Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier: 4dIrX5bO59BKMQUxqN8IAyOx8aDSy97ODR/kGNiNPd0=
Subject key identifier: 59:C3:5B:CD:92:25:4C:41:73:61:88:FC:CC:72:27:55:D5:93:93:1C
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 019A70A5271D7CA32A5A7C2A2845B9AE4603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number: 0ECE
Signing time: Tue 11 Nov 2025 02:01:02 +0000
Manifest this update: Tue 11 Nov 2025 02:01:02 +0000
Manifest next update: Wed 12 Nov 2025 02:01:02 +0000
Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: OzRGlJHNouY46+BnkwxUJAKsIok1dV3eVUR+hCVaoyA=)
2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:27:1d:7c:a3:2a:5a:7c:2a:28:45:b9:ae:46:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Nov 11 02:01:02 2025 GMT
Not After : Nov 12 02:01:02 2025 GMT
Subject: CN=59c35bcd92254c41736188fccc722755d593931c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:21:6a:80:d4:2c:12:9a:3d:3f:1a:87:0a:
84:85:ae:dd:b2:91:63:eb:75:7b:00:14:10:88:9b:
be:5e:2f:b1:f3:9a:9e:8e:4f:ac:97:d0:68:8f:45:
8d:7f:7a:34:31:86:37:e6:50:77:51:b7:87:8c:6f:
0f:52:bd:b4:9f:ac:f1:d5:4c:ca:f9:f4:82:2f:c2:
35:40:2d:b3:87:51:1b:b0:eb:a4:88:8d:95:7a:af:
58:7f:34:7d:7f:73:f2:f2:7b:2d:ab:8a:89:7f:70:
f4:85:ca:af:9e:d5:6e:fe:77:78:35:30:f0:0b:2d:
0b:7e:b3:c1:07:33:bf:5a:19:60:8c:99:2a:15:5a:
c2:f3:82:90:2a:71:52:63:d0:a2:f9:e7:2a:6c:b0:
db:c7:91:8b:bf:bd:83:9f:08:28:4a:c2:15:5c:30:
17:e9:58:5f:30:2c:85:34:d0:e0:7c:59:5a:55:b1:
06:86:db:79:d4:cb:d9:87:60:85:01:9b:9b:90:d2:
d9:c5:ae:f6:6e:fa:9f:62:74:81:99:1b:fb:42:aa:
ad:1b:8c:f8:48:22:b9:08:2f:57:64:57:7a:9d:46:
3f:17:ef:d6:73:19:c9:4b:52:04:df:b3:5b:6d:84:
88:c7:f3:be:7e:47:98:8d:df:6a:6d:d6:fb:5a:2e:
06:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C3:5B:CD:92:25:4C:41:73:61:88:FC:CC:72:27:55:D5:93:93:1C
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fb:30:4d:e5:49:28:80:a3:f9:94:d0:8c:95:ff:df:91:e0:
24:da:a0:a3:cc:85:e3:8a:ea:46:bb:42:df:e7:e3:2a:38:ae:
b0:5a:c4:fc:b2:14:af:11:6c:02:9a:d5:d8:09:b0:f1:da:12:
70:7b:d1:c4:5e:b9:6b:36:23:6b:33:85:95:f9:a4:52:0e:91:
13:07:49:a3:29:ab:bb:18:53:0d:31:85:69:a8:8a:3e:6a:f3:
7f:7d:8f:ed:16:50:2b:cb:95:7b:b4:c9:95:0e:a1:b6:2f:05:
b7:c9:c9:05:79:ae:6b:cd:b1:84:8d:9f:49:25:6a:37:d4:e4:
6b:10:9c:02:94:49:90:2b:de:4c:3e:40:01:2b:dc:c6:1f:26:
1b:c6:fe:5f:9f:4f:b9:1d:8d:44:a5:62:e8:e2:c4:50:32:e6:
b8:7d:6d:a4:43:10:89:4d:ca:43:12:66:c9:0a:92:34:b3:5e:
cd:05:10:8c:30:dc:45:84:29:cd:19:1e:06:8b:39:16:5b:bf:
d3:88:dc:a5:58:83:8b:0e:3d:31:e8:f9:49:a6:93:95:f8:e3:
23:32:f8:c7:fc:c1:f3:68:7e:7b:51:bc:67:dd:fa:d7:73:cd:
c6:79:ed:7f:8b:3f:42:bc:1d:7a:f9:52:11:2d:70:71:63:72:
30:4e:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:12 2025 by rpki-client