Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
File: qC-5s0GMRYzbxs_WhFFL4krQw8k.mft (raw, json)
Hash identifier: vQctlBYV2r9vnYEpi/0ObWBsPwEJiLbkzoNPTIqBmz8=
Subject key identifier: A0:2C:52:A3:2E:01:70:E7:D5:81:52:F1:F4:FE:81:EF:8F:FA:74:63
Authority key identifier: A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
Certificate issuer: /CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Certificate serial: 019A72CA64A675FAB2F8A16AB8AD520D71A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
Manifest number: 1654
Signing time: Tue 11 Nov 2025 12:00:57 +0000
Manifest this update: Tue 11 Nov 2025 12:00:57 +0000
Manifest next update: Wed 12 Nov 2025 12:00:57 +0000
Files and hashes: 1: 4KqmJoEVUd9bhY-ntnaMTkNmA44.roa (hash: LLo6nOWCS1mxlNIUMzouZjN4HwCv7i5lI/hb4nBjcBQ=)
2: Jw4aASdhNdVI-FplW-882cj74Fw.roa (hash: ewm0/xps8d7RUrK5yQyWODWIjZ5yxmU6C2dpLRlFoTs=)
3: qC-5s0GMRYzbxs_WhFFL4krQw8k.crl (hash: 1Yq9hRHgRJGT5ZfyL7jYVU2UuKl7CeC6V2F+Vt/1FYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:64:a6:75:fa:b2:f8:a1:6a:b8:ad:52:0d:71:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82fb9b3418c458cdbc6cfd684514be24ad0c3c9
Validity
Not Before: Nov 11 12:00:57 2025 GMT
Not After : Nov 12 12:00:57 2025 GMT
Subject: CN=a02c52a32e0170e7d58152f1f4fe81ef8ffa7463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:27:d1:0a:b1:b3:bd:79:12:d6:37:6b:38:
e6:c3:c3:b3:2b:1c:fc:77:7f:f2:fb:21:ad:bb:60:
04:87:d4:b2:9b:41:8e:ef:91:71:49:f4:fd:04:76:
85:08:d6:b3:51:f1:0d:e2:c9:31:24:1c:f5:2a:66:
2f:2b:a9:dc:a2:9d:05:10:5e:d1:b3:9b:55:00:56:
bf:79:41:cb:19:7f:25:73:01:7d:0f:57:c2:91:5c:
f9:f8:7b:6d:08:d9:3e:e2:56:c9:a4:82:6e:7a:dc:
ec:77:57:7d:47:dc:8a:1a:df:51:40:ef:8e:a5:72:
76:3c:af:45:99:16:a5:99:bb:81:aa:92:72:c8:84:
78:3d:c8:a0:2c:6f:96:28:81:b6:ce:b5:c7:9e:aa:
a2:97:70:38:f9:7c:c1:0c:59:8a:04:7f:c3:96:7d:
50:52:ba:ee:03:b0:fc:2e:09:11:0d:78:7e:b6:5e:
84:76:2c:b0:ae:d4:b0:0f:07:47:d2:60:1e:d4:2a:
8c:89:06:d6:46:c3:09:83:aa:44:12:8a:07:4b:ed:
cf:46:a7:4c:6f:24:43:af:9f:2e:c7:49:7b:f2:ef:
b1:9b:14:62:05:b3:19:79:c6:96:ed:67:cc:81:74:
a1:65:a3:23:d2:34:e1:b9:a8:8d:7f:af:0a:91:b8:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2C:52:A3:2E:01:70:E7:D5:81:52:F1:F4:FE:81:EF:8F:FA:74:63
X509v3 Authority Key Identifier:
keyid:A8:2F:B9:B3:41:8C:45:8C:DB:C6:CF:D6:84:51:4B:E2:4A:D0:C3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qC-5s0GMRYzbxs_WhFFL4krQw8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/qC-5s0GMRYzbxs_WhFFL4krQw8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:85:58:53:32:50:8f:88:6e:2e:b2:cf:d4:c1:7b:58:2f:3e:
84:a6:6c:12:4e:b0:02:c8:92:b5:ef:c1:30:ad:ab:f4:97:c7:
dc:a4:75:3e:55:6d:67:b5:0d:ac:5e:7e:92:ac:b7:30:1c:ac:
7d:14:7e:5c:f8:03:7d:07:63:44:b4:2b:22:50:d1:03:37:98:
19:e0:72:4d:31:14:dd:2c:ff:87:e4:bd:95:3a:e6:d5:b9:dd:
09:7a:4f:5e:2c:6f:e1:8b:5c:41:47:34:46:96:cf:57:b7:98:
2e:30:59:e3:bd:34:73:44:f2:c6:ac:80:3c:ec:67:1b:36:4d:
ed:55:26:9c:9c:61:90:1f:01:df:bf:69:6d:32:bc:bb:80:64:
47:66:7e:a8:bc:35:38:95:c8:f7:d1:81:2a:35:a1:2c:bb:7a:
ac:06:a0:c5:a7:82:74:d7:f5:a2:68:a6:45:3f:04:28:9b:de:
31:03:4f:f7:16:96:09:e5:de:07:a9:e4:77:42:e1:fb:77:08:
24:1a:a4:b4:2e:84:9d:0a:f5:64:5e:03:67:75:80:71:4c:28:
12:29:5b:66:86:da:7d:5d:e1:de:bc:66:11:94:72:7b:ad:d2:
ef:4d:b3:14:00:70:ae:c7:5d:95:d1:fd:bd:4e:f8:1e:85:4c:
06:89:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:44 2025 by rpki-client