Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier: Sg0LBsaub13gxGjLmoD1yrZ+H8WbrfCTHH6a99b1HXw=
Subject key identifier: 45:65:9C:14:56:2D:24:22:86:0D:5B:6C:E8:61:37:B3:44:68:53:57
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 019A4C97FFFFA75140837FD8C5709A5D6F0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number: 0392
Signing time: Tue 04 Nov 2025 02:00:20 +0000
Manifest this update: Tue 04 Nov 2025 02:00:20 +0000
Manifest next update: Wed 05 Nov 2025 02:00:20 +0000
Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=)
2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: JffrSZ4X5x28tQ5noy852rBG7/uTckRfD9suCETEJS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:ff:ff:a7:51:40:83:7f:d8:c5:70:9a:5d:6f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Nov 4 02:00:20 2025 GMT
Not After : Nov 5 02:00:20 2025 GMT
Subject: CN=45659c14562d2422860d5b6ce86137b344685357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c9:12:29:73:81:18:ee:79:6c:28:81:f4:d8:
d6:f3:db:22:a2:2e:e8:40:3b:4b:eb:cd:2e:af:9f:
07:0f:f2:c4:e8:4d:50:e2:5e:d7:75:56:02:32:b3:
f8:92:ff:a9:a5:6e:31:29:c6:93:75:d9:14:4b:d0:
35:23:f8:ce:61:e3:77:6b:cd:bc:8b:22:b1:96:85:
44:77:22:4e:3a:ac:2a:b1:d7:9b:27:e3:e3:e5:3b:
14:de:fa:43:e2:1a:93:b2:3c:f0:cf:be:53:81:9e:
1d:4b:d3:7d:f5:fd:c8:12:1e:d0:ce:0c:90:60:41:
98:8e:59:43:0f:e7:2c:36:a3:c3:0b:fe:a0:27:d2:
bb:0b:f4:28:e9:24:3c:b3:1b:77:ad:65:bf:21:33:
2b:f8:44:e6:f6:3e:42:6a:d8:81:ee:11:5a:2d:7f:
c9:82:18:fc:49:71:74:01:6d:26:8c:be:13:30:6a:
26:5c:83:9f:8f:a4:c5:04:d3:65:5c:7a:01:97:b9:
c3:bb:e8:4a:73:fe:d1:65:94:a7:be:ca:da:70:e9:
75:9d:8f:76:55:4f:16:5b:e8:f2:b5:f1:cc:f3:52:
71:d8:ff:fb:0d:7d:40:1f:e2:2c:5e:61:01:7d:99:
f1:83:4e:7d:b9:db:a7:89:fb:80:1d:14:60:e5:8d:
bd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:9C:14:56:2D:24:22:86:0D:5B:6C:E8:61:37:B3:44:68:53:57
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:55:55:46:4b:c0:15:aa:4b:e6:90:a3:9f:1e:62:27:da:a8:
c7:8c:e1:9f:00:8c:1a:9b:ed:c3:bb:88:cb:2c:92:bd:fe:4a:
4a:d5:46:f1:f8:70:c6:e6:db:dc:70:ce:a5:13:e2:d1:78:f2:
e8:9f:54:17:71:aa:68:21:c2:cd:8d:34:d3:7a:24:93:7c:f3:
a2:bb:e7:29:d7:f2:86:f4:f4:44:0d:f8:bd:09:ce:8d:fd:8f:
21:bc:81:ac:10:99:70:db:7e:97:9f:b1:8c:4e:2f:45:a9:bc:
9b:fe:73:f5:26:00:bb:66:77:13:28:16:bd:91:88:ca:e4:41:
f0:49:02:51:aa:04:29:8b:92:17:bc:ac:52:f2:52:d0:ac:2f:
af:4c:35:7c:f5:7f:65:7b:49:02:cc:f3:53:42:c4:69:be:f4:
fe:4d:9e:32:95:64:d8:b4:b1:03:c0:d5:9d:78:80:63:b4:ed:
ef:03:45:51:07:26:33:6b:da:32:a0:5c:7a:7f:a1:93:05:7a:
8a:15:37:a7:93:19:f3:92:17:b0:bc:7c:97:fa:b0:56:7c:37:
a0:53:75:a8:04:b9:1c:9b:e6:91:2e:f3:c5:38:a2:55:7c:fb:
a7:6a:59:ab:db:1f:72:ca:50:90:e9:30:24:b8:d8:85:50:46:
00:cd:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:09 2025 by rpki-client