Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier: rwTGsmqFqvgSaOWXc5nNhQ099tfOlNSUUfdwq0IAOW0=
Subject key identifier: 19:0A:1F:15:52:A9:E4:D5:D4:C5:B2:7C:16:C0:60:DB:CF:36:37:3D
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 019A7225A0481AE12DF239CB48AAFCA54B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number: 0F87
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: evpxyC_xQr6-9_i5vhF3SSD60QY.roa (hash: F+Lkz2iLknBGekmgWZevszL+qAh6hnFUDMady9RqMNg=)
2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: fqirLdPnj4jPSU2bS3wAwlLD5Uzls9tYAsokQcPG8sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a0:48:1a:e1:2d:f2:39:cb:48:aa:fc:a5:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=190a1f1552a9e4d5d4c5b27c16c060dbcf36373d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:ad:b6:fb:29:6c:af:62:0a:7d:ba:d9:1c:
66:44:22:a6:2b:a1:41:89:bf:ce:cf:26:5f:9e:a2:
f3:b5:f9:0a:42:10:c5:5e:4a:94:f2:cb:bb:7a:3b:
0f:67:86:79:6b:79:56:e0:98:d1:e7:90:b2:a0:24:
f9:8e:d4:ed:81:a4:2d:ac:05:1f:8b:c2:23:23:7b:
30:18:1e:09:d1:33:3c:ec:8b:94:dd:da:dc:3c:31:
80:de:db:9c:25:6b:41:49:5c:14:04:7a:3b:1c:7d:
3e:d8:d2:9f:d1:29:27:b8:89:f2:0b:02:bf:39:73:
0a:fb:d2:b0:c6:c2:be:1e:70:f2:f0:e3:4f:16:7e:
1d:ae:ee:c5:70:3e:3f:d5:f9:17:5a:f5:01:db:27:
43:41:27:f2:8e:2c:4b:cb:32:f6:ed:69:59:40:93:
5c:b5:10:26:ea:31:e9:83:ae:02:78:2c:eb:ce:67:
03:7e:70:e5:4e:22:8c:0f:e0:ab:53:c7:63:96:cf:
1d:02:42:7e:1e:5d:74:71:28:f1:50:6b:34:a4:5e:
03:77:19:94:7b:01:3d:5b:e7:dd:70:54:9f:f9:87:
9b:84:c5:67:77:b2:ba:80:f3:4a:da:92:71:5c:1f:
4e:7e:5d:ba:49:7a:82:eb:73:f1:a3:a6:2a:26:51:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0A:1F:15:52:A9:E4:D5:D4:C5:B2:7C:16:C0:60:DB:CF:36:37:3D
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:89:a2:c1:02:37:50:df:a3:b2:e8:f2:fd:66:62:12:1f:e5:
45:06:d1:dc:86:b8:67:9c:8e:0a:f6:01:db:e0:0e:89:83:fc:
f4:fa:47:a0:a9:41:04:ca:f3:ee:83:b8:1f:ae:d9:d1:f9:49:
af:b8:43:53:0f:43:12:53:cf:d3:fc:ba:b3:fe:25:84:64:2b:
e2:02:58:6c:6a:6b:85:b5:79:15:2b:b6:f4:a8:64:e4:e9:26:
88:b5:f2:3b:19:15:f5:9a:ce:0c:ec:e2:54:f1:a4:34:21:09:
1f:a4:27:aa:bc:1d:09:c1:65:5a:0a:40:e7:0e:0d:5c:9c:0a:
1c:8c:a2:61:13:e4:6d:2c:db:53:99:4a:39:0a:77:a1:82:f1:
c1:61:ec:79:0d:29:04:63:8e:59:23:f7:c1:2e:85:7a:83:48:
a7:78:ad:66:e3:8e:4f:2b:bf:db:88:fd:b1:a0:d2:e5:2d:78:
c5:73:93:1c:cc:20:1a:b6:38:d5:47:99:da:70:84:7c:e4:d2:
5c:3f:84:68:0f:32:85:0a:0d:48:aa:d6:48:d4:ef:ee:a7:64:
e5:1e:b0:cd:cb:6e:51:2e:a3:a2:e7:5e:7b:e4:0f:2c:aa:37:
c1:25:9e:6a:6b:2f:68:cd:25:94:c1:0f:45:84:5c:02:d4:82:
82:31:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:39 2025 by rpki-client