Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: FfOKH5qjZEQUAOaLJy0OFC9Q3YE31p2eWDDB/UXVTZI=
Subject key identifier: 49:AE:A8:A6:4D:FC:DD:3C:C0:4D:AF:E6:09:58:D0:67:E4:06:20:71
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 019A5263A63203F44BC813251F9A6E7222B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 1654
Signing time: Wed 05 Nov 2025 05:00:53 +0000
Manifest this update: Wed 05 Nov 2025 05:00:53 +0000
Manifest next update: Thu 06 Nov 2025 05:00:53 +0000
Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: LVrXS/66IYhihwSRgn9dMcsnQxYIXfx+2F4KSO3Q+fY=)
2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:a6:32:03:f4:4b:c8:13:25:1f:9a:6e:72:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Nov 5 05:00:53 2025 GMT
Not After : Nov 6 05:00:53 2025 GMT
Subject: CN=49aea8a64dfcdd3cc04dafe60958d067e4062071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:ed:a3:9e:2b:8c:d7:35:07:2e:35:a5:84:
4c:42:3c:48:e4:8c:90:82:5b:b3:28:f5:c1:ae:24:
47:de:ec:d5:f1:0c:cd:1c:33:8b:a5:a6:27:f5:8f:
92:9c:45:a0:31:c0:57:fb:46:ad:be:09:f4:3a:19:
d3:66:7b:b4:d1:2f:f9:02:e9:38:7e:ca:ce:3c:38:
b5:34:9d:50:15:69:0e:ed:35:51:1a:2f:3b:f1:15:
29:60:c6:38:31:fe:8d:c9:0b:77:04:f6:2d:1e:f2:
2b:4d:ce:79:14:c1:15:6e:64:f9:12:2f:3d:d1:ba:
2f:a6:1f:08:69:10:a9:8c:67:74:ac:70:5d:fd:15:
c4:ba:e8:c7:88:d2:b7:cd:37:05:cf:a1:c0:63:eb:
6d:b4:bb:70:65:52:e9:63:91:29:1f:a7:7f:4f:08:
d1:d6:ba:87:f0:0e:a3:40:34:2f:e2:5c:07:f9:6d:
37:15:8f:85:b6:64:3d:5a:34:9b:be:19:a5:ec:73:
fd:c3:4c:81:d6:ed:d4:7d:e2:6f:8b:cc:81:fc:e5:
ce:e7:b3:12:78:b0:ab:9c:bd:64:d3:0f:38:da:52:
5a:31:cb:53:b7:ba:67:01:d0:d3:64:f1:26:48:a5:
af:75:8a:d3:47:bc:03:90:9a:ff:df:df:99:df:0c:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AE:A8:A6:4D:FC:DD:3C:C0:4D:AF:E6:09:58:D0:67:E4:06:20:71
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f1:2a:65:af:9a:1e:68:f7:bb:ec:84:c6:78:12:e2:51:ca:
1a:ac:8e:54:c3:cf:7e:af:4c:bb:d5:e4:fc:3b:c7:d5:ca:3f:
d0:f0:d5:3e:63:1a:76:f3:81:79:84:f0:e8:be:d8:f0:6d:db:
f3:33:e7:17:6e:70:8f:cf:2d:87:d7:98:8f:58:f1:7f:50:62:
5c:03:92:98:da:89:55:e4:a1:15:0d:f8:e4:51:15:90:97:9d:
31:92:4d:b2:10:ba:eb:b4:14:37:3f:21:e1:d9:b8:43:54:f2:
f4:a3:4d:16:72:35:41:c3:2c:f7:61:55:eb:75:ee:31:3c:03:
1a:2a:4b:a4:c1:38:4c:8c:dd:ea:d8:cf:25:d0:12:6f:fe:fc:
02:ff:28:f1:0d:23:4e:46:dd:3a:68:a3:14:f4:74:23:7d:8b:
a1:fe:e2:af:d1:c9:2d:d6:8b:4a:96:b1:4b:d7:48:9e:da:56:
6c:c1:cc:40:1d:c3:3c:0f:b4:d8:a8:e7:f8:31:18:a4:b1:6a:
ea:05:e4:30:71:a1:a3:c6:86:98:3a:97:8d:08:85:25:a4:0c:
d0:ef:b2:6b:dd:5d:d8:f6:0c:95:bf:6f:8f:57:94:3b:4b:fd:
05:db:67:e9:ef:7a:97:f8:c7:3d:5e:62:25:9d:fd:a3:1b:16:
33:cc:06:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:45 2025 by rpki-client