Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: CD2qETuH3ZYlmN7H56XckmuJssBWK98BSLwN0pvglHM=
Subject key identifier: 87:57:52:18:37:FE:D3:DF:4F:C6:8B:A3:0B:D5:E5:66:1D:F6:1C:61
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 019A50E2E7F94634BFDFD3699A5641AB1F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 1190
Signing time: Tue 04 Nov 2025 22:00:39 +0000
Manifest this update: Tue 04 Nov 2025 22:00:39 +0000
Manifest next update: Wed 05 Nov 2025 22:00:39 +0000
Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: 93aQqL9dlbkJjvqHl2baXrQt7lscXFNfUsQvVSNRpYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:e7:f9:46:34:bf:df:d3:69:9a:56:41:ab:1f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Nov 4 22:00:39 2025 GMT
Not After : Nov 5 22:00:39 2025 GMT
Subject: CN=8757521837fed3df4fc68ba30bd5e5661df61c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:75:39:5d:12:ed:0a:0c:28:bf:0d:77:be:
98:d7:25:81:bc:d4:7f:ed:31:4e:91:fd:45:ea:f6:
7a:9f:22:2a:82:96:e3:a5:4d:9a:9b:ef:6b:7c:50:
39:07:93:53:46:a8:2a:80:fd:fb:47:b9:a1:9b:98:
7f:e6:c0:b2:b2:d1:7c:84:66:74:76:bd:ad:1b:a3:
dc:d4:66:68:01:90:1e:fd:04:b0:81:04:e3:05:5a:
28:aa:36:b3:83:0d:d4:53:03:04:37:8d:69:58:7e:
6c:ce:08:e4:87:64:e7:3a:03:fd:3a:72:5a:c5:09:
72:c5:86:ed:a2:b9:da:e0:00:8c:5c:4d:8c:64:40:
37:d1:2c:90:01:c0:dc:60:f9:b7:cb:67:6e:d9:27:
5e:e6:63:94:33:24:ad:44:5d:29:36:dc:3b:85:df:
e0:ba:aa:91:6a:f4:fb:11:26:53:ee:43:00:12:77:
7a:82:83:72:cb:3c:fd:7b:f1:27:26:24:d0:22:e3:
b4:b1:3f:f0:d5:70:aa:17:cf:f8:93:9d:e8:fa:14:
59:0e:aa:8d:4f:cf:24:2e:d7:c2:c7:47:c3:10:f0:
f3:3d:5d:65:1e:bd:b6:a7:2f:66:f5:a0:31:01:af:
b7:63:df:a0:04:c2:b4:48:7d:b4:d1:22:1c:58:51:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:57:52:18:37:FE:D3:DF:4F:C6:8B:A3:0B:D5:E5:66:1D:F6:1C:61
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:83:60:6b:4e:6c:ff:c8:b9:86:ee:9d:eb:c3:e3:ad:5b:81:
12:fa:f6:35:04:c2:3a:07:08:20:e4:3d:43:53:d9:d4:ea:8e:
cf:87:16:fe:45:37:21:9b:be:af:b6:12:e6:3b:4d:f3:26:24:
89:5e:a7:fc:eb:6f:a5:7e:ac:c3:a8:db:49:9c:30:25:a8:93:
4a:26:ce:3f:c9:bc:43:ea:f5:e7:39:f6:5b:8a:a5:d7:17:f7:
4e:14:09:df:d0:2d:c8:d1:e2:27:81:7e:17:b5:1a:81:67:f7:
ed:68:27:65:40:04:17:b8:be:25:ad:5f:0c:96:bb:74:ad:08:
87:74:51:6a:09:c6:f8:74:70:94:d3:e4:64:66:03:d9:5c:d3:
3f:dd:e5:28:f1:4d:22:22:c4:a8:28:bb:b0:ce:f6:ac:11:38:
c1:75:f4:38:96:6e:1f:da:14:61:85:05:1d:5e:24:34:d1:fe:
df:a4:17:f0:ab:8c:2a:d4:15:e1:8b:42:60:b6:91:5c:31:6f:
7b:cc:b0:7a:02:4c:16:ff:2c:ce:0b:ab:73:59:8f:8a:54:71:
42:04:aa:7c:b4:a3:c6:43:2f:8a:6a:03:24:cb:83:73:ad:60:
59:c7:d6:7c:4f:a8:3f:62:a3:03:8f:2c:b8:db:7a:51:ff:1e:
73:5f:2e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:33:05 2025 by rpki-client