Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File: q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier: 5SPF6yR5VZdegrgafYHORnwV42d8JRZuYL4TFbUox9U=
Subject key identifier: A4:06:CE:14:61:F4:53:C5:D5:75:2D:9B:58:0E:F5:2F:5D:7C:F2:D9
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 019A53ACEDC7FFC08DD04A0FDD1756248073
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number: 1753
Signing time: Wed 05 Nov 2025 11:00:33 +0000
Manifest this update: Wed 05 Nov 2025 11:00:33 +0000
Manifest next update: Thu 06 Nov 2025 11:00:33 +0000
Files and hashes: 1: OWpwpyh1mzp7VRLchsqWjA7Bd6c.roa (hash: oss82o3LFtVmuDKRa45drAtMghVcyPl5JboekWr/Lf4=)
2: VAImUOtIDMTUQI76JnLfRrvllyo.roa (hash: 4SRj/s3ojBfQysGt03CIZScJZWxzkyEXZbgo7Y3hEkk=)
3: a-k-PpKc_hbf1tf8ym45DzWV9JI.roa (hash: CGjB95jiiaCzW7zL6nSnhujYT7ypy6568fnCUOok1Hk=)
4: cqMsKKEpjqP4gOzkP6YxkMm3WxE.roa (hash: cpcpc/9CzEy+wkt4CwIjle5PkQNTLuHjrssCk9RjDo4=)
5: hJ2Q_kNZVtX9DYCp6pRdbULfToU.roa (hash: Bj3orwiHHH0lwtlViSgWz8igoGg/S7618D6XjO8Tllo=)
6: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: C3EXhoOhBiFUGQAWArSxxxSuzwcyajheidnfzftUdv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:ed:c7:ff:c0:8d:d0:4a:0f:dd:17:56:24:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Nov 5 11:00:33 2025 GMT
Not After : Nov 6 11:00:33 2025 GMT
Subject: CN=a406ce1461f453c5d5752d9b580ef52f5d7cf2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:57:fe:d4:a4:87:dd:9b:f0:bc:90:6a:f2:
ff:86:45:c4:91:c4:93:53:47:a9:97:c0:79:bb:4c:
d0:ee:fa:93:65:aa:f9:b2:2c:06:1d:17:e1:20:2c:
a8:e4:c1:1b:21:63:cd:2e:0c:f9:21:46:15:bb:d0:
c9:01:fe:1c:eb:28:52:91:bc:61:8e:e7:6c:30:7e:
7b:72:03:d5:f9:f5:a9:dd:e4:99:60:0d:fe:ed:b3:
9c:20:69:b7:c2:95:c6:1a:dc:f3:03:f4:5d:a3:f1:
16:c5:65:ac:7b:ad:8d:e2:0d:51:f7:93:7a:91:14:
c8:ab:0f:8a:2c:97:79:6e:67:20:d8:cb:90:fe:49:
de:7c:c9:68:8d:98:3c:5e:01:db:e2:7c:5c:94:d5:
bb:8d:03:15:6a:77:ab:af:77:81:72:d8:d2:43:93:
2f:5f:aa:8c:5f:d5:76:47:16:a6:f0:b7:54:ee:00:
ee:6f:0f:58:ae:73:aa:49:39:24:ac:28:ec:6b:53:
39:1e:69:06:94:3e:8c:f0:b1:eb:9a:d0:c9:d3:0d:
e5:5d:15:cc:19:77:9a:2f:ed:59:f7:21:5a:17:af:
2f:54:2b:7b:24:58:40:da:24:a6:6f:66:80:40:1b:
73:bf:14:e4:2a:81:74:73:ee:37:e1:6d:a8:31:54:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:06:CE:14:61:F4:53:C5:D5:75:2D:9B:58:0E:F5:2F:5D:7C:F2:D9
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:41:7b:47:04:36:90:d8:a6:e9:df:ad:d6:b3:05:3d:46:38:
49:5d:70:67:5c:21:7c:9f:f9:6e:6e:12:15:73:49:8d:c4:75:
dc:f7:63:db:23:70:82:32:ba:4c:58:d4:69:7b:07:59:5e:9e:
2b:06:45:0b:ba:2f:e7:b2:58:4a:d4:63:cf:66:98:b9:eb:fd:
f4:7d:c8:cd:5c:26:52:6a:0e:db:fa:5a:f8:9a:f5:a4:b6:5e:
e5:c7:33:c7:7c:33:38:72:53:85:c1:9f:9b:9b:0f:84:5f:99:
db:a1:aa:e4:34:75:1f:4b:d1:3a:e8:63:8a:7e:c3:06:4a:fc:
21:4a:60:a2:92:b7:00:20:b6:5a:b6:9e:fd:ea:98:15:f9:59:
f0:a7:de:10:60:c7:0a:74:4d:8e:f3:25:05:f4:0c:38:6c:fb:
c1:91:c5:a3:87:a5:c3:03:00:65:23:d0:ca:de:60:6e:20:be:
3c:65:61:fb:84:5c:f0:2b:b7:9d:e3:36:17:b4:c3:24:3f:68:
2d:e8:92:e9:7d:e5:fb:a1:87:ca:19:88:48:df:81:b9:c9:50:
27:f5:74:77:4e:3e:3c:2b:20:f5:82:48:29:2f:4c:be:20:d8:
41:69:c9:fb:b5:ff:12:ee:d5:88:67:c2:34:4d:c5:55:7d:2c:
ac:bc:ff:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:20 2025 by rpki-client