Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: rO61NeLp/iqaP72tPy+sVOou0STsFp2n6t1YAeTJGyQ=
Subject key identifier: E3:25:3B:C1:89:E8:D3:B6:7A:70:F1:2F:1B:FC:E7:FD:39:D0:C5:D6
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 019A72263321234251AF52718BFFF17A5701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:37 +0000
Manifest this update: Tue 11 Nov 2025 09:01:37 +0000
Manifest next update: Wed 12 Nov 2025 09:01:37 +0000
Files and hashes: 1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: f2I6QlRECVcqpmqJN41JzvrrYEXq6gOtfUaAib7MUrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:33:21:23:42:51:af:52:71:8b:ff:f1:7a:57:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Nov 11 09:01:37 2025 GMT
Not After : Nov 12 09:01:37 2025 GMT
Subject: CN=e3253bc189e8d3b67a70f12f1bfce7fd39d0c5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:85:fc:f2:bd:e3:6b:a4:f8:09:32:fe:5f:
01:78:e9:4b:49:a4:02:2a:81:c9:84:d1:e2:ad:70:
6b:a3:87:f2:98:e5:90:54:89:b1:a3:7b:8d:fa:f9:
cb:16:84:51:9d:b1:3f:5a:57:cf:48:4b:fb:3a:c7:
e7:2e:40:e6:9a:8d:8f:d3:ea:f1:42:9d:f6:f6:e8:
32:b5:b5:bd:1b:38:ac:08:34:73:0d:d9:ab:cc:0e:
35:94:6c:14:8d:e1:6a:5e:f1:f2:f0:25:a8:a0:94:
80:5e:2c:f7:38:73:b8:d1:de:7e:97:05:be:ed:4a:
c4:96:af:58:a5:c7:ff:64:b5:23:be:40:d4:d7:2f:
e9:8a:72:a0:31:17:3b:24:1b:d6:be:19:d0:70:33:
d1:40:e6:f7:bd:01:a4:da:22:f2:17:fb:6c:24:2b:
ac:ae:38:1a:b0:ef:b5:7a:8c:8b:a3:9e:3c:06:63:
fe:3d:5c:fd:88:d5:03:a6:6c:09:3b:5d:68:fb:86:
71:a1:f0:dd:67:95:4f:df:aa:e9:43:7a:b0:63:8f:
98:73:16:2e:df:28:1e:07:f7:1d:f2:85:1c:a6:ec:
a0:21:df:e0:f8:f2:8d:b8:39:98:09:dd:ee:92:e7:
f5:57:28:a2:ed:9b:06:09:a7:08:de:4a:93:48:26:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:25:3B:C1:89:E8:D3:B6:7A:70:F1:2F:1B:FC:E7:FD:39:D0:C5:D6
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:73:03:45:c9:c3:06:f8:e9:70:a8:8c:0b:a7:4a:62:35:77:
f9:d0:93:ff:a6:f9:49:f4:ab:71:df:fa:c9:23:8f:f2:b1:54:
e4:17:df:b6:98:9c:5e:47:4e:a4:fc:f0:97:21:1a:9d:76:39:
d4:71:3e:46:b4:6b:62:8b:72:dd:70:4a:57:01:6f:7e:3f:a1:
c6:7d:f1:13:24:f4:a4:7f:0b:df:53:a9:64:77:13:10:6a:b4:
3e:db:f4:03:4b:61:37:b3:08:f1:ec:97:71:bd:96:54:5f:8e:
4d:4a:43:2d:80:23:0f:b5:0c:49:a3:d4:07:80:0d:e9:91:07:
95:2e:d4:59:b9:16:cd:9f:15:c7:16:7f:df:e2:85:25:84:53:
dd:5f:9f:de:39:b4:d5:c2:56:0a:b8:95:a2:bf:8a:b7:80:6f:
a2:8d:2d:f1:7f:90:d8:d0:7a:5f:ee:1e:41:a7:ec:ca:86:af:
4d:98:0f:26:d1:2e:e6:f7:6c:44:d9:14:80:c9:4e:ac:b5:85:
58:12:53:df:f9:37:c2:b7:7c:e1:96:a6:f4:9b:cc:71:94:a7:
cb:4d:6e:33:d7:0f:95:50:82:2a:0a:c4:82:f4:4a:2c:2e:04:
d9:26:71:ad:e8:c5:d8:eb:aa:6f:02:12:4e:02:40:ba:a8:ff:
21:33:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:15 2025 by rpki-client