Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
File: _Q7wQPukW857BxY0lc316FB3kZ0.mft (raw, json)
Hash identifier: g7SHGgyn+ljY81Jxc89FPbKWLBWS+8ySRf2oE0KFnyg=
Subject key identifier: 02:C4:39:15:07:77:24:C8:C9:23:9B:89:D2:22:62:D4:D7:60:B7:5F
Authority key identifier: FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
Certificate issuer: /CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Certificate serial: 019A5263250DF4A299A1F67E9193378EEDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
Manifest number: 0DA5
Signing time: Wed 05 Nov 2025 05:00:20 +0000
Manifest this update: Wed 05 Nov 2025 05:00:20 +0000
Manifest next update: Thu 06 Nov 2025 05:00:20 +0000
Files and hashes: 1: BrNhX11GN3gzWV-434wlzWriATQ.roa (hash: e/gkiYTr4M+ZdV4GBEAw4FBFr5Cgb0NfH0gUAD5dMJY=)
2: _Q7wQPukW857BxY0lc316FB3kZ0.crl (hash: vZ5qhgb4dQ8Y9Q/JriD+vb8tyZntQHgmYF9cYDigJhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:25:0d:f4:a2:99:a1:f6:7e:91:93:37:8e:ed:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0ef040fba45bce7b07163495cdf5e85077919d
Validity
Not Before: Nov 5 05:00:20 2025 GMT
Not After : Nov 6 05:00:20 2025 GMT
Subject: CN=02c43915077724c8c9239b89d22262d4d760b75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:55:27:cf:7d:24:75:0a:b0:3f:ed:a7:40:a0:
24:e7:2c:75:89:60:98:a7:16:49:6e:39:bb:86:c7:
a1:cc:70:08:2b:bb:05:92:69:84:41:a7:a7:99:68:
a1:7c:0d:5d:9f:0a:b5:2f:25:d8:dc:05:11:76:26:
30:b5:0e:b0:9c:e2:e0:07:31:2b:58:4e:6f:f7:88:
c5:4d:e2:85:4f:e4:82:73:89:03:47:b9:ff:35:9d:
7e:2c:19:f7:49:53:22:ee:43:85:3f:52:9d:bb:bf:
38:88:a5:10:cc:a1:fc:0c:fb:5d:de:e2:38:da:38:
f4:3c:c4:f8:18:83:dc:6e:d1:08:12:e9:fa:bc:7b:
13:91:18:7b:a4:5b:49:35:d5:b6:08:25:fb:a9:fb:
77:e1:27:8e:58:ef:a5:ca:d4:40:e4:f8:a4:1c:53:
04:9c:62:65:4a:ae:3c:af:f8:f3:77:0a:db:b4:57:
73:f1:d2:d2:6d:9e:0f:6e:a3:69:56:fe:c9:b2:f9:
cc:17:2e:89:2a:b2:67:da:6b:5f:b5:21:0f:20:85:
3c:d1:2a:2c:27:d3:4e:fd:70:c6:ad:ce:40:02:ce:
86:f8:3b:4e:e3:06:48:66:a1:93:10:87:cf:37:bc:
fe:f1:db:18:b6:54:c7:55:a8:16:d1:29:5a:0e:3a:
5d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C4:39:15:07:77:24:C8:C9:23:9B:89:D2:22:62:D4:D7:60:B7:5F
X509v3 Authority Key Identifier:
keyid:FD:0E:F0:40:FB:A4:5B:CE:7B:07:16:34:95:CD:F5:E8:50:77:91:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Q7wQPukW857BxY0lc316FB3kZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d77168-133f-4553-b19d-56c94f326dc2/1/_Q7wQPukW857BxY0lc316FB3kZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:18:d9:a3:52:74:35:62:48:08:ea:01:ce:0c:56:07:be:d1:
90:bc:55:a2:b9:c1:78:90:2b:0b:96:c8:a0:81:b6:0f:aa:5d:
02:76:3e:8c:8b:92:10:36:37:9b:08:96:ff:b2:f9:5b:6a:8b:
e8:50:32:fb:f5:9e:26:f3:43:a9:6d:71:30:9c:f7:67:46:2c:
1f:c7:04:7c:69:88:b7:b3:22:a1:d9:71:d4:df:8f:86:a7:80:
31:fc:39:f0:88:1a:75:21:be:fb:90:99:56:05:6f:57:42:70:
aa:18:7d:8a:ce:22:ed:7d:c5:36:90:e7:54:a7:5e:9b:ae:13:
cb:aa:cc:4e:7d:c0:46:60:7a:13:36:88:7e:a1:83:e0:68:46:
83:df:f9:c5:50:93:c2:e9:e8:35:82:23:ba:2e:c1:17:1f:11:
8f:25:a3:2b:f7:74:9a:73:8a:9a:ec:38:bb:23:7d:09:ad:e1:
f9:8b:99:39:a2:ce:4a:64:1c:44:70:df:64:7e:6e:63:0f:74:
ee:40:74:35:c9:7e:c7:d5:91:66:13:86:a7:14:87:93:de:43:
32:dc:a5:68:9f:26:af:a6:d9:12:d4:78:ea:aa:ac:95:b8:a0:
ed:af:94:7f:96:fb:73:0e:00:46:f5:4d:4c:a5:cb:e4:39:be:
4b:3e:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:43 2025 by rpki-client