Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
File: qOdYAufvuGU-OvWcvxvAZTi8pnE.mft (raw, json)
Hash identifier: p0aU3GZkyeZDEcMR2+v3N7VIwpij6RS5WfEumf23EwA=
Subject key identifier: 9F:B5:D8:42:53:B8:01:C5:48:E7:4F:7F:67:57:97:B8:FC:87:8D:AF
Authority key identifier: A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
Certificate issuer: /CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Certificate serial: 019A503DC0BB7D264ADCF6381D0CF7EA182A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
Manifest number: 1543
Signing time: Tue 04 Nov 2025 19:00:15 +0000
Manifest this update: Tue 04 Nov 2025 19:00:15 +0000
Manifest next update: Wed 05 Nov 2025 19:00:15 +0000
Files and hashes: 1: cl6-xP7qlNVenXtKej75GmET20w.roa (hash: FpmDKBHZRHAtEaN6sVmPZOXv3BRnJ5M9K7h5rDJV66Q=)
2: ftPX6ru82FwqHJ4CTaIfY0kPRSU.roa (hash: iKc9aP9F91n3SzRk10qNjCoKwRfXAgJ0qpka/jBdSo4=)
3: qOdYAufvuGU-OvWcvxvAZTi8pnE.crl (hash: lrJxU3m/Z2/QN59xko1Ry5KBuGFdIHxXKzAa4XxHr6c=)
4: tJWty-Myp1bMv-YOuzd4M1wDOVI.roa (hash: g/a3N7RSWTo3iJRyoUMcVa6AkUH9ej5k+J2S9ybi0Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:c0:bb:7d:26:4a:dc:f6:38:1d:0c:f7:ea:18:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e75802e7efb8653e3af59cbf1bc06538bca671
Validity
Not Before: Nov 4 19:00:15 2025 GMT
Not After : Nov 5 19:00:15 2025 GMT
Subject: CN=9fb5d84253b801c548e74f7f675797b8fc878daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:fe:b3:03:f4:82:5f:bf:e8:cc:2a:47:2d:
82:7d:c5:9b:59:0d:18:34:33:9f:bf:82:ac:aa:a2:
6c:eb:91:d2:46:35:71:ed:44:20:ca:af:f3:5b:2c:
31:b5:ed:5f:5f:8b:46:12:9e:fa:a9:d4:9c:31:6e:
63:15:5a:1a:59:93:36:10:8c:3f:16:46:c8:ed:98:
93:ae:9f:25:ca:95:fb:22:6b:83:b1:ea:11:f1:14:
d5:1e:18:08:78:7d:6b:e9:18:6e:b2:35:9a:cc:29:
1b:82:5e:ae:9b:8e:12:e7:c9:06:c1:02:ef:c9:f1:
a4:3f:66:b9:bf:f3:f6:a9:fc:97:44:13:55:f4:8d:
03:3a:96:f6:20:3d:a7:6e:60:77:d0:78:c4:a8:b5:
d5:7c:09:7a:3f:5c:7c:40:fd:a9:ff:6e:5e:59:c6:
78:61:79:96:df:65:a6:e8:41:0c:03:10:c6:4e:cb:
a3:69:0b:48:39:36:fa:4d:39:b8:97:b1:60:7a:2b:
9f:d0:a0:19:7a:45:da:71:cf:a7:76:2c:0c:22:82:
b1:ba:b8:51:82:2a:00:e7:14:c0:3f:49:da:81:d7:
4a:db:64:8f:d3:28:09:f7:70:60:18:fb:93:5c:7b:
15:e8:ac:18:d6:19:2f:a6:cf:0b:31:fe:82:cf:03:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B5:D8:42:53:B8:01:C5:48:E7:4F:7F:67:57:97:B8:FC:87:8D:AF
X509v3 Authority Key Identifier:
keyid:A8:E7:58:02:E7:EF:B8:65:3E:3A:F5:9C:BF:1B:C0:65:38:BC:A6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOdYAufvuGU-OvWcvxvAZTi8pnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6256b6-36a1-4f2f-a0b9-411f5837fefa/1/qOdYAufvuGU-OvWcvxvAZTi8pnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2b:3c:37:c7:0e:4e:27:f1:c0:9a:f2:36:21:1d:6b:bb:91:
e2:e0:fe:88:4c:fc:82:88:d1:20:f4:00:27:be:72:ac:ff:22:
cf:39:bb:af:9c:0d:43:57:87:0a:8d:fa:1e:8e:52:de:b0:89:
86:65:e9:62:cc:b8:0b:f9:0a:97:48:e2:29:a8:01:4e:d3:d0:
da:61:a5:cb:fd:d4:6a:b4:8d:b3:8c:c9:0a:e3:3f:58:cf:92:
4b:01:7a:35:bf:22:cb:44:6f:58:68:60:12:38:35:2b:e5:b1:
59:fc:85:4b:1d:8d:3d:51:b7:2b:87:28:4b:5e:51:7f:8f:01:
34:c0:5f:d2:47:36:9d:1f:4a:bf:26:cf:db:d3:ce:b4:d2:4e:
81:bd:f2:4e:ab:5e:c9:01:f6:85:ad:4c:d0:52:0a:cf:d1:9e:
f1:45:3c:56:7e:c0:0e:78:45:04:55:b7:1a:2d:10:a8:90:1f:
86:b3:0d:0b:a5:cb:56:3a:61:a1:b5:9f:40:c0:12:3a:38:bf:
23:ed:e4:db:b4:cc:d6:32:21:5b:c8:94:6a:84:81:b0:14:ab:
97:cf:3c:06:c4:5d:a9:06:aa:64:f3:da:9a:b4:92:5c:f3:00:
02:86:73:fa:99:fe:e0:83:dd:23:dd:5d:d2:d7:bf:60:db:e8:
6c:38:15:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:56:31 2025 by rpki-client