Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: Y0Nr3BSNswUMdNem/9zStL6mbhYOEXSKR0+U6hyZH1k=
Subject key identifier: D7:28:48:6E:EA:47:36:7F:EF:81:60:43:6C:A2:16:7A:79:1B:B0:A8
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 019A7112C14FC9B5021DA5AF453F63C9576A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0E38
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: PYu7pvfk6NRcXnGmblQCMvDKsIdMylFnpDP1ZVPt8JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:c1:4f:c9:b5:02:1d:a5:af:45:3f:63:c9:57:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=d728486eea47367fef8160436ca2167a791bb0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:68:27:80:21:52:a4:3d:f3:88:57:80:22:60:
46:dc:09:0c:b6:03:9f:9b:c9:52:18:71:35:62:73:
24:c3:b5:06:1f:2e:1e:9f:e5:7b:4c:79:20:ed:2f:
d7:0b:d2:8f:2f:0c:73:84:e8:de:fd:b7:85:fa:04:
bd:4d:6b:ed:a1:6b:3f:27:e4:5a:c0:02:0e:83:53:
56:88:a1:4e:51:3e:b1:87:4b:e6:00:4b:f0:4b:17:
c2:a3:5f:77:99:11:25:2d:0e:aa:ad:57:d8:69:17:
74:54:7e:ee:d4:f7:9c:cb:e9:ff:87:b7:08:c1:bb:
14:a3:30:f4:b5:3a:82:ad:b3:29:0b:84:e2:62:4d:
af:51:02:7b:d3:fa:63:e5:5b:b8:a3:38:8e:0e:de:
5f:e2:bb:51:74:4e:ed:c3:7d:2a:e1:20:24:06:d2:
ba:27:5e:aa:26:36:93:d8:5b:59:ea:21:ce:9f:8b:
43:f0:4f:fb:3b:fe:37:d0:07:00:6a:6d:46:8e:c5:
6b:ee:e1:91:e1:c0:b9:0c:8c:da:39:27:bc:86:59:
01:c9:09:3c:2e:37:35:1d:8d:5f:6b:b7:4b:fb:9b:
d7:15:15:e2:10:f3:d8:25:05:1d:86:02:e1:0d:40:
5e:7a:ed:b9:f1:61:81:91:2f:44:5d:a7:61:c3:99:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:28:48:6E:EA:47:36:7F:EF:81:60:43:6C:A2:16:7A:79:1B:B0:A8
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b7:8b:03:a1:28:ad:cd:81:03:0a:13:98:42:ea:3d:d9:db:
6e:43:ce:e0:25:1f:0c:9a:3c:7d:2b:62:ef:e2:8a:ec:84:2c:
13:dc:05:5d:19:07:ba:1b:3f:76:eb:8d:cc:1f:81:53:55:89:
4d:2f:b5:dd:f7:23:f7:a6:c7:63:32:5b:38:2c:46:aa:16:c7:
b2:af:01:a2:a8:0f:c3:46:c0:8c:9b:72:7f:a7:75:6a:25:3d:
34:37:8c:aa:ee:af:cd:7e:a5:80:90:54:c9:d6:ad:6d:03:f5:
d7:c4:e2:33:92:a8:14:85:c0:d6:bd:9a:66:7c:f1:d6:cc:32:
c2:fd:6a:c5:ce:6d:69:5f:f7:b8:f1:c3:d2:e9:85:fb:ce:91:
16:5a:9a:45:40:cb:67:47:9a:d3:07:a9:81:fc:70:12:9b:77:
b6:f0:e2:d3:bf:0c:8d:6d:92:0a:5a:a4:e2:dc:2b:90:2e:fb:
f7:94:34:f2:de:10:9b:79:76:f6:4d:33:bf:c1:14:47:4e:0d:
33:88:0c:00:5d:c3:3f:51:ad:44:f8:5f:20:34:48:4c:8c:14:
b1:cc:fb:0d:ef:b2:b6:d6:59:69:1c:4c:b6:55:c0:b7:3f:63:
81:8a:a7:e5:99:15:19:a0:f8:fe:51:76:42:51:df:b9:3a:fd:
b1:35:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:08 2025 by rpki-client