Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
File: Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft (raw, json)
Hash identifier: YKH73PtPx9atyvlmOPUTkCi+LV1Z/vvDEcXasXd0M7o=
Subject key identifier: F5:89:AF:A9:98:23:07:0F:00:8E:87:33:63:48:FD:92:5E:A0:99:0A
Authority key identifier: 43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
Certificate issuer: /CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Certificate serial: 019A4EF47279793BC38374C3F2CF3928840F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
Manifest number: 0721
Signing time: Tue 04 Nov 2025 13:00:34 +0000
Manifest this update: Tue 04 Nov 2025 13:00:34 +0000
Manifest next update: Wed 05 Nov 2025 13:00:34 +0000
Files and hashes: 1: Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl (hash: mjcfFaX2yZ+7Eq6nIjC+UHzbO1QuuVDCK5rBJbvodxE=)
2: VMxe0uGWpSo7MC38AuPyARm4ELw.roa (hash: tdke4bTnyhBCQowtj7hvI4mzPoyXG8N51jhjgyuQaj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:72:79:79:3b:c3:83:74:c3:f2:cf:39:28:84:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b92ec2b0e32cb7b2db13e3765298d6d2e585cd
Validity
Not Before: Nov 4 13:00:34 2025 GMT
Not After : Nov 5 13:00:34 2025 GMT
Subject: CN=f589afa99823070f008e87336348fd925ea0990a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:23:fd:62:d5:37:1b:7e:c9:57:bf:40:cd:
be:c3:5a:c4:0b:df:b4:3b:1c:ac:47:2a:60:e5:1c:
1d:be:b1:65:3a:90:d6:c6:46:d7:fa:34:db:2e:15:
39:d1:fd:10:9b:81:0e:fd:01:13:7b:2e:14:77:eb:
0b:a8:53:cd:bf:6a:8b:cd:dc:63:76:59:d6:ea:6c:
a6:c0:08:13:48:4e:a3:e4:37:01:cc:66:49:06:da:
c7:cb:e6:60:1a:c5:63:27:98:54:25:97:8e:4d:e3:
7b:e8:5f:0b:95:42:18:c0:61:78:1b:35:0b:59:4d:
5d:01:55:5a:36:06:99:67:e8:36:85:ce:a0:95:d1:
40:44:00:3c:b6:ac:e4:77:ee:9a:6e:91:42:b4:d8:
a9:18:50:51:a5:df:22:ea:b5:32:0d:93:11:2c:76:
08:46:9b:a1:f3:61:5d:f7:bd:ea:19:5b:8c:10:3c:
87:59:19:74:8d:5d:cd:28:23:2e:63:f6:40:92:7d:
02:50:23:b3:23:4c:81:d5:c5:01:2e:f7:bf:fa:fb:
1c:74:c9:ad:65:fd:e0:56:b6:7d:6e:6c:f8:79:51:
ed:e7:01:6d:59:de:10:3f:ff:20:c5:04:9f:c6:1b:
e3:3e:a5:39:51:5c:d2:ad:54:53:c1:c9:9c:2c:f2:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:89:AF:A9:98:23:07:0F:00:8E:87:33:63:48:FD:92:5E:A0:99:0A
X509v3 Authority Key Identifier:
keyid:43:B9:2E:C2:B0:E3:2C:B7:B2:DB:13:E3:76:52:98:D6:D2:E5:85:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7kuwrDjLLey2xPjdlKY1tLlhc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/89286f-0e59-4626-a617-602151522a09/1/Q7kuwrDjLLey2xPjdlKY1tLlhc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e9:8b:b5:1b:2f:97:16:0d:9f:81:29:0e:4a:a5:bd:45:a7:
99:bc:0f:16:a6:c9:24:91:d0:cd:0b:4c:06:29:37:59:c3:06:
57:ab:8c:07:c9:23:64:1a:cd:f5:d1:36:2d:cd:bf:c7:04:28:
4b:0f:bd:98:ac:fe:5e:8b:02:eb:60:ee:27:28:a3:4b:76:01:
e2:d6:2d:66:0c:5d:44:ad:aa:6b:76:04:a9:6b:50:b5:70:6f:
58:3c:a1:cf:92:30:3f:9b:4d:1e:a0:53:51:07:20:63:80:a5:
be:11:e0:88:a9:55:1a:25:b5:af:8b:75:0c:fb:b5:f8:ae:a2:
32:2f:13:60:40:fb:0a:24:ca:d9:1f:f4:0b:c3:57:36:bf:b2:
36:92:12:e1:ee:a5:ec:ed:bd:1d:11:d7:0f:29:ce:5c:28:38:
3b:3a:72:05:0e:3e:08:2b:72:d2:bb:bc:5d:b2:f4:22:77:e7:
07:ee:d1:e7:e3:6b:5d:d0:44:4d:ae:43:13:23:07:82:af:51:
3d:e9:6a:dd:ba:7b:e8:31:82:15:06:87:7a:99:67:10:e1:5b:
f2:a8:b5:12:68:4b:20:f3:62:ee:d1:40:5c:12:3b:de:4a:9c:
ef:11:1f:7e:bb:48:67:16:69:4e:02:cc:13:6a:f4:ac:ba:f3:
27:8a:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:08 2025 by rpki-client