Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File: rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier: e7PC1TTsojNi+xAIgUP858PicMH63CAlZkLDiVCVVqA=
Subject key identifier: C3:DF:5E:6D:64:BA:EC:B6:F7:E1:A6:F2:63:18:93:D4:6A:B5:64:85
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 019A526331A9B58EAF8CAFB19BBFC6CB1B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number: 0AD0
Signing time: Wed 05 Nov 2025 05:00:23 +0000
Manifest this update: Wed 05 Nov 2025 05:00:23 +0000
Manifest next update: Thu 06 Nov 2025 05:00:23 +0000
Files and hashes: 1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=)
2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=)
3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=)
4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: XCNAIbiPkv9VI8u/RxrilOtTmKgx67Yj1hef8fv3gNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:31:a9:b5:8e:af:8c:af:b1:9b:bf:c6:cb:1b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Nov 5 05:00:23 2025 GMT
Not After : Nov 6 05:00:23 2025 GMT
Subject: CN=c3df5e6d64baecb6f7e1a6f2631893d46ab56485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:22:b0:dc:89:ca:fc:d5:c3:c0:6f:e5:28:
ee:55:b4:e6:d6:9e:73:38:0f:15:e5:97:c8:5c:fc:
63:78:05:60:b7:22:98:74:dc:73:b7:8d:ef:6c:10:
7b:89:18:63:78:11:df:a4:1a:f0:dd:68:43:9e:a7:
16:de:79:b1:8d:fc:65:84:92:31:cb:f3:b8:cd:cb:
c1:fd:9b:11:95:6a:80:92:26:31:3c:48:97:2e:e6:
b6:cd:c6:b4:d0:3e:33:86:42:07:3c:32:89:33:f2:
28:b3:19:9a:ae:72:6b:7f:49:0d:ca:ae:35:6b:4c:
bb:6d:46:cf:f9:99:97:8c:ba:8b:f5:ef:c0:f5:cc:
66:fe:5f:ef:6d:38:74:eb:76:6d:fa:e1:7e:7e:2e:
e4:70:38:c9:ec:e5:7b:80:14:01:03:9a:c0:64:6a:
0f:ae:b4:80:a4:c2:2d:45:27:46:cc:a4:6d:80:90:
1b:d2:29:54:8a:79:a2:22:36:34:e2:1c:10:b4:bd:
40:8b:bc:b3:43:2a:2f:dc:73:54:37:9a:0d:4c:56:
80:61:ce:21:bb:0a:5c:e6:f7:55:d2:5d:c4:8f:62:
e0:f3:f5:56:59:d0:63:ca:30:e0:ef:07:96:57:76:
1c:46:69:82:f2:d7:99:08:a4:5a:11:5c:ff:e8:67:
c0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:5E:6D:64:BA:EC:B6:F7:E1:A6:F2:63:18:93:D4:6A:B5:64:85
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:69:9c:60:57:af:8e:d4:a1:65:32:4b:fa:45:63:dc:a4:49:
e6:a5:6e:9a:61:15:87:23:d8:63:ae:dd:05:15:23:c8:8e:21:
10:39:60:14:51:2d:8c:5d:a3:e7:b3:56:ad:bc:ef:b0:55:a3:
ab:67:7c:46:27:4e:71:e2:83:56:b9:5e:5e:05:ad:5a:6f:34:
41:de:47:7d:c7:38:a9:47:14:80:6d:a8:46:ac:5a:c7:d8:44:
02:6d:9f:66:0e:f9:36:e1:b1:a4:b4:c1:d9:cd:03:16:84:c9:
21:c5:6d:7c:f8:12:68:97:60:e4:c6:42:9c:14:77:3a:c2:41:
c4:52:76:7c:56:37:d0:b3:20:3a:f1:19:57:d8:a4:e2:22:4e:
fc:c5:f9:d4:06:90:60:d8:34:ee:a6:4c:f2:23:c1:fa:ba:58:
4d:e9:5e:59:ac:a5:43:9e:dd:73:6c:93:d0:66:46:cd:f5:c8:
bc:eb:dc:8d:27:ce:b2:42:c9:3d:0c:ff:fa:b2:c9:49:a3:30:
5c:94:f3:f1:91:40:86:91:62:b7:8c:58:84:b0:88:a8:a6:07:
df:75:02:bb:e7:60:86:78:8a:73:9e:e2:54:6c:a1:9b:9d:66:
56:6d:5b:f3:48:74:f1:b0:75:37:9c:28:15:3b:aa:82:74:41:
64:cd:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:51:59 2025 by rpki-client