Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: avkmjE9x5SwRAUHquhKt8WBp7vNw+ohLwmZc1qhJetM=
Subject key identifier: E9:1E:F7:BB:0D:F3:C6:82:B6:3F:75:C3:A0:11:76:0B:BA:2E:CA:0E
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 019A7149DD0CE981B96C435C37B35FAE9DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 05:00:57 +0000
Manifest this update: Tue 11 Nov 2025 05:00:57 +0000
Manifest next update: Wed 12 Nov 2025 05:00:57 +0000
Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: zjz0YMDK1GFv3QbRDDX0/7WKn9Z7nhiKdXkrxNI2A5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:dd:0c:e9:81:b9:6c:43:5c:37:b3:5f:ae:9d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Nov 11 05:00:57 2025 GMT
Not After : Nov 12 05:00:57 2025 GMT
Subject: CN=e91ef7bb0df3c682b63f75c3a011760bba2eca0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:2e:2b:b7:89:7d:39:fc:2f:0b:f3:17:61:
6e:09:08:9d:76:82:2a:39:cb:b3:72:b4:47:54:b9:
02:e0:f9:9f:98:21:2d:b0:87:25:da:29:39:80:92:
c3:17:b7:b7:f0:ea:33:23:ea:1f:e6:83:26:e0:e4:
fc:c5:0f:3d:6c:21:29:c7:a1:e1:28:92:56:9f:cb:
b1:80:47:ef:db:33:22:77:34:2e:be:3b:13:c3:d8:
d0:1e:fc:58:45:4d:b5:24:68:14:16:cb:a2:6f:75:
d2:57:54:8d:07:e4:f4:e7:43:07:8a:12:ae:d5:98:
e2:77:83:0f:85:ca:67:26:4f:9c:4e:f7:d4:21:7e:
88:1c:e3:e0:c9:24:e4:73:57:43:b0:bc:3b:11:be:
e8:6b:9a:04:f3:68:6f:84:7d:96:d5:93:f3:bf:88:
9d:c3:99:25:93:f9:62:45:9d:4e:ee:1c:61:44:42:
59:9a:49:b7:6f:fa:9f:13:4f:fb:9b:c7:b1:a5:3c:
78:cf:09:96:bb:2b:98:83:15:7c:ce:39:ed:af:5b:
19:51:bd:9b:3e:8e:18:18:35:d9:c8:f1:1a:25:5d:
1c:9e:09:91:12:22:28:77:99:2a:02:42:34:da:31:
bd:90:ec:5d:8b:ab:a1:d6:14:59:d1:0a:cf:ed:ce:
e2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1E:F7:BB:0D:F3:C6:82:B6:3F:75:C3:A0:11:76:0B:BA:2E:CA:0E
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ed:75:32:6d:4e:e9:cf:ec:5b:5a:14:24:4f:ee:41:8c:29:
55:1c:2d:3b:4b:3b:2f:0d:a1:be:49:5c:29:ac:f7:a7:4b:99:
17:95:6b:46:b2:7a:aa:56:6f:99:6c:cf:28:ec:38:e1:e7:a4:
6d:9a:78:17:ea:0a:bd:26:75:1c:bf:97:3d:9c:19:62:2b:b6:
50:ec:44:70:00:95:8c:e5:12:8d:7b:40:ed:32:d4:79:1f:70:
24:10:ba:1c:d7:24:99:63:a9:a5:14:11:c1:87:91:99:c1:28:
2a:8c:60:b6:dc:09:45:a7:7c:b2:d5:e1:27:a5:52:a9:18:23:
0c:33:87:03:fd:e7:25:67:03:86:49:01:c4:85:63:91:d9:36:
3f:3f:e0:63:a2:ca:ea:e9:df:c4:8d:88:da:b5:5b:1f:98:c2:
a6:f1:00:8b:26:07:b8:c2:7d:8a:43:ab:c5:52:91:f8:68:2d:
fa:22:39:fc:7e:ce:de:76:ba:c6:dc:1c:a7:db:cc:34:89:a5:
4a:b0:99:8d:ed:27:ac:82:49:a8:9e:37:08:35:06:69:94:bc:
f7:b8:b3:b9:e8:99:96:06:fe:4e:2c:b1:cd:7a:ba:28:95:0b:
15:88:a2:ae:ef:04:15:f6:37:23:81:39:8c:32:af:2f:3b:ba:
f4:44:3a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:20 2025 by rpki-client