d7:5e:7b:63:5f:92:f8:f7:7f:74:52:91:49:20:
84:7d:9e:59:70:bb:c6:98:85:5b:98:9a:a2:5e:51:27:62:10:
f0:3e:d8:00:f9:eb:d9:26:88:b2:d6:bf:23:7e:52:6c:3c:ae:
57:61:20:cf:b6:10:bd:11:1e:d3:2d:af:4f:4f:7d:72:c0:c4:
cf:3d:0b:2b:01:6c:63:57:55:e1:64:22:b0:74:0e:67:24:94:
c9:4b:7b:85:de:7b:67:8b:bf:1a:a9:53:b9:a3:a1:e3:89:3d:
bd:97:c4:a5:a6:99:71:07:2c:01:ed:4c:b9:21:ac:9d:7b:fa:
28:e8:e8:e4:dd:87:c7:ae:d1:3c:84:df:8a:51:84:bb:66:13:
f9:19:fd:29:fd:15:6f:19:ff:40:b4:bd:8a:05:9d:f1:f1:48:
6b:56:ce:7b:05:d0:9e:a2:f8:43:7b:4e:29:d5:a7:f9:f0:51:
14:3c:9d:48:b2:36:fe:9e:11:23:f7:4a:f2:92:0f:81:f5:6a:
e7:d2:0b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:19:38 2025 by rpki-client