Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: YKHHKrm5cwn1DWIF1rrWk4av1xkJp05r7iRvMq42DQY=
Subject key identifier: B7:C1:A0:00:1E:CD:08:EA:42:F0:49:E2:43:A9:BF:9C:49:8C:34:6F
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019A73013FC1A2EB56AA69A567B432DE2BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 13:00:52 +0000
Manifest this update: Tue 11 Nov 2025 13:00:52 +0000
Manifest next update: Wed 12 Nov 2025 13:00:52 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: ENsNxpNMbVf5cRPCjah6RUxOm4pdvfPqtj8dJAd/thg=)
2: sDPpx-mL_-TYo49AUalN83Hb7rw.roa (hash: TLER53MCgePm+J2o6lGDLT56kpvbjUNH4PxF0iwFFXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:3f:c1:a2:eb:56:aa:69:a5:67:b4:32:de:2b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Nov 11 13:00:52 2025 GMT
Not After : Nov 12 13:00:52 2025 GMT
Subject: CN=b7c1a0001ecd08ea42f049e243a9bf9c498c346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1f:8a:57:60:1d:75:0c:5b:c6:42:9b:b3:98:
2b:8f:c7:8d:36:11:4f:ab:70:1f:fc:db:05:28:70:
e7:50:51:aa:6f:06:41:2a:90:31:9f:00:7e:c7:1f:
da:da:26:18:6f:f4:04:40:b3:08:21:ea:99:1c:88:
2e:04:8a:da:40:67:dd:f0:27:b6:42:06:d8:ac:aa:
04:93:4e:76:71:77:40:a6:92:df:ce:07:8f:b0:ff:
ad:69:c3:e0:81:61:6e:39:69:cc:4e:5f:18:ad:98:
d6:64:ea:77:52:59:9f:a2:d7:0e:ff:d9:02:31:f0:
9a:60:98:3f:40:38:2c:29:74:e8:70:b3:1b:e0:a4:
93:6a:eb:14:6a:0c:0e:5c:37:69:67:be:24:b1:57:
89:16:ef:02:02:6a:8b:9e:d3:7f:40:05:aa:2f:aa:
fe:7c:fd:6b:f6:c0:32:db:5d:84:a0:b4:7e:b4:e6:
b8:9d:e7:d0:b5:9e:a6:77:d4:d4:e6:59:6c:09:e9:
28:66:cf:4d:d1:1d:2e:27:dc:c5:b9:34:95:1f:81:
d9:8d:41:b3:af:ec:3b:a8:b4:78:c4:ca:a3:e0:45:
7f:91:cb:0e:90:fc:de:aa:d8:36:ef:e1:17:34:04:
43:d8:c1:06:2e:84:e9:37:cb:d1:67:77:20:58:b8:
ce:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C1:A0:00:1E:CD:08:EA:42:F0:49:E2:43:A9:BF:9C:49:8C:34:6F
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:7e:89:c9:b4:0c:d3:aa:03:e1:a0:f9:73:75:c1:f2:74:
01:05:7e:d1:09:30:bb:a6:b0:b4:0f:bd:e2:21:fb:d7:f1:c8:
72:06:6f:fc:07:51:7e:a3:31:88:e9:69:69:7b:5f:76:58:45:
3f:a9:bd:d9:04:95:1a:64:d8:81:04:f4:23:e2:ed:d9:9d:b3:
c8:db:24:87:f4:ab:48:fa:8e:1f:7b:d8:14:77:20:a6:ba:78:
98:7a:7a:ac:e3:ee:67:b5:85:7c:41:0c:0e:c8:64:fd:34:15:
1e:64:1f:a4:28:73:2c:22:2b:bf:85:fe:83:ad:07:fd:af:2b:
a3:2f:d6:0b:36:f2:72:fe:3c:9d:1a:89:65:4f:38:22:13:aa:
27:d5:32:6d:0b:0a:16:cc:8e:e3:a5:7b:56:c5:f6:7a:4f:6c:
4d:aa:63:bb:1e:7e:37:1f:5e:59:7d:7d:46:29:85:45:a3:9a:
46:18:9c:09:c4:22:d3:1d:41:b8:16:87:b8:44:dd:c2:34:30:
22:45:dd:c6:2a:61:f6:17:fb:05:c3:41:41:9d:01:aa:41:b9:
dd:c9:56:ad:35:44:ab:81:a9:62:4c:ee:d5:9a:83:2c:d9:a4:
b8:e2:22:50:4e:18:fa:34:59:87:73:fc:15:66:bd:18:fd:32:
ba:62:3e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:48 2025 by rpki-client