Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json)
Hash identifier: y9cHijgtxxO1a0RZHBL1JSCBGQk3BjpuPefRd0vSWvQ=
Subject key identifier: D7:3F:72:0F:23:10:59:94:23:98:45:B5:0D:02:3E:B0:39:9A:04:EA
Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Certificate serial: 019A4E4F610E438E7EC6E4491C21B3572C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:16 +0000
Manifest this update: Tue 04 Nov 2025 10:00:16 +0000
Manifest next update: Wed 05 Nov 2025 10:00:16 +0000
Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: uXpWnPnm7TROY9ad7kOpg5jtWiTeA9J6KCjFbUBW9o4=)
2: sDPpx-mL_-TYo49AUalN83Hb7rw.roa (hash: TLER53MCgePm+J2o6lGDLT56kpvbjUNH4PxF0iwFFXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:61:0e:43:8e:7e:c6:e4:49:1c:21:b3:57:2c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4
Validity
Not Before: Nov 4 10:00:16 2025 GMT
Not After : Nov 5 10:00:16 2025 GMT
Subject: CN=d73f720f23105994239845b50d023eb0399a04ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:55:05:6e:6b:29:67:72:79:27:40:39:08:
84:a1:8d:4f:3a:e4:47:e8:61:00:d7:4c:ed:6e:f4:
71:d7:75:d5:99:6e:b1:62:fd:38:e0:a3:b0:be:b7:
70:47:24:7b:08:dd:bc:ab:53:51:04:d9:e0:12:51:
a0:2f:91:cc:27:21:5d:1a:a6:9b:50:73:7c:0a:75:
6c:82:be:db:49:40:17:fa:2d:46:6b:22:ec:21:f7:
92:8d:84:75:23:ba:b1:8e:34:b9:96:b3:b8:27:2a:
73:3d:50:c6:b0:35:de:b8:f8:31:43:55:7e:5e:41:
ec:e4:6f:04:bb:75:53:89:ee:86:66:cb:03:c5:ab:
71:57:2f:07:04:16:89:d1:7b:5e:f3:64:1c:87:90:
89:47:5f:60:ca:bb:7f:e3:0e:10:0d:2f:97:c0:30:
25:b0:48:a3:6f:16:ff:9d:83:f4:df:1d:df:75:eb:
86:1b:0b:0b:4d:60:db:c9:75:05:5c:85:d4:0a:e3:
b5:c3:52:5b:a3:1b:94:3a:79:f8:30:fd:64:67:b6:
13:7e:36:cc:1c:e7:b6:e3:8e:41:2e:32:12:e1:71:
d6:90:56:c2:6e:da:39:10:17:3d:e1:8a:06:9b:05:
4c:61:62:f3:cb:ed:06:95:8c:35:9f:6a:a8:9c:33:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3F:72:0F:23:10:59:94:23:98:45:B5:0D:02:3E:B0:39:9A:04:EA
X509v3 Authority Key Identifier:
keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f5:e5:12:de:c7:d8:52:25:ab:3e:71:62:f0:a2:fd:ea:15:
02:0f:6a:17:38:25:16:3c:0a:71:4d:f2:66:68:3f:2f:e1:da:
7a:7c:a7:60:af:0c:21:14:63:e5:0a:8c:66:58:f8:4e:14:ed:
dd:16:f4:21:b2:91:3f:3f:5e:2c:92:ff:de:e1:c2:1d:42:6e:
ea:78:d5:a7:15:f0:52:79:1d:51:73:97:13:e7:e6:1c:42:ff:
61:3d:01:6a:bd:88:29:9d:a7:ed:14:84:d7:20:56:7b:2c:c9:
66:b5:9d:ba:39:8b:32:e7:bc:66:64:3f:6d:ce:54:af:9c:33:
83:6a:eb:15:a0:7c:a2:89:fa:9f:0f:9b:9f:04:01:e2:f6:56:
d0:f7:bd:45:4f:71:d4:99:43:e1:86:e4:4d:8c:a6:5c:44:99:
90:b2:b5:cc:24:25:7f:12:25:8b:f8:75:37:5f:fc:4d:3e:10:
28:74:28:59:b6:31:85:8e:1c:0a:35:ff:bd:8e:65:b4:c2:6f:
d3:9a:b0:ca:99:3e:79:69:15:7e:f2:d3:2b:df:13:12:91:91:
de:b7:79:26:08:d0:a7:aa:cc:4e:a1:4b:72:0d:38:02:8c:27:
ae:42:ab:ba:66:a0:68:8d:76:ea:a3:ed:9f:9c:e6:0c:94:25:
cc:ad:e7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:12 2025 by rpki-client