Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: KatKuoAu7psKrUtgFJfVom8NgR7ddP6cn9pf3UaAY2E=
Subject key identifier: C0:8B:1A:0F:40:BF:F2:89:AD:7E:AA:47:EA:80:CA:D4:FC:B4:01:89
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 019A52D239C0CF15463755C9918B503DA82F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 1361
Signing time: Wed 05 Nov 2025 07:01:40 +0000
Manifest this update: Wed 05 Nov 2025 07:01:40 +0000
Manifest next update: Thu 06 Nov 2025 07:01:40 +0000
Files and hashes: 1: 1W5smHKXook3Cttl9rBFCphz4iU.roa (hash: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: jYExzpbyILjIlk5Y4sRSGDFIsKDPX74ctWYWi4vCONw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:39:c0:cf:15:46:37:55:c9:91:8b:50:3d:a8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Nov 5 07:01:40 2025 GMT
Not After : Nov 6 07:01:40 2025 GMT
Subject: CN=c08b1a0f40bff289ad7eaa47ea80cad4fcb40189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:0a:f5:73:ec:01:0f:3d:e8:1d:76:29:3f:
f5:97:cb:ab:e1:e1:b4:97:43:cd:4a:ca:f4:6c:51:
a8:46:20:59:c7:85:3b:1f:f1:6a:44:33:c7:97:34:
0e:25:64:2b:8c:8e:10:2f:de:e3:06:d9:87:1a:33:
73:14:ee:0e:db:0d:ce:3e:bf:76:70:a4:7f:e7:a6:
18:b8:e3:e1:21:dd:8d:f1:6e:c8:7d:ea:ee:5a:4a:
e8:18:34:27:c0:06:73:15:38:d5:33:c6:ce:fd:6e:
ed:fc:88:93:26:85:47:5a:19:f0:68:eb:c0:2f:d5:
df:3c:81:8c:20:4d:b3:0f:32:cb:b2:3b:e6:02:e3:
34:75:00:fe:40:82:cf:64:44:b8:27:65:fd:47:b6:
49:17:b7:0d:24:3a:64:a5:f4:ca:a1:b0:ea:d0:c0:
13:6d:22:f2:0a:d3:90:76:f0:58:9b:76:e0:4d:65:
09:93:57:33:b3:77:99:54:f9:2e:ca:e9:b7:2a:84:
15:9b:91:74:f0:67:25:14:c8:13:f2:d7:e1:03:3d:
76:34:7f:7f:6f:51:0e:8d:cf:5e:bc:93:a6:9a:c3:
86:03:92:28:28:74:54:5d:20:4f:64:cd:bf:f6:fa:
81:55:25:1f:7a:d6:d3:1a:2f:5e:a8:5c:f9:54:c0:
84:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8B:1A:0F:40:BF:F2:89:AD:7E:AA:47:EA:80:CA:D4:FC:B4:01:89
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:53:97:14:c2:69:ae:80:42:b0:6c:ef:54:df:69:2d:42:3c:
42:69:6d:4e:b5:fe:aa:a4:c3:aa:c3:5d:65:05:34:4e:5b:72:
47:4e:90:5e:20:f3:c3:cb:50:dc:bf:9b:c3:7d:d6:ca:fd:e1:
30:32:7d:f4:15:b1:28:7e:df:78:10:1a:28:38:15:c4:4d:06:
9c:35:16:84:37:8f:9f:0c:9c:79:40:a4:d4:8d:ab:c0:19:8d:
d9:91:5a:9d:15:e1:a4:64:42:a8:12:ca:5f:33:3c:73:ca:b7:
5d:0e:b9:3a:b6:47:37:76:01:50:5f:e5:9d:b4:aa:de:d7:05:
a0:f3:81:13:ab:b8:d9:e0:92:23:2a:18:8d:e2:14:ba:a1:4c:
bd:30:82:45:37:fc:9b:1b:7b:19:77:b2:27:71:28:56:e4:34:
02:a5:31:06:f8:f4:fe:d7:8f:32:3c:a0:38:14:9b:1a:9d:0f:
b3:6f:30:f6:e1:b0:b5:4a:b5:a0:89:59:d5:f9:06:cb:e9:c6:
7e:f9:49:4c:f9:73:41:55:c6:c1:62:ff:14:63:bf:f9:7c:cd:
b2:a7:37:5d:54:7e:5b:a8:67:67:59:b4:f1:fc:1c:56:46:26:
1a:59:6d:bb:ef:d0:cb:de:62:5b:38:db:f7:22:9d:0f:7a:53:
0d:7a:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:38 2025 by rpki-client