Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: Fio4owyOtYs2rvxrc0zt452rDQ2vvBQIULYyUWggaYo=
Subject key identifier: 23:F1:34:71:F2:2F:D7:D5:F6:D1:84:D5:0B:20:CB:4A:C0:38:0B:FD
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 019A4D06358F2328D0E2413F000762749518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 04:00:43 +0000
Manifest this update: Tue 04 Nov 2025 04:00:43 +0000
Manifest next update: Wed 05 Nov 2025 04:00:43 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: rL7X4lOvPPPrhCqjmRfw3LGrd7vp1mN2RMwQswY509Q=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:35:8f:23:28:d0:e2:41:3f:00:07:62:74:95:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Nov 4 04:00:43 2025 GMT
Not After : Nov 5 04:00:43 2025 GMT
Subject: CN=23f13471f22fd7d5f6d184d50b20cb4ac0380bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:b9:6a:2c:5b:69:31:ca:bb:68:8e:06:e1:
2b:a4:98:a5:28:8b:93:6d:ce:c1:d9:ba:2b:50:42:
4b:b5:d8:fb:d1:21:a7:25:f3:54:8b:ff:ef:93:4d:
e0:94:c5:8b:6d:57:a2:94:61:5d:7d:e1:74:73:68:
65:2a:90:47:fe:a7:17:cc:eb:18:98:c1:4c:0d:8e:
cf:c6:61:6c:f5:82:1e:b3:ac:d5:29:c9:43:07:21:
26:af:af:94:62:c3:1c:c4:5e:ea:5a:75:1d:fe:4c:
25:9e:ff:16:71:db:20:36:3a:8d:00:dc:c7:83:f5:
b1:12:3b:df:3e:22:89:bd:aa:58:a2:06:d0:b0:c2:
09:f3:bd:b1:0f:cf:bb:70:cf:24:bc:5b:c4:d8:ae:
0e:c9:da:93:d9:47:ee:15:be:67:e9:d4:01:f1:1c:
39:6b:64:30:7f:3b:f4:8e:3b:62:28:9d:ef:1e:34:
d0:8d:96:3b:51:ba:c9:42:7d:4b:12:a9:4e:29:40:
e6:63:41:84:fa:e6:e7:9a:f2:b3:cd:9f:7f:08:42:
86:3d:f4:7e:8b:cf:ce:8b:35:00:bd:93:62:f6:91:
30:13:47:9c:de:c1:48:8e:16:b5:ba:b3:be:7f:c0:
5f:73:50:20:7e:13:99:50:bf:22:ae:0a:cc:06:90:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F1:34:71:F2:2F:D7:D5:F6:D1:84:D5:0B:20:CB:4A:C0:38:0B:FD
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:74:7a:0a:b5:ae:56:a0:fa:7b:a4:5d:b3:c2:65:c8:af:62:
1e:cb:93:1a:9d:c7:46:4b:ec:d7:09:d4:8e:41:8f:b9:ce:7a:
0f:86:16:80:2d:cc:72:58:61:a1:80:88:63:78:a3:63:ca:4e:
a2:e9:5a:1c:2c:05:01:57:1c:64:1b:55:33:f9:76:bf:f8:ff:
ce:26:f6:70:f8:33:ae:06:84:a5:c3:52:b3:30:06:e2:de:1b:
41:94:f5:c7:2a:9d:30:a3:e6:c9:ad:64:62:b6:5a:09:c9:6d:
4c:8c:1a:94:15:d3:ba:44:0c:38:64:19:af:c7:3f:96:3c:e8:
44:e5:89:59:bc:67:c1:3e:6b:89:1f:7c:89:fe:3a:9e:70:7f:
8b:9f:5a:a7:5c:a1:d4:78:ef:6d:eb:5f:9a:5f:cb:31:3b:15:
c2:26:1b:69:f3:d6:1d:c9:db:50:a0:6c:63:2b:27:cb:55:33:
31:ae:ae:b9:16:b3:c0:97:cb:20:4e:99:85:8b:c1:fb:db:88:
90:7d:41:e8:a9:0a:2e:52:b6:6d:82:c1:d3:fd:44:dc:eb:04:
e2:54:5b:97:eb:5d:f1:c8:e8:23:65:d9:8f:3a:c9:71:a5:b4:
a7:5c:2f:e2:4a:89:d7:2c:f5:cd:4f:c3:c9:aa:22:49:64:98:
69:1a:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:04 2025 by rpki-client