Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: mV8FeZnvAzOYTVU/bY88Y0t+9+3PgZBVJsHCQVZ0qkM=
Subject key identifier: 00:23:5A:AF:C2:B3:7B:F0:04:54:58:4B:68:84:A8:C7:55:E6:FD:DD
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 019A7225D72040964C45EC8F4E297FF84DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0F3E
Signing time: Tue 11 Nov 2025 09:01:13 +0000
Manifest this update: Tue 11 Nov 2025 09:01:13 +0000
Manifest next update: Wed 12 Nov 2025 09:01:13 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: xr2WEpJcgLqDU7DyhxN4cRyJCQ7DWg3EpHV7Zy2IGjo=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d7:20:40:96:4c:45:ec:8f:4e:29:7f:f8:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Nov 11 09:01:13 2025 GMT
Not After : Nov 12 09:01:13 2025 GMT
Subject: CN=00235aafc2b37bf00454584b6884a8c755e6fddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9c:ac:b4:81:64:23:36:c8:f8:bf:c0:1c:6b:
fc:08:4b:6e:76:5c:cc:85:62:34:81:44:ec:8e:39:
2d:e1:6c:5c:d6:1b:57:15:ad:b0:c8:39:ef:6e:ca:
8f:e2:88:1b:fb:a1:24:1a:8c:63:a0:c5:e2:4b:33:
69:75:fd:b6:58:8a:6b:17:ef:9c:46:0f:ab:1b:75:
ca:9c:a4:1c:03:49:72:60:bd:59:7f:36:96:ba:8a:
7b:4d:88:a2:57:f2:fa:b2:c7:8c:b1:5a:4e:6f:85:
7f:8b:92:a8:a7:3e:07:fb:b5:e6:b2:f7:50:6a:f3:
d7:a7:44:76:87:fb:30:a4:0c:6c:c6:26:e4:6b:6c:
79:bc:a4:3c:2c:66:43:8e:b6:d8:89:01:44:ef:d2:
d2:fc:c4:2b:9c:a0:0a:19:a2:a3:ef:d7:92:c7:7d:
40:a7:48:e4:f6:bd:c4:28:7b:cb:02:62:ff:5c:f4:
16:22:14:dd:a8:8a:37:73:82:d6:f1:b7:37:28:54:
30:c3:13:6e:47:b8:76:5d:4e:f5:0d:fa:2d:94:d0:
ac:8a:18:41:57:c3:74:16:7a:7b:ec:87:3f:c6:e8:
74:8c:b3:2e:b9:4e:16:98:cf:86:0b:a0:1e:05:bc:
23:38:59:49:7a:a6:03:6f:93:7b:45:ed:97:4c:e1:
a4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:23:5A:AF:C2:B3:7B:F0:04:54:58:4B:68:84:A8:C7:55:E6:FD:DD
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:75:03:22:c1:0a:cd:8d:84:58:b3:4f:dc:b7:57:38:ff:f1:
0f:bf:c1:1a:e1:1e:20:5a:f9:cd:f2:9b:a9:2c:20:9f:57:a3:
9d:bb:73:76:6d:bb:40:4c:0f:76:29:bb:09:61:2b:92:68:09:
20:cd:08:2f:92:6d:6b:78:8e:c0:03:e9:ee:dd:59:26:d7:38:
60:33:00:ec:54:7a:d4:5f:ee:bc:f3:02:8a:0e:b2:39:81:52:
a6:ac:9c:fa:04:ed:44:47:ed:45:70:29:97:6d:75:8c:02:9d:
e2:2c:50:eb:38:c6:92:bc:5e:98:68:ce:be:18:5f:ba:34:b1:
52:ff:48:40:4c:56:46:63:ff:8a:54:3d:b6:57:23:ef:49:e5:
30:be:99:f2:72:fa:ba:47:2c:50:66:d2:c0:40:62:17:56:78:
ec:0a:54:17:b7:74:4f:6b:f5:c4:0e:4c:20:60:49:26:dd:53:
f8:ca:84:8c:2c:bd:7f:2b:84:aa:8f:9d:74:73:e1:1c:07:82:
61:e9:a4:f5:f8:35:1e:34:4d:04:10:95:4c:0f:bd:19:f7:1a:
11:13:01:a5:3a:1e:f7:61:37:e1:37:a6:84:83:fe:98:af:06:
ff:8f:a3:98:67:75:4d:bb:90:e5:bc:19:0f:41:b3:71:06:84:
5e:5c:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:15 2025 by rpki-client