Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json)
Hash identifier: DEmlbhyT2B57h2r4132DAM06zH59LggybpJTxRm+Pag=
Subject key identifier: AF:A8:06:55:99:CD:DD:35:A7:0C:4A:23:AC:81:E3:6E:9F:F2:B4:88
Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027
Certificate serial: 019A4E86C08BC4CE5C64C2BF738316F00125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
Manifest number: 0E9A
Signing time: Tue 04 Nov 2025 11:00:45 +0000
Manifest this update: Tue 04 Nov 2025 11:00:45 +0000
Manifest next update: Wed 05 Nov 2025 11:00:45 +0000
Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: 2233j5Fax3R5lNzGKogfhqALi1l0x28oTmSL1q1YjIg=)
2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:c0:8b:c4:ce:5c:64:c2:bf:73:83:16:f0:01:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2abab75e746db1ecaa998759900399485093027
Validity
Not Before: Nov 4 11:00:45 2025 GMT
Not After : Nov 5 11:00:45 2025 GMT
Subject: CN=afa8065599cddd35a70c4a23ac81e36e9ff2b488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:8e:47:f3:94:b6:73:5b:3d:39:53:2a:ac:
3d:58:ec:b6:3f:b0:b5:7a:9f:85:dc:0e:d4:1a:87:
9b:cb:0e:fd:6b:89:c2:00:2f:7a:d0:d5:f0:dd:fb:
63:d2:c2:d2:bd:15:80:17:a4:a4:11:c2:1d:e6:81:
27:e5:96:c1:27:01:b7:6c:ca:8b:f7:90:f0:51:7f:
0a:48:0f:f0:dc:23:fe:78:2d:50:2a:5f:11:4b:a2:
70:ef:d0:55:82:a9:79:b7:54:de:7d:1d:43:71:43:
ba:c0:b8:a0:f2:e9:f6:8a:b4:33:70:3f:0c:5c:ac:
0f:17:b5:b3:0b:85:04:76:14:97:d1:9a:8f:9a:55:
d4:ca:2b:b3:06:62:32:aa:ea:e3:b8:a2:01:4c:dd:
fd:ec:89:e0:14:12:8e:92:b7:2a:c0:4a:c1:e6:aa:
34:e0:f5:c0:46:5e:b8:ba:c8:1f:d1:f9:98:e7:8a:
7b:c4:31:a9:f1:16:ac:18:75:da:33:fe:4e:2b:a3:
12:4a:a2:79:f2:12:ee:65:a2:87:bd:32:04:57:63:
0c:79:90:d3:e5:b2:87:c5:cb:80:65:c3:1b:6a:5c:
5f:6f:9c:39:0b:3f:8a:61:75:7d:be:88:e4:27:1c:
4a:d5:a1:0d:47:a3:5c:13:90:2e:47:bb:b8:d8:a4:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A8:06:55:99:CD:DD:35:A7:0C:4A:23:AC:81:E3:6E:9F:F2:B4:88
X509v3 Authority Key Identifier:
keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:31:40:18:4f:87:88:87:19:83:11:88:f7:d5:6c:c8:98:8e:
3f:c7:92:9d:d1:54:44:53:c9:17:22:08:5f:09:f9:93:86:cb:
4c:f4:cf:94:ca:3d:9c:be:3a:c4:5a:c4:7d:5b:07:40:8e:26:
8b:6c:58:af:3e:54:12:14:d7:4f:70:fd:b7:eb:6d:1c:25:34:
09:15:b5:ef:91:76:a3:88:6a:b2:60:e6:fe:b4:fd:47:41:78:
e9:39:5d:ff:05:23:fe:a1:3e:1f:5c:fd:1b:89:96:ad:73:17:
88:6b:17:6a:46:d5:08:de:6f:89:fa:a0:8e:c5:08:12:85:4e:
7a:3f:1f:66:69:00:ca:bc:a2:54:e9:2f:94:ef:93:02:f5:31:
ff:9d:50:b1:1a:1e:7a:45:58:a4:09:56:4c:95:c8:3d:a3:df:
0a:a8:72:ae:98:be:54:a6:60:bc:0e:88:93:1d:10:bb:7b:16:
12:7c:4f:86:43:49:2a:df:f7:4f:9e:81:16:17:04:84:87:ac:
7c:33:f8:ac:03:66:7f:99:30:7e:c9:0a:8d:dd:10:49:fb:08:
ba:bd:24:ae:2d:0c:6c:2b:e6:f8:02:9c:74:6c:2b:80:65:38:
3c:db:1d:a0:7b:a6:62:bf:cd:76:04:84:04:35:51:8b:19:20:
20:20:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:22 2025 by rpki-client