Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier: mcaWj1YFvxCwOXj+0dCiTSUIzS/zaoBmwxNtoEBrytE=
Subject key identifier: 48:F7:BF:7E:EA:59:E5:13:2C:E5:03:C2:35:5B:7F:8B:F4:9E:1F:7C
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial: 019A5564B0C48B7AF4EB88F49699B65BC044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number: BB
Signing time: Wed 05 Nov 2025 19:00:53 +0000
Manifest this update: Wed 05 Nov 2025 19:00:53 +0000
Manifest next update: Thu 06 Nov 2025 19:00:53 +0000
Files and hashes: 1: BrmKnel9vz9ZJoRYmUMmfv_fkdA.roa (hash: iTZbysj75EFXeStqkEh3kRfDOJLprFh8UOBLsS70Pok=)
2: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: s+Uef7iJiTTLHjr7nWyFcnSmu/q3ZhneKMMI8BytrCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:b0:c4:8b:7a:f4:eb:88:f4:96:99:b6:5b:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Validity
Not Before: Nov 5 19:00:53 2025 GMT
Not After : Nov 6 19:00:53 2025 GMT
Subject: CN=48f7bf7eea59e5132ce503c2355b7f8bf49e1f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:16:2e:0c:d0:97:3b:57:49:f8:c4:09:70:01:
18:fa:8a:d1:08:e4:f9:51:f3:1f:a8:92:21:82:7c:
a9:28:02:96:4f:c1:60:23:da:77:3b:33:20:29:bd:
ce:bd:2c:68:80:03:82:9a:4a:1c:e2:5a:94:40:99:
1f:53:2c:65:7b:82:93:12:7b:90:f4:ae:d8:5b:b8:
d2:8c:53:7e:b6:5c:0e:45:ec:c8:09:45:3c:27:ac:
e9:f2:96:3b:01:a8:f0:07:66:ba:35:2d:ab:7e:4f:
e9:08:88:6d:87:85:f6:90:f8:de:fd:fc:09:ff:cc:
36:62:d9:83:9a:4a:4f:bd:c9:c0:75:9c:92:d9:20:
d1:4e:86:b8:2a:c2:d8:d0:bf:e9:79:85:e3:0a:e4:
d7:bc:06:1c:bc:4d:8a:48:fe:5e:da:ab:98:1d:3f:
da:cf:2a:27:04:49:04:8c:8c:29:7a:f9:0b:d1:fd:
f8:72:35:fb:74:b4:32:20:e8:78:d4:0d:36:78:08:
31:33:b2:59:13:b5:a5:ab:dd:2a:58:75:93:ff:34:
7f:34:9c:39:f4:66:86:0f:7d:9d:86:a9:1d:ae:bc:
57:d6:b6:c6:e8:b6:0a:9f:62:2c:2c:0e:15:08:81:
04:76:02:ec:51:61:fb:4e:5c:5e:af:b1:fc:f8:3d:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:BF:7E:EA:59:E5:13:2C:E5:03:C2:35:5B:7F:8B:F4:9E:1F:7C
X509v3 Authority Key Identifier:
keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:27:8c:ac:39:67:6d:02:70:3c:ca:3a:31:8b:89:c7:b7:d9:
10:59:12:bc:f2:5a:24:8b:92:0d:18:89:f8:74:0b:cb:91:1e:
4a:f6:f8:7d:10:70:88:7a:23:f4:07:2d:1e:ac:97:1d:33:f1:
10:e0:21:82:9c:b3:c0:37:da:dc:50:45:a1:d6:09:d4:e6:77:
eb:94:59:69:be:37:d5:b5:0d:6f:47:34:d8:a7:b9:ff:72:12:
a5:27:7d:62:ed:23:b2:98:bc:00:74:40:27:3b:f7:6a:b5:0c:
d3:2b:39:77:4d:a3:15:df:a9:b9:0c:5c:34:72:6a:45:90:e9:
9b:bd:2d:95:e5:61:84:b1:b3:93:5b:15:53:2f:b6:36:c6:b1:
0a:9e:d1:77:b0:1a:0f:7d:d6:60:aa:c6:1f:da:5f:93:c2:2f:
52:4a:d0:ef:48:14:e4:37:56:5f:8b:38:7b:6d:50:55:7c:eb:
5f:42:00:40:d3:37:27:1c:03:c2:57:34:28:4c:39:dd:82:d0:
74:d0:54:d9:78:fa:fc:00:d1:7a:07:11:4b:ec:6a:61:d1:7a:
e1:4d:b7:af:95:6a:49:1d:b1:66:86:5f:8d:41:41:6e:89:48:
9e:77:28:48:71:69:d5:d2:89:9c:6f:84:84:9e:27:d4:dc:e7:
51:21:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:15:11 2025 by rpki-client