Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
File: dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json)
Hash identifier: r9s5UeN2fsn2VbadCiaHx6yjZ4RK/Tqi+lt4r7Xy1fE=
Subject key identifier: FB:79:B8:B9:E8:83:6A:6C:4C:CF:33:35:E2:DD:3B:26:CB:A8:8F:B8
Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
Certificate issuer: /CN=750ffb6552d58ae774ba424d5527b350624faafc
Certificate serial: 019A71499030D68C195F30E99DCA922D018E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:37 +0000
Manifest this update: Tue 11 Nov 2025 05:00:37 +0000
Manifest next update: Wed 12 Nov 2025 05:00:37 +0000
Files and hashes: 1: Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa (hash: YSca3SNn3dbydNzeg1qaUX/HJae1ElZZx6hrF1jVM80=)
2: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: RCubwZgv9JbswfT2i96rH1JzfNDrc+bUGK/CWW9rJMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:90:30:d6:8c:19:5f:30:e9:9d:ca:92:2d:01:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc
Validity
Not Before: Nov 11 05:00:37 2025 GMT
Not After : Nov 12 05:00:37 2025 GMT
Subject: CN=fb79b8b9e8836a6c4ccf3335e2dd3b26cba88fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:da:c7:b4:88:11:88:09:b5:d2:b0:8c:f6:
3a:1b:89:b3:51:5c:b8:b4:56:15:6b:7f:19:71:4b:
5b:0b:0d:a5:e4:cd:a5:06:18:d7:72:aa:bb:2e:ed:
9b:bd:7a:5e:52:58:ec:92:be:5f:00:ce:19:4a:fe:
ba:22:5c:be:3d:e9:84:dc:94:62:23:ef:2c:92:97:
68:01:91:83:e0:13:aa:2e:08:ec:dd:de:10:b6:3a:
ed:f4:c6:72:15:50:a3:8c:96:73:21:64:41:41:2f:
72:a5:c1:a1:54:e4:27:c0:a6:37:08:b0:fa:37:10:
9a:ac:87:e2:2f:14:f7:03:59:39:a3:bc:0a:04:e8:
6d:5e:f8:bb:00:99:dd:23:07:b2:cd:39:0b:3d:48:
c3:d0:df:7f:40:f9:72:e0:ff:27:c5:2f:1d:dc:a8:
1b:a8:3f:72:b9:5a:6d:19:8c:30:43:39:da:45:bd:
b9:e5:91:0d:4a:29:1b:f6:02:51:5e:52:8c:60:27:
9d:6f:03:16:36:4a:63:e9:d8:02:92:c1:21:b7:34:
87:e7:10:1e:c2:a5:e1:d1:af:8a:13:5d:d3:d8:ba:
b8:d2:84:77:88:86:b2:f5:90:0f:d8:40:3b:ba:be:
5a:4b:62:cf:58:6a:a5:54:f8:bb:43:28:24:82:fd:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:B8:B9:E8:83:6A:6C:4C:CF:33:35:E2:DD:3B:26:CB:A8:8F:B8
X509v3 Authority Key Identifier:
keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:52:43:df:9e:85:35:3c:26:01:af:6b:e6:a5:45:f5:c5:10:
b1:16:6f:a1:57:bf:81:d3:77:69:c1:da:dc:0b:4a:06:0b:29:
a9:56:2b:7f:25:6f:e3:5d:15:b6:db:c8:f4:01:b1:89:43:eb:
66:af:d6:cf:8e:4b:91:3f:0b:ab:b1:69:11:ce:76:62:1f:31:
e7:01:bf:08:58:41:e1:db:c7:bf:11:c3:c6:38:da:34:e8:e0:
29:a5:07:af:f3:e8:c2:98:30:55:39:8d:80:f2:0e:18:28:b0:
b3:ec:5a:9f:65:67:17:16:1d:b5:0e:1a:7d:b5:21:b9:8d:a9:
e4:d3:35:fc:43:ee:71:da:f8:b0:02:26:f4:32:c4:1c:61:19:
08:65:c5:e3:d1:e7:11:80:26:da:0c:ba:3a:8f:fc:51:bb:82:
23:a1:96:f4:e0:fd:36:f6:2b:7e:6c:a5:78:b1:28:a5:30:7c:
ee:a1:52:a7:24:5e:ce:93:6c:1e:f5:a0:f8:1c:73:1b:eb:33:
a7:fa:22:ef:e9:cf:0b:76:e7:24:3d:de:16:27:fb:7e:43:0e:
86:56:1d:24:4a:1b:c8:e5:e1:8c:5c:1e:31:64:48:5c:b6:a5:
aa:32:67:26:2a:fe:9b:03:62:0a:a0:bf:3e:b4:6f:52:33:4d:
f1:0f:37:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:27 2025 by rpki-client