Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: 7GzH+P2r5I/qGwaW/yVaAM10ogS7zyACTFfUB899D98=
Subject key identifier: 83:A3:C1:90:5C:23:6F:5E:B1:A7:FB:AD:C1:E2:B7:CB:A5:51:2E:65
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 019A7225DDBB88CD4296013B0D4B059BB4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 1782
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: axmcs0YwsBBvp13WSQvabhXKgO8.roa (hash: APz6BdxBlveXPEBlyV0DL9bK8BYpnxs2Kict8QvSCMo=)
2: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: YgqIJAMQbBCgoyPukst2bUzO6yawdw4kz2jXTTtcgLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:dd:bb:88:cd:42:96:01:3b:0d:4b:05:9b:b4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=83a3c1905c236f5eb1a7fbadc1e2b7cba5512e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:37:3f:3b:7b:a7:43:e9:59:af:03:7a:5e:
d9:1c:3f:f2:23:32:7c:f0:f1:36:42:3f:59:8a:3e:
fc:2e:de:61:33:c3:f2:ee:1b:ac:49:34:70:e5:83:
ed:41:fe:9b:ac:be:f1:f2:f5:8c:3c:ca:a7:76:75:
a4:10:5c:b1:25:d8:cb:57:b1:2e:19:b9:5e:aa:c1:
6d:3b:89:fe:07:3b:19:94:bc:3f:93:e9:ce:bd:03:
57:47:27:1f:a6:dc:22:a6:78:c7:62:64:72:35:39:
b4:dd:4f:a8:93:09:73:02:35:9e:ae:8e:b0:c0:52:
aa:cf:e9:0e:7b:9a:ae:df:44:1d:46:aa:34:8a:a6:
b4:6a:e7:2f:58:00:e5:33:ab:c7:3a:2c:6f:24:75:
77:67:b2:6a:c6:31:cb:70:f1:04:50:d6:b4:4b:89:
31:12:30:e7:02:31:36:90:af:e5:d0:d6:f6:77:4b:
d8:f9:bd:17:8c:92:ba:04:bf:c5:1e:e3:76:d5:cf:
d4:02:64:b4:50:a7:5d:fa:7f:ed:b5:c2:8d:e5:aa:
53:0f:39:2d:8f:02:a8:40:50:49:49:35:b6:76:89:
20:fa:3d:9d:2e:14:99:3e:a4:96:f7:6a:9e:c5:37:
e3:84:e7:8e:ae:f7:5d:09:d1:35:1a:21:2c:cd:10:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A3:C1:90:5C:23:6F:5E:B1:A7:FB:AD:C1:E2:B7:CB:A5:51:2E:65
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2a:2a:0d:be:64:7b:e8:1b:cc:f7:cd:de:19:ff:86:2e:1b:
dd:49:c0:35:44:93:be:fb:d7:82:6b:b4:83:bf:46:a3:15:07:
d4:01:14:02:50:9f:70:8a:73:b2:85:75:07:a5:86:2a:ae:7c:
04:b5:f8:bc:96:0b:1d:f4:0b:5f:fc:47:4a:03:c3:12:49:64:
da:79:ad:8c:4f:5d:70:16:62:a1:13:0d:72:4c:82:94:2d:65:
37:81:82:67:fd:b6:45:db:a6:e3:54:69:c6:cf:f1:33:d8:d9:
5c:b6:6b:aa:05:01:2e:23:37:3c:06:08:bb:8c:af:9a:6e:90:
11:61:03:2a:44:b2:d9:a4:3c:37:c6:a8:7e:86:57:c8:c3:35:
ed:03:99:06:9b:f4:d5:93:5c:61:ed:9b:a3:e8:0e:71:23:d2:
51:3a:e3:a3:9b:05:c6:1a:b3:ff:fd:dc:bc:47:ef:28:2c:b7:
e0:b1:65:0a:55:94:e9:1e:28:8b:30:98:6d:dc:46:c2:1d:1f:
91:a0:e8:f4:b6:86:e7:15:26:c1:66:f3:9b:39:9f:47:cd:b7:
d6:fb:4b:ed:8d:84:85:5a:17:5f:2e:c6:b0:26:5d:99:65:36:
5e:40:2e:e0:e5:2f:4b:5d:c7:6b:c4:ee:6b:a6:b6:b3:b4:2c:
69:f7:73:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:22 2025 by rpki-client