Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
File: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft (raw, json)
Hash identifier: wsmmiqZdDlqy8FfvN3ppsuCnyWnhseoh56ZRq36PvuQ=
Subject key identifier: 1D:91:DE:5F:41:36:E8:FB:11:8E:FA:C0:3E:21:AF:04:7F:23:C3:36
Authority key identifier: D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
Certificate issuer: /CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Certificate serial: 019A4FD081BE2B2D46F1D7ECD432C8C6F25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
Manifest number: 10D5
Signing time: Tue 04 Nov 2025 17:00:55 +0000
Manifest this update: Tue 04 Nov 2025 17:00:55 +0000
Manifest next update: Wed 05 Nov 2025 17:00:55 +0000
Files and hashes: 1: 0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl (hash: YbbdqzHopJkKXNdVg/vtGfnpna6uCi7NHK7DzN9FbOw=)
2: Ut4z4tImR83ncGrwpXNPaCBz4dc.roa (hash: x3Tb8uXmHgRhBdCjWUywrl5EoWV8hOlCverEGcV2UXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:81:be:2b:2d:46:f1:d7:ec:d4:32:c8:c6:f2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a3c8cc63d0e7e069ca523f34efb3953ee21b65
Validity
Not Before: Nov 4 17:00:55 2025 GMT
Not After : Nov 5 17:00:55 2025 GMT
Subject: CN=1d91de5f4136e8fb118efac03e21af047f23c336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:a2:08:7c:8f:59:f0:e5:17:d2:1a:3b:6f:
12:be:53:21:5c:ef:60:23:af:9e:2d:f3:6d:ce:6a:
2b:80:ec:ac:cd:23:c6:65:13:9c:7a:db:a3:8c:2e:
f7:81:c1:7d:27:5b:a2:18:bc:ff:85:4c:f7:01:e1:
c6:96:9f:57:ce:6b:b8:e7:b7:48:7b:27:cc:40:5b:
c8:5f:d4:8a:3c:82:b9:02:65:9f:c2:67:7f:2f:e2:
d7:c4:37:13:1b:d1:00:7d:08:8c:47:47:27:08:15:
cc:7f:d2:56:17:03:44:87:4d:77:1a:34:03:df:a7:
e1:2d:af:9b:1d:f4:ab:12:83:f0:16:77:db:64:8b:
d2:a3:4d:61:7a:27:35:fa:13:ed:49:30:39:81:a7:
34:1f:ac:68:85:75:21:24:88:b0:e3:66:69:95:43:
48:b9:1c:d1:e0:de:dc:79:1e:0e:fc:c7:53:54:67:
e7:07:37:00:71:b8:e3:2b:a2:ed:52:34:ac:a2:e0:
12:da:5b:f6:5a:d0:9b:22:23:f4:6e:c0:d8:87:9a:
44:61:6b:9a:ee:04:29:c7:a7:d2:74:02:7e:94:3d:
fe:bb:3e:e2:a7:67:e7:e7:ce:a2:1f:4d:72:c9:1b:
ee:c4:7f:f5:71:2f:7a:0c:d9:b9:7c:15:7e:b3:8a:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:91:DE:5F:41:36:E8:FB:11:8E:FA:C0:3E:21:AF:04:7F:23:C3:36
X509v3 Authority Key Identifier:
keyid:D2:A3:C8:CC:63:D0:E7:E0:69:CA:52:3F:34:EF:B3:95:3E:E2:1B:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qPIzGPQ5-BpylI_NO-zlT7iG2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d0a1fe-0b65-4d50-ae2f-12898697a862/1/0qPIzGPQ5-BpylI_NO-zlT7iG2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:58:46:45:33:7b:5c:e0:39:3c:94:63:2b:bb:b0:cc:f3:79:
a1:cc:1f:c5:ae:24:1f:0e:d7:8a:41:32:af:c7:3b:d8:2d:11:
f6:a9:d8:0e:d2:5d:1c:2f:1f:a1:4c:64:68:9d:43:37:9f:72:
64:9c:6d:41:b7:2b:94:11:33:69:79:c3:38:e8:52:b6:c2:22:
66:49:b5:cf:34:11:23:8f:c0:c4:d1:9e:51:5f:93:bd:97:ff:
a1:71:34:01:ea:98:aa:d7:92:93:af:10:a4:ea:99:04:a2:a9:
6f:45:e8:f7:0c:ec:ca:e3:14:e8:15:f3:87:8a:f8:4a:24:5f:
a5:b5:ff:d5:5f:50:25:bd:e2:00:6e:39:25:a1:da:95:ef:d5:
b1:36:60:d5:01:ca:69:83:e6:b7:5d:b0:b7:ee:d4:3c:5b:84:
3d:40:b0:68:9d:31:b0:8b:45:af:ca:82:33:38:96:74:a1:9f:
d4:40:53:56:d9:6b:9d:e6:93:f2:11:93:7b:bb:09:28:07:90:
c7:06:6f:56:f4:0c:aa:ef:42:72:ce:14:59:a7:20:8d:f8:21:
6a:86:e2:91:6a:26:63:4e:4d:96:91:cc:e7:4d:6f:58:77:5c:
df:85:67:79:f7:44:53:fd:c5:fd:6f:92:62:50:bd:01:4a:0c:
87:91:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:43 2025 by rpki-client