Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier: zdQo2Jynn2bGzFVmq3SKdJjGFHFjzdC7zz0FaxwqPoY=
Subject key identifier: C1:1E:EE:CB:18:C4:5C:48:08:05:6C:A9:64:11:D7:F0:29:03:88:F8
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial: 019A503DBFA00262E1C0F6351A65EC892E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number: 05F9
Signing time: Tue 04 Nov 2025 19:00:14 +0000
Manifest this update: Tue 04 Nov 2025 19:00:14 +0000
Manifest next update: Wed 05 Nov 2025 19:00:14 +0000
Files and hashes: 1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=)
2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: RZ+1Dz0/g/vZXshNAdtacnmtknO+LF1vgiOsoiGi5Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:bf:a0:02:62:e1:c0:f6:35:1a:65:ec:89:2e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Validity
Not Before: Nov 4 19:00:14 2025 GMT
Not After : Nov 5 19:00:14 2025 GMT
Subject: CN=c11eeecb18c45c4808056ca96411d7f0290388f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:9c:93:38:42:89:bc:e0:27:ad:22:af:4c:
f2:e8:0b:1b:36:9b:7b:12:6f:b3:dc:7c:8f:56:ea:
0c:02:32:4c:e3:4e:ef:b3:85:a9:f8:a6:89:36:cb:
dc:a6:a2:9d:39:a2:26:8c:29:00:2e:37:fb:4a:33:
e8:ea:65:b3:36:fd:9d:3e:38:85:6c:61:9f:5f:ef:
b7:ea:15:f2:75:08:37:51:11:0b:77:f7:38:f4:b4:
5f:81:91:cf:e3:b1:96:bf:bc:ed:0a:46:fa:b3:17:
21:25:69:fd:a3:8b:49:ca:34:01:3b:da:1b:92:25:
79:cc:a2:e3:65:1c:86:be:10:cf:c3:84:43:77:e4:
ec:08:58:c3:05:7d:6f:4a:8d:3e:0c:b8:4e:f8:db:
c6:72:be:ae:38:36:59:dd:e3:2e:ba:ad:6e:88:9a:
6f:e1:88:e6:00:b4:a6:88:0f:7c:04:ee:84:97:5f:
a4:de:b6:8c:60:2e:0d:de:b4:c1:5e:ed:70:fc:12:
ae:43:3a:f3:76:53:e6:c0:de:72:46:66:66:d1:56:
2e:a2:0f:64:14:32:50:a1:40:06:2f:75:4e:26:9a:
0f:6c:08:c5:04:cf:ef:72:cb:d7:a1:a9:ec:74:41:
86:28:40:06:9b:a8:d4:2e:96:df:87:4e:d0:53:bc:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1E:EE:CB:18:C4:5C:48:08:05:6C:A9:64:11:D7:F0:29:03:88:F8
X509v3 Authority Key Identifier:
keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:b0:5a:39:cb:4c:da:69:c0:c2:0b:e8:21:84:4d:62:67:
c4:74:04:d9:8d:34:45:f4:08:ac:7c:ae:09:03:cb:32:f9:2c:
04:a5:c4:a5:51:a8:39:51:7e:45:ca:19:bc:db:35:a7:a0:66:
d3:ad:28:76:68:7a:06:ac:b9:ce:21:eb:da:24:c1:51:7a:9c:
67:10:5e:cc:28:4b:7a:5c:1e:33:99:f1:d5:aa:08:78:21:a5:
93:38:83:ee:63:d4:9f:ef:34:56:76:43:16:29:03:fd:60:22:
74:2a:e7:a1:84:9c:29:80:ca:44:7c:83:db:bd:35:93:76:ea:
78:96:86:a0:d6:82:81:bd:8e:89:c2:3d:d4:64:76:fb:79:ed:
96:c6:a5:13:06:d4:c9:93:65:27:34:ff:64:f2:b2:a1:65:d3:
7e:a0:f4:2e:73:54:77:b6:7c:30:0d:47:7b:57:ca:fa:1e:28:
b0:86:30:bc:62:89:01:da:2d:fe:05:16:a8:ac:ec:46:0e:ff:
ba:6a:a4:76:28:9e:2f:92:7d:81:82:c7:da:0a:80:ec:59:48:
6c:60:cc:7d:ea:52:56:f1:5a:f3:79:33:1b:0f:b3:05:f3:6b:
76:c2:d1:50:98:b3:bf:f8:8c:18:9d:4c:d7:20:b3:30:88:69:
ca:bb:d1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:34:28 2025 by rpki-client