Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: IzsFBRscVGubVp4SBUjJKJeQqKdU16hfGRvivEWpqj0=
Subject key identifier: 3C:48:F9:47:6D:E4:4D:B5:8F:74:D5:DD:31:31:F1:FE:A5:BA:C9:7E
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 019A522BF8149CD13D607E696AD4A185DDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 0139
Signing time: Wed 05 Nov 2025 04:00:04 +0000
Manifest this update: Wed 05 Nov 2025 04:00:04 +0000
Manifest next update: Thu 06 Nov 2025 04:00:04 +0000
Files and hashes: 1: g6lOJZk_IOKaTF7q4TnhPviaoeE.roa (hash: 3uBzUH3gzYo8KFcFQD+b7edt/srB4qwjOtcspxNTXPs=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: bBNifg9J0DEUMtsaF8X8/UfDjgsAZjJTtWjwNC80jhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2b:f8:14:9c:d1:3d:60:7e:69:6a:d4:a1:85:dd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Nov 5 04:00:04 2025 GMT
Not After : Nov 6 04:00:04 2025 GMT
Subject: CN=3c48f9476de44db58f74d5dd3131f1fea5bac97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:33:1b:0e:7d:c6:32:89:86:15:86:9d:65:
e7:b4:8d:0e:7c:46:16:32:e8:a9:45:a6:ec:06:37:
a3:0d:27:b9:17:a8:89:1f:b9:76:d0:80:f0:35:0d:
74:f1:d2:fe:eb:b2:87:2d:24:60:56:12:da:5c:94:
63:79:26:15:fe:02:e1:45:33:76:4d:f6:4d:78:bb:
b8:4b:b6:1a:a8:4a:c3:95:66:ca:5d:3c:71:b3:65:
29:61:1a:c8:2c:3b:e9:df:94:3f:f7:98:11:12:c6:
dd:74:e0:e4:fa:a6:97:00:22:c6:52:5d:40:17:02:
a7:7e:67:f7:a3:06:03:3d:9f:c4:8f:8f:86:4b:4f:
5d:4c:7e:ab:f4:15:99:90:be:53:cb:eb:4e:0b:71:
83:20:2f:ea:1d:a4:cd:5e:07:3c:fd:67:d5:dc:67:
af:86:9c:0a:dd:33:75:fd:07:8a:a8:01:3f:99:44:
7e:1c:62:55:49:c1:ce:a4:17:bc:fd:81:aa:66:31:
e8:ce:8c:b4:b4:8a:6e:34:9d:6c:bb:43:bf:26:b0:
8c:2a:dc:39:e7:c1:6d:bb:f6:79:24:ff:2b:a4:fe:
80:d1:0c:db:61:2a:8a:23:85:04:34:c8:7e:13:50:
54:3d:6f:b4:f3:93:74:c8:60:6d:7d:fa:fa:4f:2c:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:F9:47:6D:E4:4D:B5:8F:74:D5:DD:31:31:F1:FE:A5:BA:C9:7E
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f2:42:c7:f2:ea:b5:3e:ae:8e:31:34:ac:1f:57:09:1e:13:
34:63:9a:c3:bc:4c:d7:45:fb:cb:8f:49:c8:4a:3f:82:76:4a:
7e:21:28:54:39:ec:55:43:7e:34:4e:35:45:fb:cc:70:cf:2e:
f6:94:b9:05:9c:27:da:da:05:8e:81:fc:a7:83:4f:d9:d0:e9:
50:54:2f:95:51:05:eb:90:58:5f:d6:a1:e3:f7:19:c8:37:e9:
cd:68:75:a5:ce:95:61:94:5c:2d:f3:a1:4e:2e:89:11:24:a0:
3b:fe:61:70:c9:18:5e:97:09:18:ca:8b:1d:62:d1:94:49:60:
11:37:8b:58:35:4e:36:54:fd:a3:c6:b4:bb:62:6e:9a:a3:96:
41:83:d5:d6:54:22:dd:e8:16:e4:4e:5a:f5:44:fd:ae:64:2a:
2b:d0:91:f0:86:7b:82:cb:d9:34:e8:20:a7:ff:07:a5:57:e6:
92:35:36:47:88:e3:ea:ec:fe:0b:2d:3b:2a:14:f0:f7:9c:6b:
61:7c:2d:4f:b9:ef:98:c3:ea:f0:28:45:c6:ef:d6:a5:f0:4a:
06:4b:0b:b9:6a:21:cc:3a:9a:c0:9a:13:68:4a:83:20:4b:42:
e5:6f:7c:f2:7a:25:b2:62:d8:3a:83:c4:12:80:55:20:12:c5:
e7:db:41:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:12:57 2025 by rpki-client