Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json)
Hash identifier: FB5eA+mzgnBJRt4evVc7g+5CWC9zoQl4whn5BsmcjTE=
Subject key identifier: 25:1E:B3:51:79:60:B2:C4:93:A2:D2:E3:08:8B:FA:B8:DC:00:3B:D1
Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Certificate serial: 019A06A4530D4C4B03B61D8B59837DF78A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
Manifest number: 13CF
Signing time: Tue 21 Oct 2025 12:00:23 +0000
Manifest this update: Tue 21 Oct 2025 12:00:23 +0000
Manifest next update: Wed 22 Oct 2025 12:00:23 +0000
Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=)
2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: tGADclSjqfBP9bg0VXhNfQjtJoTqYc5pD8yht59ImVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:53:0d:4c:4b:03:b6:1d:8b:59:83:7d:f7:8a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2
Validity
Not Before: Oct 21 12:00:23 2025 GMT
Not After : Oct 22 12:00:23 2025 GMT
Subject: CN=251eb3517960b2c493a2d2e3088bfab8dc003bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7a:29:07:64:8a:cf:5e:ee:3e:03:bd:6c:c1:
f5:5a:2d:33:e2:9f:3c:e0:c1:77:c9:1e:03:73:66:
65:46:4f:6e:6a:fe:21:a2:e2:dc:cd:39:be:39:96:
91:9c:72:95:e5:2b:89:c2:e8:93:c3:af:2e:dd:23:
7f:44:2f:6b:f0:c4:89:0f:c3:88:5d:55:64:a7:b5:
03:74:c2:e9:bb:ac:8e:7c:68:0e:bc:d3:34:31:a5:
c6:c3:4c:1e:96:ee:5f:cd:21:22:56:19:70:49:05:
01:dd:fb:50:12:4d:12:11:e3:19:09:2f:4e:ef:13:
03:93:ad:12:b3:e3:88:c7:f6:90:04:3b:81:0f:bf:
2c:bc:09:01:0a:f7:f4:b7:6b:89:07:3d:6a:33:73:
ce:2b:48:05:74:e9:35:93:3f:94:b3:d3:94:a9:9e:
0e:66:86:5c:41:6b:92:c9:a5:6b:35:ae:a9:1c:c7:
d6:4d:9b:81:22:01:74:97:45:db:06:38:ba:62:93:
76:ab:7f:dd:17:4d:76:dd:49:7d:f5:88:e5:bc:69:
71:42:b9:52:33:cb:4d:29:b2:29:09:85:56:25:c1:
90:60:f9:98:01:ea:38:92:c0:27:52:12:89:31:07:
c6:62:2d:74:46:22:48:2f:a8:b0:06:5f:08:c0:7f:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:B3:51:79:60:B2:C4:93:A2:D2:E3:08:8B:FA:B8:DC:00:3B:D1
X509v3 Authority Key Identifier:
keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7a:4e:06:f1:92:51:6f:1d:97:b0:c7:d9:e4:3d:34:6e:e6:
5a:31:0c:28:55:8a:bb:94:b0:2f:cd:07:3a:a7:8f:bb:91:0a:
d4:e6:a2:23:74:7e:10:43:13:97:ce:99:07:57:52:9b:e1:b8:
58:82:7e:52:7e:6d:e9:69:8e:80:a2:39:9f:8b:db:5f:f4:59:
0f:63:58:3f:68:f3:90:18:f6:9b:b9:48:bc:91:df:f7:fa:95:
b9:3e:75:7c:b9:77:8f:bb:55:0d:6e:46:95:5c:5f:29:98:89:
8d:08:59:d5:9d:82:17:08:c2:aa:a4:6d:3c:86:cc:8b:a1:ad:
aa:5e:e5:9d:9f:ff:be:87:bb:ad:25:54:eb:f5:fd:39:73:13:
6d:45:d9:f1:2d:d0:b1:be:c5:d2:bd:e7:fb:ed:57:8f:fd:d0:
f9:70:66:0f:f1:cf:3a:ae:69:10:5e:d2:94:fc:a2:e7:97:a2:
17:a0:54:18:33:ce:9f:4f:35:e2:8b:66:f0:15:71:f6:2f:a4:
7a:d7:75:05:d9:ce:24:cb:a2:50:f5:79:fa:50:75:8a:08:e9:
fb:b8:22:61:f9:95:b4:e7:f7:d5:a0:16:40:0b:4d:3e:73:11:
e7:62:48:fc:ad:d9:af:d2:da:3a:6d:fe:98:3a:a2:d1:a0:57:
48:80:14:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:25:31 2025 by rpki-client