Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json)
Hash identifier: RW6t1cv1IvTGs09cQk0ulIDZC2JFP/YA/x0PeZLzr9o=
Subject key identifier: 80:54:9D:C9:04:B2:63:90:89:42:EF:54:D7:65:68:9A:1A:46:6E:32
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial: 019A4D73F0B7DC78A6E0482E569F810CDFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:35 +0000
Manifest this update: Tue 04 Nov 2025 06:00:35 +0000
Manifest next update: Wed 05 Nov 2025 06:00:35 +0000
Files and hashes: 1: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: VM9t5KwEG9GElvOoDyfmdqEMYAyFScNhR690okRdyzw=)
2: oIUHNd2flzQuApFJl7WS3G_Ds7Q.roa (hash: r9vW54cG8T4ZtS4qpMsUDsSVtPyOl8cyq1L4laCQ/ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f0:b7:dc:78:a6:e0:48:2e:56:9f:81:0c:df:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Validity
Not Before: Nov 4 06:00:35 2025 GMT
Not After : Nov 5 06:00:35 2025 GMT
Subject: CN=80549dc904b263908942ef54d765689a1a466e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:29:48:c7:47:e8:6d:ee:27:80:74:01:97:
2e:81:01:23:11:b5:2d:bc:bb:8d:92:c8:6b:23:11:
6c:c0:b4:8f:00:6e:c8:fd:3a:bd:54:fd:54:80:83:
62:22:86:79:86:15:24:95:7a:e4:84:9b:f9:d5:f2:
e0:65:07:e1:51:b0:ac:3f:4a:f3:db:d0:fc:0c:d5:
7d:6f:09:a1:58:9c:bc:9a:fb:98:0a:86:e8:f5:d4:
cc:bf:42:55:41:73:8f:90:21:4c:13:c4:fd:db:32:
13:b0:c9:1f:44:cc:a1:b8:f4:8b:b3:8b:7b:27:20:
29:e4:51:e5:0f:b1:6e:65:b8:69:41:04:f8:e3:69:
53:a2:0c:0a:e4:01:98:bf:41:9e:1a:0c:28:69:5f:
5c:5b:79:89:75:0c:0e:73:da:70:e2:23:a6:a2:6e:
73:13:f9:61:3c:42:3d:b8:7f:a6:bd:f7:d2:e0:71:
87:08:3c:38:d0:54:68:c7:5e:8b:49:33:11:c4:f4:
15:33:44:da:4f:2a:f4:0a:1e:b6:4a:82:9d:59:6d:
b5:b3:d3:3c:9f:67:82:54:52:fa:8c:78:9d:6d:54:
44:e4:64:c1:de:b2:00:10:27:9d:4d:4c:80:3b:e9:
14:fc:5a:cb:de:a4:cc:66:c3:5e:3c:f5:e2:5e:07:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:9D:C9:04:B2:63:90:89:42:EF:54:D7:65:68:9A:1A:46:6E:32
X509v3 Authority Key Identifier:
keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e5:90:1b:8d:a4:ff:e1:f7:68:f0:76:b8:6d:36:a5:79:b1:
0c:6d:dc:0b:3e:89:b6:24:5c:0f:44:b8:16:12:21:e3:57:73:
75:0a:7c:72:14:9b:a2:12:35:82:8c:60:bb:ce:41:08:65:76:
98:ea:29:98:9b:b6:07:23:23:7c:f6:d7:23:77:e1:ad:b3:bc:
38:62:12:fa:5d:ae:73:6d:6d:c5:8d:ad:a9:fd:8b:f7:2c:23:
65:3c:e2:db:9e:00:0c:e5:34:bb:fe:6f:c1:5d:79:d9:ac:17:
c3:d4:7d:d3:8e:e4:70:58:22:f9:da:34:c2:e7:2c:22:b5:4c:
0e:3e:5e:a3:9b:b4:c5:8e:05:26:7b:01:3f:7e:ad:1c:f7:ba:
2d:38:cb:e6:e6:e9:d2:62:d8:cd:a9:e8:ac:e0:64:7f:c6:74:
66:ad:63:29:80:c2:48:d6:c0:10:11:61:27:c8:97:cc:e9:92:
31:b9:b7:ac:8a:c6:ff:f3:88:02:5d:70:6f:bc:55:6a:a4:94:
8d:ad:43:6b:45:c3:b4:de:7c:5e:57:b9:6a:3e:7c:75:f3:a5:
5d:d0:ec:f1:2a:ae:28:16:57:0f:81:e2:9f:e4:86:49:26:59:
36:34:ca:1b:9d:1a:9d:b2:5d:02:65:8c:af:51:34:e9:35:80:
3e:00:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:40 2025 by rpki-client