Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
File: Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft (raw, json)
Hash identifier: OchRpnDVgJjMB0oz6o8qrIpp3PD84vOfiQcBSN+/HN0=
Subject key identifier: 99:36:CF:D7:07:35:01:C7:73:09:08:F3:F3:2F:04:FE:62:48:EA:51
Authority key identifier: 43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
Certificate issuer: /CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Certificate serial: 019A70A523B5210280A69E3737CE8E110A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
Manifest number: 05FF
Signing time: Tue 11 Nov 2025 02:01:02 +0000
Manifest this update: Tue 11 Nov 2025 02:01:02 +0000
Manifest next update: Wed 12 Nov 2025 02:01:02 +0000
Files and hashes: 1: 3ZVx610sqQi3jR1aN5jm4CubkNI.roa (hash: ailedL7i/J97fdockeVNWVcnZPHz5O3htVX32ZMAjHU=)
2: Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl (hash: Hasswh/CYWMKrLv18aX72bfyQWSEdBVOeQkV2V8TOIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:23:b5:21:02:80:a6:9e:37:37:ce:8e:11:0a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431f1480651f1b338be26341e2db3a0aa3b344eb
Validity
Not Before: Nov 11 02:01:02 2025 GMT
Not After : Nov 12 02:01:02 2025 GMT
Subject: CN=9936cfd7073501c7730908f3f32f04fe6248ea51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:22:24:8c:8c:15:f5:53:e3:c7:51:1f:cc:1a:
f9:ca:9b:f3:68:38:eb:4d:b2:3c:44:8b:83:5b:f0:
48:06:5a:82:65:99:28:c0:4e:7b:e2:e9:b4:7e:57:
bf:e0:a8:01:b7:fc:fb:a6:b1:50:0d:d2:c7:0d:db:
10:88:05:11:89:fa:b1:2a:0d:c3:22:b9:6e:3e:cd:
c1:3c:b5:41:7e:59:72:f1:41:f2:0b:6c:d0:16:73:
27:71:15:e5:33:69:b6:8a:76:0e:ac:7b:17:eb:34:
c6:ae:c7:b8:6e:0e:35:63:fe:ca:61:de:12:73:80:
47:8f:92:a4:85:e3:96:ed:d9:66:e7:6e:40:24:45:
db:6e:25:8f:43:26:99:15:b6:35:1f:f1:bc:c2:67:
0f:d6:9d:b4:26:d8:0d:45:ad:2a:48:a9:32:2e:fc:
16:5b:58:1d:eb:2c:34:6a:46:c4:7e:b8:0a:33:96:
29:7a:32:28:04:f8:45:d0:94:02:d3:d1:3b:f7:21:
b3:1e:b4:05:b0:dd:dd:11:55:27:05:f2:14:bb:05:
ae:c6:1f:2f:e1:8b:6b:a6:80:1d:4a:3b:33:14:c5:
82:8d:55:47:cf:7f:8d:ae:9f:24:69:69:f7:7a:d7:
31:17:89:50:e6:2f:2f:29:f4:4b:ed:27:7d:cc:8e:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:36:CF:D7:07:35:01:C7:73:09:08:F3:F3:2F:04:FE:62:48:EA:51
X509v3 Authority Key Identifier:
keyid:43:1F:14:80:65:1F:1B:33:8B:E2:63:41:E2:DB:3A:0A:A3:B3:44:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qx8UgGUfGzOL4mNB4ts6CqOzROs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/08537c-026c-476b-8056-4e000943149f/1/Qx8UgGUfGzOL4mNB4ts6CqOzROs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:22:50:2b:24:99:8e:9e:cd:4a:31:a6:19:5b:8d:dc:cb:96:
70:15:cf:33:16:aa:ef:d6:16:c8:27:c0:92:4c:51:19:ed:e8:
e9:5c:1a:62:17:d6:de:d0:4a:2e:c8:cd:41:29:b1:28:e5:2c:
c4:90:d3:bd:28:68:da:13:43:70:51:6b:05:bd:60:67:ae:1e:
a5:2d:0c:25:00:58:9b:e0:1f:e3:bb:7f:2d:e4:34:ae:a0:ad:
43:8d:ae:8b:3c:03:aa:9c:5a:7a:ca:b9:61:b2:a5:c5:30:e7:
98:3a:c3:a6:03:b9:e6:f7:72:c3:89:b3:99:be:9f:be:1e:3d:
36:bd:3d:2e:64:05:9b:9a:9b:08:68:5a:a8:c4:4d:61:c6:ca:
23:a6:a6:b8:e0:90:45:51:ab:bc:07:ea:dc:58:55:1c:a4:54:
72:bc:59:d4:d6:46:61:8b:11:39:a9:1a:23:4f:67:7a:20:fc:
14:d0:15:fb:c5:6d:c8:c6:05:7d:35:a2:a6:27:bb:8f:82:be:
22:0b:3c:20:6c:5d:82:86:83:14:46:44:d3:51:85:de:97:d0:
ba:82:98:5c:3f:46:e1:3e:f8:1b:c0:11:e9:d1:c3:e9:a0:f1:
f2:d4:f2:6a:47:a2:cf:ec:66:88:39:eb:1f:a0:7b:ec:59:3b:
47:10:24:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:17 2025 by rpki-client