Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json)
Hash identifier: 1GlbAuaq7FBZil+n6OVmpP6rQYFxOwhvBBheN4UDNac=
Subject key identifier: F6:53:22:E2:FA:16:E6:9D:02:C7:FD:DB:F4:00:F5:BE:29:89:3F:7F
Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Certificate serial: 019A4E5003C6F18E7A2D6391E75376D04161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:57 +0000
Manifest this update: Tue 04 Nov 2025 10:00:57 +0000
Manifest next update: Wed 05 Nov 2025 10:00:57 +0000
Files and hashes: 1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: F21IAgiVckEKrwn7nGjl5JoO8MTEpww6BOfSZ0sTdVU=)
2: OvLZjS7E5MX30NZkLK9jxh8KFhU.roa (hash: cImSpb6PHoLXLcMRtEaZwDR7QJdikTFbgChlslLA778=)
3: SoN9k2cqGxyy_rsm3ydDmcCibzo.roa (hash: ajQGIB+pruVAaKn9625joYHZDBPfoDRUv7Hz6Vm4jnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:03:c6:f1:8e:7a:2d:63:91:e7:53:76:d0:41:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2
Validity
Not Before: Nov 4 10:00:57 2025 GMT
Not After : Nov 5 10:00:57 2025 GMT
Subject: CN=f65322e2fa16e69d02c7fddbf400f5be29893f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:af:17:df:c5:dd:2a:cd:da:e0:61:c8:bc:bf:
91:49:76:18:81:16:1f:c1:88:fc:e6:09:c8:06:9f:
f7:3b:b1:87:0f:31:be:de:df:6c:f3:43:57:09:e0:
be:01:66:db:bc:24:c4:56:c1:33:91:ae:29:c5:bb:
8e:5e:20:ad:59:d5:30:aa:8e:e5:72:dc:d8:b9:77:
0e:a8:f4:f6:04:e9:d3:03:6b:12:04:8d:9c:8e:37:
c0:c8:95:e0:b0:dd:f7:78:87:e4:62:ab:85:19:a5:
02:fb:cd:3a:32:7d:50:41:2c:03:f1:69:03:a5:da:
c8:6f:39:1f:a9:3f:c2:fa:af:fc:92:78:91:e5:c1:
b1:f8:55:2c:81:c4:12:50:f2:ed:b6:0d:dc:a6:9f:
83:1b:a9:32:94:2a:05:dd:d9:e6:bd:7c:f4:6e:12:
aa:d2:c2:2b:80:89:d5:54:8e:f8:2e:90:2c:82:5a:
fe:de:3e:71:5d:df:cf:34:51:fe:6e:94:9b:5b:32:
40:80:9b:91:8d:4d:43:f6:09:b3:72:89:83:20:86:
15:1e:2b:29:51:ea:a4:ec:3e:dc:b5:b0:e7:0e:92:
9d:17:75:ff:2d:3b:7a:f4:e7:1d:da:02:5a:a9:97:
67:1e:39:20:0b:7d:de:54:a7:86:92:50:c8:d1:d3:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:53:22:E2:FA:16:E6:9D:02:C7:FD:DB:F4:00:F5:BE:29:89:3F:7F
X509v3 Authority Key Identifier:
keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:54:5b:84:4b:7f:37:2a:0a:ce:e5:4e:b0:0f:a5:31:94:ae:
87:96:22:d2:20:98:0c:d2:2e:78:cf:5f:28:87:8a:95:c0:c2:
76:9c:1f:b3:59:90:89:84:3c:23:1b:0d:46:d1:47:8a:98:e4:
3b:d9:66:bb:26:3f:c1:52:1e:7b:c1:db:aa:aa:32:c9:b9:17:
70:a5:bb:8f:40:0c:41:89:d1:02:53:67:03:ae:5f:5e:46:c0:
b4:09:7e:e1:4a:74:29:3d:d3:ba:bf:5c:da:08:1f:3c:46:04:
95:75:67:cd:03:7c:41:21:1e:86:c4:1b:c3:b9:e2:83:8e:f9:
f6:54:25:4e:c7:41:33:de:48:64:26:e2:5e:24:46:e9:a3:48:
fb:5f:56:3b:2e:5e:0f:ad:e1:e2:89:c4:d1:6c:62:f1:ce:9d:
fb:c8:4f:0f:d3:0f:29:9c:1c:99:9e:94:e8:98:53:1a:3c:45:
41:72:df:91:d9:04:35:9b:63:63:ae:3a:e2:db:c1:9a:c5:a5:
82:2d:ab:31:9f:9e:82:a9:92:ec:a4:5f:12:8d:e3:c8:88:26:
f4:2b:d8:49:d9:cb:fc:06:fe:5e:44:6b:d7:bb:f6:e7:b6:c8:
94:e1:96:3e:19:35:0c:53:1c:e9:81:71:23:a4:8b:9b:66:2c:
55:35:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:51 2025 by rpki-client