Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: iddiON6oo8u7iNCcgMCi06RE+fcZ0uSoNlypPXcjRTY=
Subject key identifier: 98:B4:00:B0:EA:B5:F6:60:42:00:62:EF:29:21:45:B6:0D:32:5B:FD
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019A51BEC4366E07BE8A71072D8AA22A0644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 123D
Signing time: Wed 05 Nov 2025 02:00:47 +0000
Manifest this update: Wed 05 Nov 2025 02:00:47 +0000
Manifest next update: Thu 06 Nov 2025 02:00:47 +0000
Files and hashes: 1: 1-Ofv8tDBMWs_4Hbhr7lMN_HF2TI.roa (hash: uH/td80fED56QPX1k1oOVphRVZ11UL29yzqyURnsYnc=)
2: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: c+W+tmJnLQUauMIa5O/0VopSL3hicAPmf2cFOZsSpDM=)
3: ptc21Pv_RMZdbmNfwt1t43MswfA.roa (hash: mrzhJeNsIe6my5EK8oo2DkozZxDWWdzOh94g4W2m17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:c4:36:6e:07:be:8a:71:07:2d:8a:a2:2a:06:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Nov 5 02:00:47 2025 GMT
Not After : Nov 6 02:00:47 2025 GMT
Subject: CN=98b400b0eab5f660420062ef292145b60d325bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:4b:80:1d:72:c6:ff:3b:8d:f0:08:35:aa:
2e:cd:71:34:af:83:28:7e:95:88:d9:2d:98:ed:b7:
b0:ba:b2:07:0c:36:b7:4a:6e:38:a9:34:fa:21:15:
13:ab:46:d5:02:fd:c2:32:43:76:37:6e:0a:0d:5c:
72:05:f5:3e:35:81:0d:70:ea:10:17:d5:9f:d1:2d:
b2:f9:dd:88:df:5b:08:14:3a:3c:e7:d6:33:9e:4b:
e7:a1:c9:30:de:2e:cd:d0:f9:6b:8c:73:1e:07:46:
07:e3:3e:a1:9b:29:71:06:fc:9b:9a:3f:3c:d1:86:
97:a7:a4:b9:af:60:d8:86:bb:65:16:5c:5f:2d:75:
75:ef:de:1e:2a:94:60:53:31:1c:3f:9f:de:f2:a3:
10:0c:57:f8:69:94:24:3b:f6:7f:69:37:ee:b0:cb:
c5:ea:ca:a3:20:d4:14:1a:43:47:8b:6e:13:a1:82:
18:34:85:7d:77:bc:8e:cf:a2:38:85:9f:86:bf:00:
02:fe:29:74:1c:70:d7:c2:41:f5:44:0d:6b:76:57:
f9:c9:e6:87:b4:9a:a9:b2:c4:6e:74:1c:d6:94:de:
84:7b:e7:2b:19:7c:40:bc:bb:fa:de:e2:f1:b1:9a:
57:e2:97:43:f2:a8:f6:2b:95:fa:26:12:62:3a:f5:
fd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:00:B0:EA:B5:F6:60:42:00:62:EF:29:21:45:B6:0D:32:5B:FD
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:96:c3:64:3a:cb:6d:1f:56:3e:8a:31:93:df:8c:bb:09:29:
54:bc:19:50:f3:09:94:1a:ae:b5:24:8d:ad:52:a4:03:1d:99:
b1:34:25:f6:cf:12:ae:ae:f0:ce:0f:51:c2:37:54:8f:8e:25:
c7:27:9d:39:0d:0c:ae:5c:d6:6f:6e:39:92:d1:c6:e7:7b:90:
22:ec:e6:7a:ca:42:e6:c7:d3:cd:c9:d9:4e:e1:5e:25:cc:f9:
fa:df:24:e1:a8:1b:90:32:5f:42:d4:9d:f3:28:24:39:11:09:
52:22:7e:e3:5d:62:e3:b2:b2:2f:c2:91:0b:cc:4d:ef:d8:f7:
a0:8b:77:91:eb:6c:51:9f:3c:dd:06:a2:94:34:8a:2a:5c:7c:
7b:11:db:ef:41:93:9f:8f:c9:d0:51:68:d7:61:87:1e:11:6d:
14:bf:1a:f6:12:6e:92:b3:9a:a7:bc:3e:c0:7d:ce:53:56:b8:
a4:b0:a4:79:f5:17:35:31:9e:da:22:a0:d8:e2:43:41:46:b9:
c4:42:16:d1:52:a7:69:31:29:b7:44:f7:34:2d:e4:df:fd:27:
63:44:af:8c:12:4c:d2:f5:68:a8:bd:bd:94:6d:21:25:50:8d:
5e:f7:59:e6:a7:3c:a0:bf:85:c6:32:67:45:dc:6a:7d:14:29:
7d:b3:4f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:34:04 2025 by rpki-client