Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
File: _l28QbEed7xEvSxzVVS1tCWNDDM.mft (raw, json)
Hash identifier: Q7n14lwBYLrp1ycInODLJJPIcqepGy5u2G5dTvyTlOU=
Subject key identifier: 71:61:92:DF:0F:4C:FC:07:D2:BC:5D:70:AF:43:90:E3:3A:B5:21:F9
Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Certificate serial: 019A4D3CCB0BEDE813135478A3EA2F4DED11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:20 +0000
Manifest this update: Tue 04 Nov 2025 05:00:20 +0000
Manifest next update: Wed 05 Nov 2025 05:00:20 +0000
Files and hashes: 1: QQYnKZZEKh0t39rLRqceu8xA4vU.roa (hash: PxxqnNy49Cu4ltRHNTmmrI+SwKZQqPOvx1a9kq3y6xs=)
2: _l28QbEed7xEvSxzVVS1tCWNDDM.crl (hash: yeuYERbQq1PIb93ZV1VSKVapWFNsRmFrJSgsspH5ofY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:cb:0b:ed:e8:13:13:54:78:a3:ea:2f:4d:ed:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Validity
Not Before: Nov 4 05:00:20 2025 GMT
Not After : Nov 5 05:00:20 2025 GMT
Subject: CN=716192df0f4cfc07d2bc5d70af4390e33ab521f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:a0:96:f8:cd:19:bc:e0:64:ac:9b:68:ce:
6f:16:9c:41:b3:69:a9:34:70:ef:82:bd:9d:d8:c8:
fe:c7:cd:a1:85:3c:80:dd:21:c5:4b:98:68:a6:15:
ac:e0:97:4e:6d:a3:f2:35:3b:74:0e:a6:31:0b:d8:
a9:e1:c5:b0:0d:d8:3c:3c:80:4b:5d:a4:81:ec:cb:
47:3b:8b:e5:64:0a:91:36:d0:5e:cd:cc:c5:8e:9f:
98:43:8f:2f:f5:05:3a:33:0d:86:69:27:95:e2:7e:
bd:85:7b:5e:49:fe:95:e1:cd:9f:a8:53:4e:1c:80:
c2:11:a9:7a:bd:b8:83:5a:7c:d6:bf:6b:53:30:07:
30:82:bd:e1:df:2e:f0:49:fa:92:34:e1:3e:20:57:
21:c3:33:51:0c:59:65:f3:68:70:29:be:51:63:fa:
9f:61:31:27:3b:b6:86:7f:ec:f5:91:91:40:59:a0:
32:f9:a6:8c:4c:8f:e4:35:66:d0:63:3c:e0:c2:49:
fc:9d:01:ca:43:ca:98:ce:20:52:12:df:37:9c:7d:
e8:c8:ea:80:2b:2b:85:6c:b5:fe:f4:6b:cf:2c:c0:
e4:c3:ad:99:36:d5:1e:5d:1d:cd:33:93:2c:04:f0:
79:c2:b6:8e:4f:bd:79:7f:8f:e5:f6:3b:74:0a:5f:
f4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:61:92:DF:0F:4C:FC:07:D2:BC:5D:70:AF:43:90:E3:3A:B5:21:F9
X509v3 Authority Key Identifier:
keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:35:3a:64:03:45:d9:0b:02:1e:dc:61:74:f3:0d:d3:f7:d5:
12:1e:4d:10:e1:2c:0c:9d:b6:29:88:08:dd:63:3e:cb:1c:ab:
ba:fb:1e:3b:c1:94:cf:99:be:c5:84:11:82:b5:12:b3:2a:e8:
b3:2d:9e:1f:cb:db:cf:25:fd:32:41:49:89:c4:5b:b9:98:2b:
69:e6:47:3c:41:9f:25:a0:2d:ba:2f:a7:a8:24:0f:27:ae:b0:
21:fc:cd:96:03:e0:bb:99:8a:1d:af:cf:75:24:71:4b:dc:19:
1e:cf:07:1d:c6:56:2d:5c:d4:f4:5c:33:b3:24:cf:c2:9d:1b:
a1:ee:30:3f:8c:1a:57:f3:95:34:28:35:72:74:ce:16:38:2c:
5a:74:86:4a:3e:48:0c:b4:d1:44:0c:ca:12:8a:80:2d:2d:a8:
66:f6:8d:d9:b3:39:9c:8f:40:d4:77:fd:a8:09:f8:cc:81:cf:
fb:74:db:a6:9e:04:67:1c:68:90:e3:39:bc:07:07:b9:6a:89:
27:94:6f:f4:1d:6d:09:d3:b0:8a:db:94:6a:cb:41:5c:47:88:
5e:57:6e:1b:86:46:71:ae:2f:e1:ef:42:ac:26:99:7d:59:86:
8d:e3:06:11:79:34:71:88:4c:e3:5a:2c:d1:74:19:ff:cd:4e:
8c:6f:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:07 2025 by rpki-client