Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json)
Hash identifier: PargaAsJ5nR38FfwZ6FpofN6TgJ7hIn2laA0R8Kqyi8=
Subject key identifier: C1:F1:3E:08:F0:B2:79:3D:FB:77:FE:F6:C8:C6:A0:16:51:CE:8D:D6
Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Certificate serial: 019A4D3CDECCFD34839335F0818524392BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
Manifest number: 0C7A
Signing time: Tue 04 Nov 2025 05:00:26 +0000
Manifest this update: Tue 04 Nov 2025 05:00:26 +0000
Manifest next update: Wed 05 Nov 2025 05:00:26 +0000
Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: Igv2RkCUjHY0MSH9dnBOBYcKpbYcj5ZYa5p/ulvOR48=)
2: fFstVPrb_3K-jl7g58_b4ihHTfY.roa (hash: sDN8YMAsFynzsUb+KhP7tCE7b4tst1zO6K3vmsmzSlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:de:cc:fd:34:83:93:35:f0:81:85:24:39:2b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207
Validity
Not Before: Nov 4 05:00:26 2025 GMT
Not After : Nov 5 05:00:26 2025 GMT
Subject: CN=c1f13e08f0b2793dfb77fef6c8c6a01651ce8dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:86:76:20:57:21:33:76:02:15:4b:51:7e:
86:f4:ba:10:2b:54:37:83:2b:0c:50:00:f9:b5:5d:
80:03:54:77:ca:0d:26:cf:bf:25:7b:0e:17:c7:bf:
c0:34:ee:1b:f9:bc:00:84:3a:ed:9e:35:78:c6:a9:
c8:79:5a:ab:c2:e5:8c:84:c0:51:a7:4f:68:2b:db:
b4:c0:4e:8f:18:97:58:0f:61:ae:bf:c2:ca:d2:d3:
7d:eb:94:c2:1e:f9:b2:29:f0:c0:e0:ca:b6:15:a6:
39:df:2b:a0:35:66:24:c7:65:ba:fa:9d:db:79:95:
42:96:30:1a:d3:77:15:05:1c:2c:0b:28:99:c2:73:
57:2e:26:73:36:5b:20:d0:87:b0:7b:e3:8c:7f:58:
95:26:9f:95:ec:a4:2c:c9:0a:9f:9d:a8:00:38:f0:
ce:fb:50:89:80:49:19:25:a6:64:9e:98:42:45:5a:
10:58:c6:7e:37:be:3f:c2:f4:68:06:d6:34:29:f4:
cc:c3:f8:ae:8a:ff:22:af:57:b4:50:c4:3b:b1:bd:
24:7d:d2:10:94:19:53:3f:bc:5b:35:e5:50:c1:b2:
c7:1a:e3:d0:7c:32:e0:54:96:87:8a:f8:e5:57:f1:
23:b7:70:00:ec:2f:19:f4:9f:18:b0:d7:3e:ed:8b:
81:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:3E:08:F0:B2:79:3D:FB:77:FE:F6:C8:C6:A0:16:51:CE:8D:D6
X509v3 Authority Key Identifier:
keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8b:38:f9:25:0d:3f:f6:f0:69:d7:89:50:b0:f5:22:a5:e1:
12:94:b5:fd:b2:3a:6c:d3:60:ae:8d:ca:ed:5c:aa:41:43:b0:
7b:8c:bf:df:89:e8:b9:bf:db:32:aa:97:1e:d2:15:ee:20:a6:
6d:91:c2:c3:07:e1:5e:2e:4c:7c:aa:65:fd:fd:3b:2b:b4:a1:
1e:e1:5b:f9:6d:b6:b2:73:d9:7f:b3:ff:e1:80:cd:6c:57:d6:
61:5b:de:32:a5:96:4b:a1:c5:b3:82:79:cb:65:f2:80:96:20:
af:70:d9:5e:a2:94:1b:2b:f2:d4:21:6a:ab:1e:76:93:52:46:
29:03:5f:3a:7f:83:8e:af:fd:4f:cb:2d:3d:17:9d:cb:b0:a6:
8f:1d:96:4c:8c:b8:ce:cc:df:ff:81:30:bf:76:bd:12:fb:b0:
75:3a:5a:cb:8f:81:20:8a:eb:76:ee:04:1d:96:37:9d:2d:64:
d8:25:f1:bd:b5:64:c2:47:21:21:9d:2c:7e:1b:09:34:41:35:
76:b1:bd:d0:ee:fa:9f:a9:04:ed:7c:e6:09:f3:0a:8c:53:1c:
87:56:c6:33:fa:b2:ff:ce:64:a4:a7:f1:85:f8:87:55:5f:da:
b6:a1:7f:e6:8b:c2:d9:7d:ea:56:b7:a4:1d:64:e1:2b:9c:b4:
b9:7b:eb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:18 2025 by rpki-client