Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
File: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json)
Hash identifier: mrjFOJo3Kff03b3rTuJExC88eEUPOVmoZFRg9FGtQK8=
Subject key identifier: 45:63:B7:C2:F2:A5:3C:1F:98:DE:82:D5:61:90:AE:B5:9F:40:C1:99
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Certificate issuer: /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial: 019A4DE21FE0829504DC932FC3CE495D50DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
Manifest number: 03A1
Signing time: Tue 04 Nov 2025 08:00:56 +0000
Manifest this update: Tue 04 Nov 2025 08:00:56 +0000
Manifest next update: Wed 05 Nov 2025 08:00:56 +0000
Files and hashes: 1: 6zamDTUBwAsnOFkspEkx8jbI6wY.roa (hash: dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=)
2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: PdaUNwoVyHKIwRvaBrMymezGSmwfHeqX065L6mRvUQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1f:e0:82:95:04:dc:93:2f:c3:ce:49:5d:50:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Validity
Not Before: Nov 4 08:00:56 2025 GMT
Not After : Nov 5 08:00:56 2025 GMT
Subject: CN=4563b7c2f2a53c1f98de82d56190aeb59f40c199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:33:8c:37:84:8d:04:cc:b2:3d:a4:04:96:12:
85:93:3b:36:c7:8d:a7:d6:d3:00:b2:06:21:d0:6e:
31:c2:19:d1:cb:4e:72:6f:9d:e4:2c:d4:d5:16:a0:
c5:b1:a9:1c:63:b5:ba:d6:7f:6d:29:53:1e:8c:81:
35:32:7c:83:90:78:fd:13:d7:e9:9c:e3:76:e1:d0:
cb:83:e5:6b:71:4e:e5:5c:50:39:62:63:d9:d9:5b:
2a:08:4f:58:4e:fe:8f:9a:ef:5c:0d:02:2d:5c:9e:
66:e0:74:b5:16:e3:d1:b9:cc:54:c6:de:ae:e7:05:
f5:b0:e3:89:7a:4d:54:25:e4:cc:91:6d:2c:a1:96:
47:c7:cb:3a:57:54:52:53:cc:0d:9c:b9:cc:7b:5b:
8d:b3:ca:34:1f:27:56:84:fe:45:3c:1d:22:8a:ed:
c8:42:54:e6:44:27:3b:20:fb:ff:4f:0e:a0:13:bc:
d7:f1:85:64:39:8b:41:14:19:02:55:f6:50:25:f3:
43:2a:db:6b:ed:2b:fe:85:b6:4e:a5:e2:f7:32:a6:
ea:1c:bd:47:46:ff:fb:de:08:82:bb:fa:9a:23:54:
ec:95:83:45:98:b4:4b:7e:7c:d9:65:06:d7:f4:8f:
08:95:45:45:a8:de:17:f8:d0:b1:19:37:14:3f:af:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:B7:C2:F2:A5:3C:1F:98:DE:82:D5:61:90:AE:B5:9F:40:C1:99
X509v3 Authority Key Identifier:
keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:99:fd:c2:35:66:fd:e1:26:7b:59:b9:fb:93:11:af:dc:eb:
ca:3f:b7:6d:42:6f:7c:d2:80:01:a4:c0:26:e4:3b:f8:37:a3:
eb:28:02:f7:e8:d7:d2:a1:04:62:92:00:69:cd:65:f7:60:e3:
3a:f1:18:c6:51:d5:ad:fe:46:45:67:a3:bb:b3:dd:56:25:0b:
95:3c:ff:09:66:e4:28:70:d0:30:6b:09:d8:5b:e7:f2:71:8a:
e7:79:d9:eb:c6:ec:1a:57:6f:fc:85:f0:39:af:e9:94:05:09:
49:43:26:01:30:53:3e:13:75:03:45:e1:4c:f1:c5:dd:2d:33:
98:d8:29:82:5f:b8:ec:19:09:ba:be:bd:2a:a8:1b:cb:b8:51:
98:a0:68:ce:13:88:51:73:5f:0b:1b:f6:dd:f7:ce:8f:a8:8f:
f9:23:cc:b9:07:6b:1f:aa:4f:d2:42:69:48:17:f8:4c:a1:c9:
cb:10:cf:13:12:2a:43:47:65:45:d8:58:5f:8d:27:84:2e:60:
f9:a4:0f:4c:42:e6:1f:d7:83:dc:56:14:5b:dd:59:eb:de:e8:
91:a6:9a:87:d6:a7:00:f4:d6:20:4b:22:94:58:72:62:9b:01:
f6:3c:ca:2e:e3:61:89:41:f5:44:6e:42:7b:7a:55:48:f0:0d:
98:89:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:36 2025 by rpki-client