Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: Wsyvtme//yxfhei0k3XLA9uTV3o0ynldouxoQ+yySW8=
Subject key identifier: 9E:71:7F:BE:8E:81:FF:25:31:56:4B:AA:50:C0:6F:51:9A:83:3F:2F
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 019A53ACD297B7C7BF31348E69E87A41C05C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: C3
Signing time: Wed 05 Nov 2025 11:00:26 +0000
Manifest this update: Wed 05 Nov 2025 11:00:26 +0000
Manifest next update: Thu 06 Nov 2025 11:00:26 +0000
Files and hashes: 1: IuBa70BDMg0yPa-auzZdBIfQXlM.roa (hash: P7DlWRmLUo7YIyLqEcKhGguGrK8gKl8k7uHLBwT0v4U=)
2: NHd08g9X-MuopAlLpgKXbxukW8k.roa (hash: qCjWNPKActqOGuKEjDGHdWjpl9WS29egZUeHGegFoKg=)
3: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: RodltOtFcO8jTGzhVtjTjfw2sofvItZJlL77DPal7Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:d2:97:b7:c7:bf:31:34:8e:69:e8:7a:41:c0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Nov 5 11:00:26 2025 GMT
Not After : Nov 6 11:00:26 2025 GMT
Subject: CN=9e717fbe8e81ff2531564baa50c06f519a833f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:4d:98:a5:1b:9a:b4:36:88:88:cf:d1:63:
a0:b2:20:e1:a2:9b:4d:4d:12:48:81:88:98:3d:ca:
36:67:f0:02:dc:41:13:41:1d:5d:99:ea:00:9f:df:
fd:17:7e:bd:d5:10:27:31:a0:1b:2b:7d:82:82:c1:
f6:fd:fa:e2:32:92:f6:43:77:7e:32:c4:f1:68:36:
09:53:aa:05:f7:63:fd:12:3c:53:ee:39:81:f7:8e:
2a:d1:ca:bc:59:94:cf:39:56:2a:50:f4:0a:94:ba:
c1:d2:3a:2c:25:2f:bc:9a:69:7e:bc:db:d4:92:58:
a2:47:73:c9:0c:16:8d:0b:09:f1:1f:64:99:b0:c9:
a5:55:d5:c8:85:a0:f9:9e:d9:66:3a:ab:25:15:71:
d8:66:af:06:b0:06:44:a1:c1:30:e3:9a:70:c1:73:
4b:70:d7:e3:2d:b6:be:e0:92:7e:a0:91:7d:43:86:
07:39:9f:41:1a:aa:b1:07:d1:a0:e4:c4:4e:4d:81:
d5:d4:50:af:f5:0f:9b:12:63:6d:c5:9b:92:e6:7b:
85:87:98:7e:e2:50:95:76:5b:01:00:1a:3f:b4:f6:
74:83:5d:0f:4d:a8:49:c7:92:4c:22:5e:c4:1d:46:
7b:b6:d5:cf:ad:fa:06:48:cd:5b:21:26:11:f6:a5:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:71:7F:BE:8E:81:FF:25:31:56:4B:AA:50:C0:6F:51:9A:83:3F:2F
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:5d:c0:97:10:82:de:93:d8:75:a2:3a:0a:01:19:1f:53:2a:
f4:e5:dc:4a:ac:23:f4:7a:6b:bb:f6:73:65:7c:10:c5:b1:a9:
94:e2:0f:17:3e:c4:b6:99:d3:10:b3:cf:4f:ef:6e:5d:46:a5:
ae:21:37:da:a2:89:06:37:c8:18:89:87:be:a9:55:08:b9:d3:
cb:67:4f:b3:e7:ac:aa:bf:43:4f:46:79:05:14:7a:51:c2:fd:
d4:1a:b1:63:f5:d5:83:34:53:5a:8c:9c:32:86:6c:c4:06:c9:
bc:e7:88:b8:6a:2b:1a:a5:c3:52:8e:7d:8d:cf:b2:ad:d9:5d:
e9:a1:27:aa:67:f7:a3:d8:05:28:ee:62:fb:a8:47:75:e2:c6:
81:f3:64:ea:4f:00:d2:4a:37:82:4c:90:ed:56:0b:dd:c0:42:
3b:89:70:1a:b8:52:75:d7:a0:32:ca:18:75:24:fe:e6:40:90:
66:cd:43:49:b3:1a:70:22:c6:e0:29:df:eb:e3:15:19:0e:ff:
2b:94:22:12:44:a6:ec:33:0c:ae:f6:d9:bf:d3:cb:38:50:55:
ee:32:0a:e2:93:98:0b:53:32:af:75:f6:33:14:9f:6a:45:27:
ce:b6:e9:b7:08:ae:a5:e6:8f:e9:e0:bf:11:5b:52:8f:3d:36:
6f:a0:a5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:55:36 2025 by rpki-client