Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: EKG5SrqJAcLpgtY6nR4mW5B9ak/M+Cf0DzrSXoPEgaE=
Subject key identifier: 71:FE:44:BD:45:66:6C:55:66:0F:19:DB:33:6F:48:D4:5F:E3:67:7E
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 019A4F625742F2227CF1D629D6E37F532447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:36 +0000
Manifest this update: Tue 04 Nov 2025 15:00:36 +0000
Manifest next update: Wed 05 Nov 2025 15:00:36 +0000
Files and hashes: 1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: h4BZXtW5MVlGdVyvUlMRUaR1voNuRcaTTcy/aFSwAhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:57:42:f2:22:7c:f1:d6:29:d6:e3:7f:53:24:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Nov 5 15:00:36 2025 GMT
Subject: CN=71fe44bd45666c55660f19db336f48d45fe3677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:e6:be:d5:0b:f8:0c:bd:f0:dd:65:22:1a:
32:36:71:a8:26:ca:b1:d5:b2:38:4b:93:aa:26:62:
df:c2:23:a0:29:85:15:93:47:d1:ca:4e:18:69:6f:
f7:e4:e7:54:f3:fd:a7:3e:91:18:56:16:ae:08:2c:
51:96:9c:e5:9f:4c:ea:02:89:eb:9e:d4:51:df:78:
97:0f:f5:4e:d4:48:bf:5a:78:9e:48:d9:52:72:fb:
60:e1:d2:33:9d:ad:94:ce:95:3d:56:ad:fa:a7:12:
f1:67:7e:2d:32:d5:1a:f6:35:34:22:7e:39:68:45:
cc:6b:99:ec:1a:16:fc:6f:ac:9b:6a:e1:dd:39:0d:
21:2d:38:4c:67:00:b8:75:ea:04:4f:7a:d4:4c:c1:
20:51:40:a0:d0:fa:62:0f:a8:67:11:7a:38:4d:a5:
37:5c:8f:40:b2:12:81:9f:95:24:7d:4f:c0:c7:5a:
22:6a:19:7b:df:13:46:c2:eb:69:17:21:50:b9:41:
ac:3b:5e:db:67:7f:27:be:a3:cf:ca:2d:c0:43:d0:
08:6b:a3:2b:44:83:35:d7:f0:f5:54:c5:8b:c5:25:
87:34:22:0a:0c:78:d1:ba:de:cd:77:71:dd:32:13:
cf:17:a8:e0:19:cc:0f:61:48:b9:43:56:c4:08:d8:
9a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:44:BD:45:66:6C:55:66:0F:19:DB:33:6F:48:D4:5F:E3:67:7E
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f6:89:07:86:af:42:19:64:35:96:5c:49:c3:ac:7f:de:75:
8c:59:39:b2:61:6d:8f:85:bf:df:53:f6:3b:8a:5b:80:0d:48:
92:2d:d0:fa:d7:f6:b5:e0:b4:7a:f8:0e:b7:27:3f:4a:b3:6a:
f8:01:37:90:5f:e5:81:e4:dd:8a:53:af:e5:9b:ee:35:70:c6:
86:46:5e:45:8b:9c:29:db:1d:2a:aa:f4:05:e2:1e:61:71:49:
9b:17:55:2f:20:fe:dd:b4:12:80:dd:e5:97:26:87:3a:32:75:
48:b9:52:54:02:50:e8:99:6a:68:e0:d1:c4:0a:d2:7a:9e:a2:
8b:5a:25:47:ca:ae:f5:27:db:b2:58:2e:ee:fe:78:bf:73:13:
1b:2c:87:46:2c:2a:eb:47:98:2f:7c:cd:46:40:bd:ca:75:43:
3a:64:fb:10:54:aa:6a:29:a8:82:ab:07:0c:02:18:4d:48:e0:
76:24:7c:b3:17:b3:9d:d8:66:a8:87:b8:3e:6c:89:88:12:85:
07:06:7c:43:89:74:a6:73:a3:d0:56:5c:a1:88:3d:14:f1:cc:
48:2e:59:d3:af:e7:95:a8:ee:1d:c6:cc:b3:9f:d2:7b:0f:4c:
b9:d8:5e:23:b8:e4:53:d0:62:17:56:49:62:ed:38:fb:70:a8:
ea:a0:6d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:42 2025 by rpki-client