Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
File: Q7iP8e37ZyBmAwJncaquyEuLHrg.mft (raw, json)
Hash identifier: z5i2Gsh9B0HaITwvRsFwGDrebOAsr+cuS3kBWCa9aes=
Subject key identifier: 38:EE:17:48:93:F9:66:03:6C:DC:63:75:CD:1E:2F:5C:80:3F:68:23
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 019A4DE23176E5835C5DFD2921502C5565E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
Manifest number: 0EBC
Signing time: Tue 04 Nov 2025 08:01:00 +0000
Manifest this update: Tue 04 Nov 2025 08:01:00 +0000
Manifest next update: Wed 05 Nov 2025 08:01:00 +0000
Files and hashes: 1: Q7iP8e37ZyBmAwJncaquyEuLHrg.crl (hash: CP2t0wcumnnz7f7o+t0g7VKNVy8Oqoh4alFr5MMwp0s=)
2: gg-emnwJIGdBmpEHYh5OFvjnfmc.roa (hash: f0YF0XqFky78qYjbpn5730w15nHy84AldxyEdZxgOEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:31:76:e5:83:5c:5d:fd:29:21:50:2c:55:65:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Nov 4 08:01:00 2025 GMT
Not After : Nov 5 08:01:00 2025 GMT
Subject: CN=38ee174893f966036cdc6375cd1e2f5c803f6823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f6:2e:18:67:32:a9:fc:bd:4c:95:d7:cb:e7:
0f:33:39:e1:9a:bc:d8:79:70:64:22:75:69:7f:ef:
17:d9:3a:58:f6:55:34:b1:20:56:b5:1f:6f:92:23:
e9:57:c2:a5:34:a3:6c:97:7d:a7:28:a4:97:08:ed:
0e:6d:cc:14:c8:75:4f:cb:45:5e:da:84:e9:6f:bc:
69:7e:e3:32:7f:66:2c:c7:b4:35:82:78:83:59:e7:
42:51:29:3c:57:91:49:e2:8b:47:f4:c4:9b:bb:54:
8c:61:42:33:02:95:86:5d:88:71:34:73:9c:8b:57:
49:2d:b8:cd:c1:00:7a:8a:63:c0:ef:a7:3b:56:f7:
1a:fc:ca:0c:e4:4d:95:9f:72:4d:1a:26:4e:9c:f7:
5f:1d:0c:85:a8:8f:db:f9:de:62:2f:c5:1b:ee:b6:
76:b9:0d:30:c5:69:ad:65:d5:cd:e4:9b:b4:8c:6f:
38:a0:9c:ef:77:ff:77:c8:2f:80:a7:82:cf:aa:9d:
dd:09:0a:4a:45:91:73:64:c1:17:e3:14:1c:ca:d4:
5f:ad:55:cd:f9:05:e4:ac:d4:5a:0d:07:84:5c:52:
b8:6c:8d:6b:1c:fc:70:49:08:13:b2:7f:62:7c:1a:
99:0e:ef:57:12:ae:9c:a9:2f:1e:a9:6b:0c:df:de:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EE:17:48:93:F9:66:03:6C:DC:63:75:CD:1E:2F:5C:80:3F:68:23
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:66:9d:f1:47:fe:91:df:a1:60:69:e0:4e:a4:ca:f9:70:6b:
75:17:aa:39:46:d6:c8:15:77:f8:c1:1d:e6:32:62:2d:94:3f:
40:4e:44:06:c4:b9:98:ac:6c:20:f8:95:bb:e5:88:58:e7:b9:
34:c6:e2:3e:4a:0d:43:57:f6:6e:da:35:5b:77:48:1b:b7:d1:
39:a4:53:af:a5:72:aa:35:bd:a5:9f:57:ed:49:ae:3f:69:00:
21:8c:05:a4:43:69:bd:33:8e:43:d8:7e:83:84:d8:a4:b6:9f:
e3:1d:b2:fc:54:54:fd:8a:da:2b:52:3d:74:b5:33:de:3c:5e:
aa:48:30:4c:5c:bb:5a:6f:c0:1b:f6:f8:ab:c3:b1:12:e2:01:
74:b1:0f:35:74:af:48:66:9d:4e:be:03:9a:10:1b:0c:62:7f:
be:19:b7:ce:47:e3:9c:7b:8c:15:ba:79:eb:ee:f5:e8:40:f7:
5c:d4:33:0c:99:47:5b:1e:cf:7b:0a:18:86:a8:56:13:d8:49:
df:47:d9:83:b3:b3:73:89:00:28:06:9a:d1:1d:0e:6e:21:e4:
4f:21:de:b6:ff:df:a3:b8:8e:42:80:72:51:60:07:5b:27:21:
d1:1a:26:80:4c:96:6f:1e:5c:d4:c6:ef:0a:ac:11:79:28:4a:
a2:00:73:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:16 2025 by rpki-client