Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: s+TLB4rOS8msoJWdjsPva9fx8SNPc8/Bimjz9jIMY/E=
Subject key identifier: 5F:C6:06:BC:CC:BC:A4:A6:8F:C9:38:43:CC:68:85:A3:94:60:6D:20
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 019A4EF598D057307505C71DB660ED5A2AE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0C75
Signing time: Tue 04 Nov 2025 13:01:49 +0000
Manifest this update: Tue 04 Nov 2025 13:01:49 +0000
Manifest next update: Wed 05 Nov 2025 13:01:49 +0000
Files and hashes: 1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=)
2: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=)
3: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=)
4: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=)
5: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: uCsUQVRJZfcf3iSezWUl/I6zd9tIZxtqYnqCSzAAZLE=)
6: r9AECsFfSl2im_ZX-xTBrlxOfD8.roa (hash: ULicRE/3nxP/zcRYRZJBN8ZiMjtTPhQz8NjZ7TncWXU=)
7: tsLbqC6GleedJxC9I3GCKnE32tM.roa (hash: q8OgS2zQAxO3r6wIDM4lb25MYLPFfkq3kdggEkr0ENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:98:d0:57:30:75:05:c7:1d:b6:60:ed:5a:2a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Nov 4 13:01:49 2025 GMT
Not After : Nov 5 13:01:49 2025 GMT
Subject: CN=5fc606bcccbca4a68fc93843cc6885a394606d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f8:9c:44:84:34:a5:e3:a2:aa:60:62:84:f3:
72:56:30:9c:79:03:b2:23:9c:b0:94:36:5d:20:b0:
86:6d:8e:ae:ec:9a:2b:61:17:29:99:f7:b1:0e:2e:
d3:54:b9:15:a9:5d:85:33:9a:8b:76:64:b1:22:3b:
ab:ca:70:ec:1a:63:24:1d:65:79:f9:d9:31:a5:98:
14:ed:50:b5:c4:01:5e:4e:a0:cd:f3:e5:ee:74:d3:
7d:76:13:b9:35:c7:9f:57:79:7c:f9:f5:a7:52:b5:
ee:6f:d2:fd:f0:c4:06:5a:49:14:a2:05:7d:0b:e0:
f1:07:f6:47:65:a8:c0:b9:29:48:e0:a7:6c:a3:18:
09:91:7b:8c:c0:01:58:7d:f6:16:fb:ba:af:6a:8c:
38:dd:2f:7f:67:50:d0:b8:bc:8c:2e:68:7c:57:57:
d4:f6:59:b3:20:53:f5:a0:b7:71:79:b3:b2:20:f1:
61:31:9b:88:f4:ae:2e:ca:a6:6c:4b:9d:50:bf:79:
22:7e:6e:7f:7c:a2:58:df:74:4d:97:59:31:03:21:
54:01:a6:10:fa:69:08:d7:44:39:e2:d2:ad:b6:a7:
90:97:18:80:97:6a:d0:15:33:7a:4e:fd:38:b0:16:
b1:db:f4:68:fe:cb:ec:fb:cf:16:e4:6c:1c:9f:75:
dc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C6:06:BC:CC:BC:A4:A6:8F:C9:38:43:CC:68:85:A3:94:60:6D:20
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:db:f9:48:03:ec:b9:08:d0:9d:53:66:4a:72:95:05:2d:32:
9c:f9:99:86:df:95:69:35:c8:11:b9:c8:2f:40:2b:1e:b5:07:
21:e7:08:b6:b8:47:55:ec:37:3e:5e:63:04:15:a3:c2:2d:b1:
a1:58:be:b2:53:5a:9c:2b:c6:3e:2b:e5:ba:59:26:0b:a0:54:
cd:a0:f9:4b:e1:19:96:7b:b4:bb:08:80:27:e0:0f:42:b3:e0:
6d:6f:a2:b5:79:d2:99:75:24:09:60:23:e8:49:56:80:90:de:
cc:1f:66:3b:7f:16:04:ed:78:aa:1c:da:78:76:b1:41:60:01:
1c:d5:41:97:a9:11:13:a4:61:6c:d1:eb:5e:b6:9b:11:5a:34:
05:05:32:c4:e8:c6:7f:ef:4f:6d:a6:93:d6:96:36:c0:ca:e0:
3b:07:9c:47:ea:83:ea:bf:b0:48:24:88:41:25:43:e7:be:5f:
c1:d1:1f:31:d2:7d:6e:36:79:ee:e7:21:06:07:f4:e1:47:ac:
87:2f:4a:9a:03:1c:24:9a:42:d2:8a:82:11:4e:6b:43:41:10:
d2:dc:47:6f:db:18:56:43:2e:5f:c9:e4:d1:4e:24:e8:8d:ea:
77:f4:22:59:ab:cb:eb:ad:ac:67:57:77:a4:eb:f2:15:91:90:
cc:1b:cf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:41 2025 by rpki-client