Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: LNzKNKErwy3D9HBcbJ8cU3usXXulf0gzIdLirtKGPVQ=
Subject key identifier: C6:44:C1:A4:36:54:1D:8D:36:95:85:66:28:02:7C:C0:2A:0C:65:ED
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 019A5074B3759EB1D1559672B1BE833A692F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 20:00:16 +0000
Manifest this update: Tue 04 Nov 2025 20:00:16 +0000
Manifest next update: Wed 05 Nov 2025 20:00:16 +0000
Files and hashes: 1: QR-XfIkw00mD51XnwCvsG-9T89w.roa (hash: a0XDBbD/tQURYMLpVooHaNMf9NXfcD/rGt0gapo+gwA=)
2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: pcF6CTG+oUqwo+Os3LN3rONyS0dSXxCCsKj0bPyh6Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b3:75:9e:b1:d1:55:96:72:b1:be:83:3a:69:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Nov 4 20:00:16 2025 GMT
Not After : Nov 5 20:00:16 2025 GMT
Subject: CN=c644c1a436541d8d3695856628027cc02a0c65ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0f:84:97:55:be:2c:db:73:29:54:8b:ee:d6:
20:cd:06:4e:3d:bf:4f:7d:0f:c9:80:1d:0c:be:5e:
55:a3:31:f6:d6:5b:71:87:56:28:99:00:3b:61:40:
e8:b7:8b:18:db:ef:e0:de:fc:f0:bc:20:13:57:26:
cc:aa:dd:c9:bb:5f:28:90:43:ae:b2:38:d5:a4:9a:
58:96:fc:3e:f5:d8:4a:e1:de:34:3a:88:8c:6a:de:
6f:34:2f:d4:92:2d:2d:a5:9e:37:63:c7:d7:a9:f6:
5d:ca:ba:37:54:07:5e:25:63:f1:ff:cf:53:61:2b:
bc:f7:a0:26:28:0d:3e:85:e8:08:3f:5d:f0:c1:93:
fd:1d:cd:c6:3a:51:13:40:a6:dc:b5:ec:16:d0:d8:
98:f9:6a:14:8a:ce:97:76:38:4c:2f:21:d9:e8:63:
db:3d:36:09:c9:1b:b4:25:91:0d:bf:54:c6:01:b3:
c2:20:75:c6:0b:06:79:34:09:4e:7f:f8:b7:c2:29:
81:df:78:d0:35:d2:0c:cd:d8:cd:31:f2:ef:ab:d7:
05:08:ea:51:dd:38:6f:46:82:80:c9:f1:18:ac:a4:
d4:58:22:fe:04:a0:d0:a6:5f:65:b2:71:79:ec:ea:
0b:f8:32:da:58:ad:36:c0:cd:86:29:ff:25:da:f7:
b8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:C1:A4:36:54:1D:8D:36:95:85:66:28:02:7C:C0:2A:0C:65:ED
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:30:d7:67:52:68:6c:07:ad:be:7a:35:3f:1f:3c:2d:b6:
1e:ba:b2:92:42:29:e7:e3:14:c5:e9:97:24:b6:65:86:a2:9d:
bd:39:e9:26:5b:71:25:02:c2:59:09:dd:0f:7f:11:3e:b5:2d:
ed:59:26:bf:91:50:8d:ce:97:54:42:4b:ed:af:58:aa:f3:dd:
fb:3b:5d:dd:f0:a3:91:e4:1f:bb:8d:05:cb:18:b6:95:64:3d:
1d:8a:fa:96:a4:eb:27:1d:f7:c0:06:a5:b4:1f:84:42:e5:f0:
ef:57:1e:df:c5:5e:4b:06:9a:6c:77:1f:09:2f:0d:28:ea:ed:
e8:fc:79:d0:7f:f4:5f:ae:44:85:06:fd:13:ff:64:c0:7a:72:
82:6a:dd:14:69:70:d3:a0:da:6c:e2:6e:83:a3:56:c5:1b:ac:
0a:a4:b1:a0:16:e2:69:45:dc:26:6a:a6:b3:68:d6:9f:43:1f:
7e:71:bd:47:b4:6b:a4:a1:8e:11:8a:73:f4:3a:e7:ef:9b:2e:
53:22:72:bb:81:84:71:ee:ce:42:82:87:6f:0b:6b:d0:33:55:
3c:56:ea:54:6b:cd:61:f4:28:34:49:5c:a2:11:30:50:e6:1d:
c9:54:c4:28:80:7c:40:9c:50:c1:48:e9:5f:21:d9:99:c9:21:
d0:b1:c1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:40 2025 by rpki-client