Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier: hVczzoOKC++UPzZ+Ep8ozx5aSXKA1yJGywH6EVnzOso=
Subject key identifier: A0:24:4D:DD:36:42:8B:FC:D9:E1:16:16:30:58:3C:21:31:76:66:C0
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer: /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial: 019A51BE649D74FD9D97047F5A2F61ECE9EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number: 0ECF
Signing time: Wed 05 Nov 2025 02:00:23 +0000
Manifest this update: Wed 05 Nov 2025 02:00:23 +0000
Manifest next update: Thu 06 Nov 2025 02:00:23 +0000
Files and hashes: 1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: Q1SPJWlg09d97/k0RV6XgCyS0lkrsrue1L0eTdeE3OM=)
2: AI1eVAvKdYB-fGkwuq_TIIbeidU.roa (hash: sKA1VCAma3ARvuIYZgQlGGFrTvogdspfkZ1qSCBQPg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:64:9d:74:fd:9d:97:04:7f:5a:2f:61:ec:e9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Validity
Not Before: Nov 5 02:00:23 2025 GMT
Not After : Nov 6 02:00:23 2025 GMT
Subject: CN=a0244ddd36428bfcd9e1161630583c21317666c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:c9:0c:0a:6b:b4:4a:2b:24:42:0d:af:46:
cd:52:c0:1d:af:78:d7:92:15:c1:9f:07:93:a6:7a:
4e:ef:64:8a:6f:87:b6:02:e4:5e:ef:44:8a:b4:a5:
6d:91:db:93:03:9b:7f:67:2c:23:5c:7f:9c:28:7c:
dc:b3:c8:31:e8:8d:da:3c:b4:76:4c:39:27:90:a9:
7c:63:ec:9b:61:8c:56:c0:11:0f:d8:07:17:bf:3e:
3d:05:45:ad:dc:cf:6f:28:6b:29:d7:2b:d3:39:6f:
c6:7b:ab:4c:1c:80:56:45:b7:52:f8:28:db:0c:43:
e6:c7:65:7a:7c:8f:75:17:13:8e:5a:4b:92:a4:ff:
6b:43:c4:bb:e7:eb:ca:28:67:53:9d:e3:2f:4d:52:
c1:b9:48:6f:73:86:8b:2f:95:9d:44:a2:70:42:4a:
e7:bf:69:d1:9d:c2:71:0c:b0:f0:09:3c:b6:60:0d:
36:76:a1:df:4b:48:af:27:2b:4c:17:47:d7:95:7a:
a7:85:6f:35:c0:c3:04:ed:a2:57:d4:d0:cf:42:2a:
11:06:e3:ea:4e:0d:c5:26:28:2c:29:7f:40:d8:ab:
d3:47:fe:1a:ce:6c:9e:d1:b8:7d:36:3d:16:b4:0c:
9e:c8:eb:de:45:a2:3b:ee:58:f9:bb:fc:f3:ff:4d:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:24:4D:DD:36:42:8B:FC:D9:E1:16:16:30:58:3C:21:31:76:66:C0
X509v3 Authority Key Identifier:
keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:47:bb:65:85:b2:dc:dc:55:a2:ac:6c:9e:86:91:2c:c3:32:
3d:f9:00:0d:b9:c1:04:87:5a:5f:77:e8:4e:3c:6d:17:e1:ad:
65:4c:98:07:5f:d5:2c:79:ff:e6:86:66:56:8c:b2:c2:b5:4d:
9c:aa:12:d0:de:a9:23:c0:3b:ad:9c:fd:32:1c:22:f5:03:ce:
ba:ec:2a:94:3d:05:40:8a:7a:7e:81:f9:27:05:b0:df:93:8a:
09:89:b8:7c:f3:7c:ea:f4:6a:a2:0f:d1:72:95:6c:d8:69:19:
f5:c6:16:a5:8e:7a:68:44:5b:95:3b:25:4b:1a:70:90:02:6e:
ee:c8:44:09:cf:e0:93:60:74:68:0f:98:00:1f:b4:69:64:b7:
5c:85:e9:f6:b0:8e:bc:69:2d:6a:63:d2:f4:31:ad:81:1c:78:
33:26:92:f9:67:cf:a3:7e:27:86:df:9b:d6:7c:42:bc:ca:4f:
54:21:71:b0:54:61:4c:a1:36:76:d1:94:04:41:44:a7:be:5a:
0e:db:8a:4a:b9:ab:81:c3:48:7d:ae:dc:ff:3b:99:72:f2:34:
84:a8:5b:05:8a:14:38:81:a1:89:09:8a:1e:4f:9a:2d:4b:f3:
1f:11:5b:4e:a3:40:68:b7:25:38:27:25:8d:e2:51:54:cf:b3:
8b:6c:c2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:35 2025 by rpki-client