Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: vUfcEBiEaYqLX+6MS/oI1xx5qjQqvJMP6LCf3CknDVo=
Subject key identifier: CD:16:B2:0D:9E:1A:BA:BF:52:AD:04:10:35:FE:DF:92:75:79:AA:B3
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 019A5299F3635642579B1AFBCD700432B185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 14DE
Signing time: Wed 05 Nov 2025 06:00:12 +0000
Manifest this update: Wed 05 Nov 2025 06:00:12 +0000
Manifest next update: Thu 06 Nov 2025 06:00:12 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: 5MeQ0mfJ/264yyGTdJzwNeYF/eQJKdWcQe4OGZggoME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:f3:63:56:42:57:9b:1a:fb:cd:70:04:32:b1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Nov 5 06:00:12 2025 GMT
Not After : Nov 6 06:00:12 2025 GMT
Subject: CN=cd16b20d9e1ababf52ad041035fedf927579aab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a6:a2:60:09:14:3d:c4:85:ca:06:3c:7f:31:
bb:b3:62:32:9f:74:8b:fd:0f:fb:05:fa:8a:22:98:
fb:a1:b2:12:13:ef:54:cb:63:c8:00:f9:d3:a7:cc:
59:ef:12:5d:59:1b:80:ff:f3:99:2c:06:8b:79:28:
0e:31:27:2b:bd:4f:4e:77:09:83:b5:bd:32:51:2e:
88:8d:85:b2:01:04:22:b8:e3:c3:5c:8e:e9:69:83:
24:d8:b9:f0:51:f6:4a:ef:1f:ea:57:26:f6:40:ae:
e3:83:42:f5:5c:91:80:d1:9d:31:23:3a:ee:cd:0a:
90:46:11:76:8e:8e:86:52:48:f4:3e:3e:d6:81:3d:
77:d9:d6:16:f3:5b:86:eb:c8:7c:bf:93:4f:6e:0d:
a4:f7:6e:3f:10:52:ff:e1:18:6c:97:dc:82:bc:4b:
b8:7e:4f:9f:a8:c7:e5:42:78:02:40:d0:2f:57:2c:
14:74:53:70:f3:03:01:75:45:61:73:a2:51:7f:bf:
c6:e7:ca:67:da:15:ca:56:a4:24:67:12:54:41:1d:
02:f7:6b:71:84:f5:63:85:ce:a1:a1:69:02:c1:31:
84:41:7a:a2:8a:9a:dc:e4:d9:72:87:49:2f:b9:4f:
3c:f2:53:4c:cf:c2:46:ee:d4:b7:2f:41:8a:55:54:
f2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:B2:0D:9E:1A:BA:BF:52:AD:04:10:35:FE:DF:92:75:79:AA:B3
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e1:c4:10:1d:62:04:3e:c3:1f:22:e3:ac:8c:c3:b4:2f:0f:
7b:94:44:fd:51:53:a5:7f:25:9e:64:68:eb:c0:c4:b0:42:10:
34:56:d0:f6:d0:8d:b8:7f:02:2f:68:41:23:99:c9:cb:7e:66:
d7:26:3d:f8:df:c3:e4:56:35:aa:9e:ed:d7:77:ee:08:87:97:
00:a8:ea:f4:93:f2:af:45:1c:fa:59:83:8c:df:fb:cd:c5:b5:
b7:16:b6:1a:9a:9b:3b:a6:e6:f8:34:44:1c:a4:0e:27:5c:a2:
03:03:82:7b:ec:dd:ed:3c:10:40:62:04:b3:38:47:d2:c6:19:
e2:29:44:34:60:a6:d4:ac:5c:ff:56:0c:fa:53:4c:d5:91:e5:
1e:09:95:4d:fa:a3:ea:52:0d:ed:66:fe:6d:6c:ae:8f:b7:1e:
19:c8:7d:43:4f:fb:93:c7:76:2d:cc:aa:a1:41:2e:ec:e4:e9:
b2:74:3c:b8:f4:51:45:6e:0b:c4:4c:40:c1:f8:ae:50:83:43:
e8:ad:d6:ae:b7:b5:5c:e6:39:43:b4:28:cb:3c:b7:3b:af:3d:
d8:73:29:57:57:ca:06:ec:ce:6d:e7:7c:06:80:25:39:ee:0d:
51:5e:6f:96:d2:35:87:e9:b7:55:16:e1:cc:3e:f8:98:2a:04:
3e:cf:9c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:34 2025 by rpki-client