Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier: UgH8k17clGbwL74pJgF+mokORKN8KUceMq0Y8NBGHg8=
Subject key identifier: 23:FF:95:AF:90:2E:74:FF:AB:EB:B2:55:DD:D3:79:7C:47:B4:93:C5
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 019A29678E0BFB224B7CDBD395BFEA22D581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number: 0630
Signing time: Tue 28 Oct 2025 06:00:43 +0000
Manifest this update: Tue 28 Oct 2025 06:00:43 +0000
Manifest next update: Wed 29 Oct 2025 06:00:43 +0000
Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=)
2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=)
3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: HsS+h+EqRrgTDV5RuoZCrvUvyJQB6cGGrCGL/ungkvA=)
4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:8e:0b:fb:22:4b:7c:db:d3:95:bf:ea:22:d5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Oct 28 06:00:43 2025 GMT
Not After : Oct 29 06:00:43 2025 GMT
Subject: CN=23ff95af902e74ffabebb255ddd3797c47b493c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:b7:4f:8b:3c:ac:e9:54:70:3b:d9:3f:b8:
ad:f0:d2:5a:e1:14:05:db:bd:54:2e:bc:c6:a2:96:
b0:80:2f:d0:08:82:52:49:76:37:6f:c1:cc:1b:a0:
41:70:e8:87:8a:b0:94:76:0f:06:2f:45:02:fd:9c:
92:67:d4:ac:0e:fa:c4:7c:28:8e:5a:e1:b5:20:91:
17:9b:4c:b8:c2:1a:c0:09:42:ce:65:62:70:e3:83:
6f:a7:5d:26:99:65:3b:d0:85:bc:dd:07:45:99:d0:
41:50:94:49:76:76:8b:d1:16:d2:12:ae:18:e4:db:
cd:fb:c2:84:aa:f6:8f:bb:9d:a1:10:d3:29:75:ae:
97:0d:86:6f:c2:64:d0:ea:f1:51:db:b7:78:08:90:
0c:f3:07:cb:a0:f3:87:57:36:54:7f:a6:ee:a5:84:
a5:5f:39:71:da:e7:52:b3:56:d1:55:32:95:78:17:
5b:70:4e:1f:b3:db:86:d8:df:04:25:7b:18:15:a2:
81:29:ea:da:b6:0e:aa:a9:c8:62:88:9f:0e:a5:48:
81:08:4b:fb:9c:e5:13:b7:84:96:39:ec:ce:d6:c4:
56:bf:f6:28:8f:27:b9:02:9a:48:84:e7:ea:b1:fa:
63:7a:d4:4b:07:e5:88:04:0d:ce:cc:3d:92:27:19:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FF:95:AF:90:2E:74:FF:AB:EB:B2:55:DD:D3:79:7C:47:B4:93:C5
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b9:ce:7f:6c:f7:8d:72:47:d4:f8:1d:cb:83:e2:05:6f:62:
b9:11:87:e8:93:f5:c1:ee:7c:2e:9e:b1:7c:a1:de:0b:60:36:
27:3d:8c:92:f7:e8:22:4c:fa:27:d1:ac:29:04:68:82:5c:da:
d0:a4:e2:9d:e6:66:0a:8b:01:02:a2:03:a5:6a:4a:09:13:e3:
1a:71:4c:80:0f:9b:50:eb:86:ae:a5:fe:79:13:13:03:73:a8:
54:a6:3e:0b:de:92:a4:90:c6:4f:29:bc:12:4f:72:cb:e3:0f:
45:47:2d:8d:c6:01:e9:c7:b6:c6:df:06:e9:82:a7:74:19:37:
1a:ea:e5:9a:ea:64:15:ae:ed:ad:10:81:f5:92:4c:a9:65:35:
94:e0:76:d1:4e:d6:93:ea:3b:6c:01:8a:f2:9f:57:2f:1c:0b:
b8:3b:ae:0a:74:ac:2c:ac:7c:00:c5:cd:2d:b4:a3:1e:0e:f2:
41:6f:80:5e:84:4c:41:56:6c:a8:c3:64:f1:d1:da:ff:45:09:
44:ad:72:5f:4e:98:7c:bc:cf:f4:6e:3c:1c:b0:2c:66:b9:fa:
76:8f:fa:83:a4:e6:e1:ad:6d:a9:ad:eb:d2:53:bb:ba:92:84:
c9:e7:33:6e:9b:85:b9:c8:a7:ea:62:66:aa:93:1f:44:af:06:
9f:7b:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:08:45 2025 by rpki-client