Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
File: rqUKTs9FgQz29pyXw8aFz8JJdsI.mft (raw, json)
Hash identifier: cmj+oXjhmtvp4zwhMNIL7uCb/8QZVn+K3DGChMJTB9I=
Subject key identifier: F2:33:D8:33:C4:5C:D5:11:83:E2:5A:7C:E0:6C:7E:DB:4C:C9:8E:6A
Authority key identifier: AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
Certificate issuer: /CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Certificate serial: 019A5564279765826B8138B317A8AF7A3B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
Manifest number: 01D5
Signing time: Wed 05 Nov 2025 19:00:18 +0000
Manifest this update: Wed 05 Nov 2025 19:00:18 +0000
Manifest next update: Thu 06 Nov 2025 19:00:18 +0000
Files and hashes: 1: JwcsFNQrZCdoPIC0dUAZcHysppo.roa (hash: FF/t/K7QA2jOU+o41VoGD+jy9dDqvhlPL/hHJRA3zzM=)
2: rqUKTs9FgQz29pyXw8aFz8JJdsI.crl (hash: QPcjHwuTodnUnQZod8OJ821I/o7flnuaCWlLE1XTId0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:27:97:65:82:6b:81:38:b3:17:a8:af:7a:3b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea50a4ecf45810cf6f69c97c3c685cfc24976c2
Validity
Not Before: Nov 5 19:00:18 2025 GMT
Not After : Nov 6 19:00:18 2025 GMT
Subject: CN=f233d833c45cd51183e25a7ce06c7edb4cc98e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:a1:9d:a4:b1:94:96:72:ae:35:fe:a5:19:
2e:77:7c:c1:b4:bf:93:99:6e:2c:df:4d:f6:bf:3d:
8a:75:b0:df:f5:db:9d:5c:68:ff:59:a6:5a:12:41:
50:64:b4:17:8b:e3:ef:de:84:99:d9:ee:89:fc:d6:
c4:24:5c:bc:30:86:1a:92:1d:48:dd:39:5e:b6:44:
8c:64:85:7b:22:83:8c:b6:ff:62:65:67:be:e7:28:
1e:ac:5f:9c:b8:79:45:49:21:56:6d:6f:55:40:4a:
47:5c:8e:b0:68:ce:17:5d:67:7f:97:3c:09:fd:cf:
9c:49:72:e8:59:cc:db:b0:c9:ff:a4:23:97:ed:b4:
cf:bc:a3:2c:35:0b:b7:72:aa:6e:67:1a:1d:4c:01:
1d:2f:71:42:5b:37:37:cd:e2:ad:aa:f4:65:ce:66:
9a:30:4e:44:cd:82:1c:31:dd:14:28:00:37:6b:65:
98:18:bf:2b:a6:45:f4:30:60:81:9f:53:2c:a4:05:
18:e0:2b:04:74:01:83:d0:86:8a:45:cd:d3:8c:30:
0f:cb:a6:f2:9b:02:ba:b7:f6:b1:83:be:77:5f:93:
bb:d7:09:63:8a:df:ab:b3:49:ea:ae:05:84:5b:e5:
06:d9:38:cf:51:1d:32:cf:05:0b:b6:0c:e5:d7:3e:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:D8:33:C4:5C:D5:11:83:E2:5A:7C:E0:6C:7E:DB:4C:C9:8E:6A
X509v3 Authority Key Identifier:
keyid:AE:A5:0A:4E:CF:45:81:0C:F6:F6:9C:97:C3:C6:85:CF:C2:49:76:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqUKTs9FgQz29pyXw8aFz8JJdsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/630496-d359-40a6-a276-c72a9c6fb8f2/1/rqUKTs9FgQz29pyXw8aFz8JJdsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e1:b4:65:31:7c:30:34:d9:0b:1c:53:0e:f4:6b:ab:33:49:
26:2d:8e:07:03:75:29:8c:24:7d:5b:73:30:06:93:18:e4:8e:
21:36:c3:92:00:8a:33:aa:4b:70:ad:27:0f:33:e0:f0:75:83:
9b:a7:75:3c:2a:f1:4e:86:6a:9d:22:3f:06:bc:cc:f9:78:40:
4e:69:1e:bb:a7:c9:9c:55:98:cf:a2:90:51:d0:6f:0e:94:d7:
b5:e4:2d:a9:19:f6:1b:61:6d:f5:82:f6:66:fc:98:88:39:cd:
64:67:d1:19:ab:cd:07:b4:7f:ed:18:74:45:3d:b2:4e:9b:79:
46:49:07:b2:d4:8f:82:16:e7:77:3d:cc:b3:19:40:ce:74:6b:
f8:49:fe:df:2a:03:e1:a2:7b:4a:53:bf:90:fc:78:f9:19:a9:
62:eb:08:c4:c5:db:48:e4:d7:25:5e:fa:8b:10:f5:ae:b3:a2:
7c:fe:21:f0:6a:c5:d2:bf:33:99:65:9b:6a:5e:ca:cf:be:03:
94:bc:a7:c1:e3:fe:69:37:f8:40:5a:3f:3b:36:1a:02:b6:ff:
f1:71:c7:6e:eb:17:99:07:ea:94:1d:29:c0:40:9e:86:f1:aa:
0f:74:94:04:8d:02:b4:20:bb:a2:5c:27:6c:97:64:2b:71:31:
64:98:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:13:47 2025 by rpki-client