Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json)
Hash identifier: PgEoDl2LR5tBPRlpuWyFBF9gZ8U28Ei0M5QroIQWwwU=
Subject key identifier: 50:5D:EA:08:12:38:8C:3A:72:68:A5:DB:9D:E0:6F:3F:21:A0:9B:36
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 019A4DE22A729B186D953A5444F567388F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
Manifest number: 14FC
Signing time: Tue 04 Nov 2025 08:00:58 +0000
Manifest this update: Tue 04 Nov 2025 08:00:58 +0000
Manifest next update: Wed 05 Nov 2025 08:00:58 +0000
Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=)
2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: X3Rsdww6yBDxfH+yBagMix3+0qArl+B6Mb+VGCMWzD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2a:72:9b:18:6d:95:3a:54:44:f5:67:38:8f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Nov 4 08:00:58 2025 GMT
Not After : Nov 5 08:00:58 2025 GMT
Subject: CN=505dea0812388c3a7268a5db9de06f3f21a09b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:2e:21:75:d8:ad:da:0d:96:31:57:b7:79:
86:77:3c:db:eb:aa:b1:ed:0e:b4:ea:f5:ce:d7:ea:
fc:3b:0b:69:33:8e:f0:90:ea:bc:b3:46:56:49:63:
f3:41:db:97:13:c0:e6:ca:83:07:77:df:6f:25:29:
f4:b1:a4:d0:a4:f9:fa:23:ac:f8:1a:ab:f0:50:6d:
7f:9d:b2:65:b1:45:91:0d:3d:8c:3e:17:73:54:92:
51:9a:08:b6:46:59:55:00:dd:a9:bc:2c:b6:90:25:
7f:75:0f:7b:50:19:92:66:71:cc:58:71:94:87:1f:
e3:91:18:8c:61:20:33:c8:a3:09:4e:24:d6:6b:3b:
a7:f3:0b:8f:60:81:a8:31:78:69:38:6a:57:c6:31:
06:74:bd:29:51:47:b3:11:ef:d8:b9:77:3a:3c:8d:
c0:06:c9:27:2d:af:1a:ca:85:76:e6:bd:32:a4:86:
47:c5:70:54:90:82:ac:46:19:6d:cd:d5:e7:0a:fd:
f1:04:77:9b:8d:a0:86:33:49:0e:b5:9a:c2:a8:65:
b6:c2:0b:de:69:46:be:d9:ff:b6:70:2d:d9:32:e7:
d5:9f:90:83:df:1f:b0:2f:62:eb:45:49:18:e8:fb:
c1:d0:37:ff:d6:5d:b7:6e:7d:31:31:88:23:24:e4:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5D:EA:08:12:38:8C:3A:72:68:A5:DB:9D:E0:6F:3F:21:A0:9B:36
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b9:22:3d:0c:c7:91:01:c9:a1:a3:38:71:0f:49:db:42:b0:
d2:11:6d:c4:52:23:f6:7b:c4:3c:18:5d:a3:35:e4:1c:35:c5:
c0:af:6b:28:5f:56:e7:90:90:27:64:d2:63:60:12:c6:29:0e:
b3:76:2b:75:5b:08:69:aa:b6:97:87:6f:1c:36:2c:83:21:2a:
f8:f6:24:c3:06:5b:ab:0e:16:67:8e:d3:6b:2b:78:af:c6:ad:
f1:e7:a6:78:a4:d6:95:db:26:b2:63:90:35:20:ce:9c:10:e1:
4f:e9:72:2b:81:b5:b6:ec:06:96:bf:c5:66:2c:5f:64:5c:d2:
70:01:c1:63:e5:45:28:cb:9d:96:c7:91:62:c5:22:7a:d8:18:
1e:9c:59:3f:80:2f:d9:7f:63:8b:2c:a2:50:95:3b:db:a3:5f:
28:ff:67:25:86:fc:ec:8d:25:0e:b2:a5:ca:71:6b:44:6a:4a:
c6:92:5d:0c:99:23:b5:98:fc:a4:24:ff:a8:96:8a:ea:71:7d:
f1:96:5b:2f:9e:ef:3f:3a:45:62:3e:54:46:7f:f3:56:e7:d4:
21:29:81:74:0c:a6:31:e6:f1:72:f1:65:f7:01:d5:8c:7c:1b:
e3:f9:84:eb:bf:3c:29:ff:96:f9:53:65:bb:a4:03:80:28:76:
41:a7:a3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:04 2025 by rpki-client