Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
File: Q1w_GpeQPnlikqKsenjUGxwh24U.mft (raw, json)
Hash identifier: Pp0UIQVRgsrcP+H+bJ0/5JfnO0W5sjqzxDVta6gZGgQ=
Subject key identifier: F2:18:1A:0B:2E:07:6C:DC:FB:49:04:DA:56:E5:65:46:1B:CA:77:95
Authority key identifier: 43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
Certificate issuer: /CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Certificate serial: 019A4E4FF20C6B8ADCF07476754BA9BAB9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
Manifest number: 1035
Signing time: Tue 04 Nov 2025 10:00:53 +0000
Manifest this update: Tue 04 Nov 2025 10:00:53 +0000
Manifest next update: Wed 05 Nov 2025 10:00:53 +0000
Files and hashes: 1: IB6At0eMkw1jy1fdpcIgarxWKQ4.roa (hash: rOQggKg6yCYoTFHyozZzxf3+Jia2rL6WXiIW/P0HCuo=)
2: Q1w_GpeQPnlikqKsenjUGxwh24U.crl (hash: Yh72AJ8KRQ5rajkHi9OofKkHLGBYSUHPr3YRqX0l1GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:f2:0c:6b:8a:dc:f0:74:76:75:4b:a9:ba:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435c3f1a97903e796292a2ac7a78d41b1c21db85
Validity
Not Before: Nov 4 10:00:53 2025 GMT
Not After : Nov 5 10:00:53 2025 GMT
Subject: CN=f2181a0b2e076cdcfb4904da56e565461bca7795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:a8:65:34:dc:25:81:e1:26:72:d6:b3:a7:
93:1d:0b:df:bd:d5:1f:83:cd:a4:81:aa:e8:81:90:
36:f3:df:1e:a1:3b:ec:e0:7d:80:9a:12:80:f6:1a:
67:bd:fe:a1:a3:c9:24:57:42:82:f7:d1:4a:4e:3b:
63:46:ae:07:88:ff:72:e1:fa:b8:f4:32:37:bf:74:
8e:9a:07:af:23:92:13:8a:81:68:4d:7d:c8:00:21:
2e:30:6b:e6:a7:5a:c4:bd:46:6f:57:32:05:8d:80:
6b:36:86:2e:cb:d9:6e:d9:7b:f8:63:20:48:66:e9:
ab:ef:0d:be:42:1e:12:f2:4d:58:ea:6b:2b:32:6b:
50:06:c9:c1:5f:8a:3b:7d:f4:35:e1:79:ff:ac:6c:
f7:11:a1:e8:05:fa:a6:05:df:02:d0:16:ba:0e:11:
00:02:c4:d0:f8:8d:09:55:8c:7c:f7:17:31:a8:3d:
2c:fa:0e:b3:b8:61:11:e0:4f:e9:63:f7:8b:b6:e0:
2e:3c:1c:af:48:59:ea:a5:74:f7:19:43:ab:33:cf:
33:b4:20:64:db:bc:77:fc:3f:c6:c2:5b:26:a7:38:
fb:af:0e:19:7e:77:d3:18:06:c9:42:28:a0:de:3b:
06:79:7f:c2:60:a9:0d:fd:fe:87:0b:3e:33:57:e9:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:18:1A:0B:2E:07:6C:DC:FB:49:04:DA:56:E5:65:46:1B:CA:77:95
X509v3 Authority Key Identifier:
keyid:43:5C:3F:1A:97:90:3E:79:62:92:A2:AC:7A:78:D4:1B:1C:21:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1w_GpeQPnlikqKsenjUGxwh24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d8adbe-dcbe-4c27-9671-dbdeb3d5360b/1/Q1w_GpeQPnlikqKsenjUGxwh24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4b:b1:30:84:08:c7:d9:35:32:b4:90:60:a3:e0:6e:32:68:
47:c4:8c:cd:58:76:54:7f:3d:e3:9b:2f:42:89:ac:72:bc:41:
99:eb:03:df:f8:32:80:e4:9e:a7:9a:95:b8:ba:a2:07:72:9e:
13:ab:b0:a7:45:ae:89:5e:12:36:ad:eb:22:15:ff:c9:15:0b:
d2:7c:cd:7f:6b:1d:08:86:ea:0e:54:d8:5b:79:ea:5e:95:42:
a3:8a:a0:d1:3c:a6:54:54:30:95:fa:f6:9d:3b:56:6b:2d:f6:
a7:9f:18:36:b8:4c:2b:4f:03:41:a8:5b:7e:e3:6e:da:55:74:
8f:8b:d8:b3:b0:92:b9:25:e6:b8:30:ac:87:db:0f:98:0a:58:
1f:47:29:6f:32:98:97:a2:55:b1:f8:26:1c:8d:5d:2b:75:77:
40:c9:30:0b:ec:b3:2f:14:13:f6:5f:d0:24:83:1b:69:59:df:
d2:d1:5f:bb:05:73:56:52:ad:ea:b1:b6:4d:7c:40:70:2a:11:
08:d3:50:e7:d8:a9:a2:d7:cb:65:ab:e0:6f:cb:f2:13:e6:36:
9b:84:22:56:ce:87:3b:b3:e0:51:d6:36:ce:98:d1:f2:ae:01:
23:25:1c:f7:cc:21:ff:03:49:b4:25:2e:dc:86:ab:ba:39:30:
4f:0f:25:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:55 2025 by rpki-client