Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: ZgJ4ecRxb+pFZAhH2PhUntiBP0RsXYfsbm1mzhGPAkQ=
Subject key identifier: 55:6C:47:75:BF:E5:42:4F:E5:41:00:08:0F:39:17:A1:3D:DC:9F:13
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019A4EF4EC2A81FF23EA682A34847A56A8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:05 +0000
Manifest this update: Tue 04 Nov 2025 13:01:05 +0000
Manifest next update: Wed 05 Nov 2025 13:01:05 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: T3U7SSsqXvWh6yO/U7NjIX0wTkn9AcE+TPv2phixrV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ec:2a:81:ff:23:ea:68:2a:34:84:7a:56:a8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Nov 4 13:01:05 2025 GMT
Not After : Nov 5 13:01:05 2025 GMT
Subject: CN=556c4775bfe5424fe54100080f3917a13ddc9f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1c:3c:26:e8:af:90:a8:a2:93:f1:42:d0:43:
05:14:81:83:fb:e5:ac:f0:d0:00:1f:a3:9a:a9:3d:
73:52:d1:45:91:4f:8e:04:2d:eb:4f:ac:e9:00:ca:
18:76:cd:80:6e:7e:9f:3b:cb:0c:d6:a6:37:a0:04:
5c:a7:16:ac:24:f2:a8:1d:77:dd:5d:64:94:23:f4:
ac:47:dc:40:ab:2c:37:ee:2c:e9:ee:c4:3f:ff:9a:
12:7a:fd:b2:43:40:81:fa:f3:13:af:82:66:be:c2:
19:18:4c:8d:21:81:c4:3a:5a:14:ef:14:0a:69:51:
be:9a:5a:67:b8:6d:81:8f:f9:4c:3c:a4:70:47:a3:
b1:da:6e:67:ef:34:b3:cc:73:34:27:ee:c9:8a:b5:
49:4d:8f:a9:13:80:f5:11:4a:e5:b5:d3:d5:23:41:
a2:14:b1:cc:2f:b1:ca:cc:17:41:f3:b1:cd:64:ec:
bf:60:8f:9f:96:a9:36:7e:dd:42:1a:eb:f6:68:28:
08:8c:8f:10:04:58:17:5e:04:7c:80:fb:c9:59:3a:
7a:e6:db:f7:ec:77:25:80:08:d0:44:af:5b:f2:d7:
7a:75:e4:b2:36:36:27:78:9a:c0:3e:7d:49:16:85:
65:50:88:3a:eb:8c:b0:1c:dd:2c:ce:35:82:97:07:
60:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6C:47:75:BF:E5:42:4F:E5:41:00:08:0F:39:17:A1:3D:DC:9F:13
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e6:67:22:a9:32:ce:c0:6d:6d:61:4c:3f:ce:4f:c0:fc:11:
ec:3f:96:bc:03:14:5a:0e:96:e3:0b:88:75:e0:0c:fb:f4:c3:
0d:0a:f4:b7:26:55:cf:a0:6e:5a:16:bd:29:74:cb:8d:f7:ad:
2d:cc:2b:2a:da:78:cc:46:8d:2b:23:a9:52:e0:15:cb:19:e8:
fb:dd:81:61:ae:96:20:45:4f:a9:0c:02:b0:42:8b:c6:b3:84:
23:49:b4:71:e6:29:2f:55:5b:f9:5b:d8:76:78:f0:d6:1f:1c:
49:85:d2:e8:9b:78:04:e7:9b:8b:48:5b:83:4b:2e:ce:9b:b7:
21:29:56:eb:92:d7:dd:60:28:bc:8d:c8:9b:49:cf:5f:39:e0:
24:6f:fe:ca:34:54:59:23:15:9b:dd:b4:9e:2a:b8:8b:96:9a:
67:46:33:12:39:4a:98:cf:87:af:e2:7c:41:98:4a:54:a9:9e:
3a:15:9e:41:6f:38:f9:ec:12:78:00:16:d0:12:48:00:c9:64:
f3:f3:80:fa:a7:2b:ae:4a:9b:f5:c7:0a:5d:85:11:e4:31:8f:
f4:6c:32:1b:9f:94:63:39:c4:c0:4d:95:56:e3:95:d3:57:df:
8d:26:1c:48:06:e0:a8:c1:69:09:ca:9b:fd:94:4e:c3:eb:cf:
58:b5:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:46 2025 by rpki-client