Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: h6RpY0XNFjD0GanGnR2cBggMutjisFggXCoUXUQXB8s=
Subject key identifier: C2:F6:CC:8B:A0:F6:42:2B:A9:D5:7C:D7:12:05:99:EE:BB:93:23:95
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 019A70A518077B0AB5BD0417EB65A0C3243F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0B2D
Signing time: Tue 11 Nov 2025 02:00:58 +0000
Manifest this update: Tue 11 Nov 2025 02:00:58 +0000
Manifest next update: Wed 12 Nov 2025 02:00:58 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: fyuZA2u0aCFQ+1CMHuh2eFpfBXRt6Z237qtr71iADOk=)
2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:18:07:7b:0a:b5:bd:04:17:eb:65:a0:c3:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Nov 11 02:00:58 2025 GMT
Not After : Nov 12 02:00:58 2025 GMT
Subject: CN=c2f6cc8ba0f6422ba9d57cd7120599eebb932395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:19:6b:39:d6:2d:5a:88:3f:e1:38:fb:f1:
a4:d3:60:df:da:4b:b0:7d:04:a5:83:be:b1:dc:7a:
ed:de:0a:8b:52:77:bf:2a:0b:9a:3d:e9:47:43:7b:
31:61:0a:bd:02:95:c2:1f:a2:be:7a:e8:c0:81:cd:
be:a0:52:aa:fe:e5:61:5c:6a:83:03:71:06:f9:73:
75:40:fc:93:42:85:4f:e4:7e:f1:5a:43:57:10:a5:
c1:b9:61:de:d8:03:08:fa:2e:5b:78:b0:5d:25:34:
34:ae:6a:7b:2c:60:80:48:9a:ab:a1:a4:dc:fa:c8:
f3:dd:8e:65:4e:ed:e4:d4:54:99:82:68:0d:42:a4:
3d:77:ec:59:b2:04:8d:35:1a:41:b7:84:11:bb:53:
f9:32:5f:cd:00:6a:30:6e:a3:b5:ac:e6:9f:d4:10:
06:58:30:8c:c1:9b:91:a5:84:ce:db:3a:cf:88:c0:
bc:af:30:5d:d1:d6:76:d5:01:6d:57:6f:10:55:6d:
9d:4f:cc:ae:6d:0a:14:b9:23:7f:45:33:c7:08:9c:
47:ff:78:e0:d6:6b:09:c4:ef:19:f8:4b:b3:9a:fa:
db:36:ee:1e:f7:f0:ba:b4:c1:c4:74:27:70:9d:93:
f3:f5:3b:70:41:2e:4e:03:d0:71:85:40:ef:e3:e3:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F6:CC:8B:A0:F6:42:2B:A9:D5:7C:D7:12:05:99:EE:BB:93:23:95
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:13:7f:25:10:69:f3:e9:f1:73:f1:6a:45:8f:9d:72:cb:b1:
95:49:da:0b:28:20:45:97:40:72:ff:b8:46:33:04:b7:b4:dd:
e0:e9:18:0c:2f:ca:25:c5:af:e3:d7:9b:7d:40:18:a8:a1:14:
dc:cf:92:b1:4c:a8:9c:8d:31:9f:77:df:76:26:57:43:9c:b3:
cb:ec:8e:81:16:30:0b:ce:c2:14:34:80:99:2b:93:41:73:24:
3c:ed:62:5a:83:94:d3:b6:a5:6d:45:f2:0c:3e:23:cf:3c:4e:
9d:7d:23:cc:91:14:96:dc:c4:52:50:c8:a1:fa:b3:58:31:7c:
0a:5e:d6:af:03:da:b6:bf:ba:ae:f1:86:81:9f:d3:18:99:74:
65:0f:b7:fa:40:5d:e6:31:86:c7:7e:de:4e:f5:17:27:2a:06:
e1:ea:0a:c2:e8:83:96:26:e6:39:1c:97:fa:31:7e:c9:a2:29:
ca:de:f8:36:f3:81:37:b7:63:dd:b2:c1:1e:39:dd:e7:be:75:
a0:27:a7:6a:0e:b6:cd:25:87:e1:97:93:d7:fa:9a:ce:2e:86:
ca:cc:0a:c8:44:f6:b4:40:ea:33:d6:95:0f:85:74:b5:40:c2:
6b:ac:c9:40:e7:9b:e4:f5:29:62:ee:91:a1:77:75:51:86:ba:
e3:cb:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:07 2025 by rpki-client