Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier: HJVbvJyTGHkL+vO9LrwYOnsgzPcGmJHsm7pzS6/HEfw=
Subject key identifier: 1E:F4:1A:05:89:FA:96:61:F8:7A:24:62:E9:F1:BE:DE:5C:43:30:6E
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 019A3EA5C082159C28A384FA52C4C2590EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number: 0600
Signing time: Sat 01 Nov 2025 09:00:41 +0000
Manifest this update: Sat 01 Nov 2025 09:00:41 +0000
Manifest next update: Sun 02 Nov 2025 09:00:41 +0000
Files and hashes: 1: cfA5700Oyp_l8HYxK2rUF9sJFNw.roa (hash: nBkOSSWEqJ7QWBbrB7ANbAxBsvt2sTitoBCV4yvlduo=)
2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: gsiF/OEJxCb4DBKvoN6VRnubG6l2yj2gioKwnfjfwg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:a5:c0:82:15:9c:28:a3:84:fa:52:c4:c2:59:0e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Nov 1 09:00:41 2025 GMT
Not After : Nov 2 09:00:41 2025 GMT
Subject: CN=1ef41a0589fa9661f87a2462e9f1bede5c43306e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:be:f6:75:57:00:ba:28:1a:3b:fa:96:69:
9a:92:1a:ee:89:b0:54:7f:d4:67:85:34:05:82:fc:
d7:0e:90:1e:62:18:3d:f8:42:fd:29:ea:cd:05:63:
16:f3:02:cd:9d:af:a7:f2:b1:ed:60:7c:22:87:45:
15:49:88:14:00:38:cc:a4:ff:fd:ed:56:d2:82:15:
9e:a3:d2:34:ab:df:2b:b5:ab:be:c3:e4:81:32:e1:
42:9a:04:7e:f6:06:29:dc:14:80:62:d2:eb:e8:46:
89:1f:29:8b:1c:0f:86:c2:29:14:15:c2:d7:9d:60:
d1:a5:92:08:fc:20:2d:10:f1:58:7b:21:a4:a4:11:
af:1e:8b:d3:b5:5b:f3:78:9b:4f:7a:12:94:32:57:
8f:32:f8:fd:ff:e8:b3:78:e7:09:66:0d:2a:43:ec:
ca:75:c4:b3:60:db:54:d3:a8:ba:7d:16:e9:13:e5:
e1:85:93:4d:ee:e2:2a:2a:25:f3:c4:ac:8c:f4:05:
42:fe:84:bf:87:30:c5:f2:ae:97:40:77:81:75:ca:
9d:9e:78:75:34:f6:08:33:7c:62:e0:13:10:71:21:
88:60:b2:b9:a1:b8:a8:50:cb:4f:30:b8:d0:a3:68:
1d:17:4c:41:ed:f9:c0:3c:e6:f8:4b:b9:b8:c7:ae:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F4:1A:05:89:FA:96:61:F8:7A:24:62:E9:F1:BE:DE:5C:43:30:6E
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a9:53:d2:61:7c:5d:18:26:e0:e3:2e:4e:55:ea:40:81:43:
b3:83:5a:b2:ff:45:34:79:e8:19:6f:0b:72:d5:ca:1e:0f:ec:
5e:a4:43:18:de:70:b4:e5:cf:8f:a8:4b:30:af:83:c6:36:df:
04:72:25:e2:7d:81:5c:b7:1e:75:41:ca:15:f1:6c:03:3b:df:
7e:e4:32:9f:28:a0:3d:c8:a1:5b:5f:42:e1:6f:a6:2f:8a:70:
ee:6a:f3:7d:f2:06:ff:23:44:a4:f1:d7:6c:05:ee:15:7e:d0:
b0:d9:7c:ae:5b:9e:c2:bb:04:a9:33:01:6a:7e:19:02:d8:ed:
f8:dc:d3:9b:17:91:27:0b:4a:3c:d9:2c:f5:1d:47:05:70:85:
4c:6a:c0:e5:cd:9d:e8:5f:e3:8d:a7:c6:05:6f:e3:95:af:38:
09:2f:de:a2:f1:b6:8c:22:28:90:55:34:89:67:5b:29:e3:ed:
25:98:bd:b1:c4:ab:0e:fc:a0:78:67:bd:a3:a5:3e:95:a1:ef:
f9:30:51:3c:d9:5b:2d:af:92:f8:2a:74:aa:ed:07:1b:b0:8f:
79:15:d9:54:a1:d2:4b:5c:ad:c5:42:60:d3:3b:ec:1f:8c:e9:
0a:93:d9:ff:74:7a:ca:58:f1:8f:f1:62:15:eb:9b:bb:bb:05:
ba:fa:04:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:16:17 2025 by rpki-client