Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: 7M0dJGZITzUMhGVzPTFBdJqPrsNaDZX3t5M8TY1QtcQ=
Subject key identifier: 01:94:2F:BA:B6:8B:95:C0:1C:78:2F:D8:48:45:97:59:D7:14:69:B0
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 019A4EF4EFE637B3A196C94176A82A9821C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 03BB
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: Fg4gfGthOyzcFXfxEYyjwrss7as.roa (hash: mWUv12QovIjIHXpuDNAMlgedx6+BQ3vMWaiHrsA7+3A=)
2: Q5e6g1WUMRG4cL4aNZtJqqD_-yo.roa (hash: T3aZ91YVxRUkDJ96e4vMqo7oCynEMTZ2Xb8h0pZbGMo=)
3: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: qDJrJt38p61T8Khu+Kp7m1+ePKM8/hI08Y1x3eWHmHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ef:e6:37:b3:a1:96:c9:41:76:a8:2a:98:21:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=01942fbab68b95c01c782fd848459759d71469b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8f:8c:41:59:75:46:24:7b:ca:f1:d0:cc:c3:
63:fd:e3:d0:67:38:14:b9:0a:08:97:b4:3e:49:9c:
35:52:1f:51:58:60:65:42:b9:8e:54:2d:77:51:36:
3b:de:f1:72:03:10:aa:8c:6d:ba:26:ad:88:e5:f9:
e1:91:3a:05:02:81:ff:a0:df:e6:2b:9f:ca:af:19:
6e:e0:20:1a:77:d0:76:9d:a5:57:5d:1e:99:06:22:
0b:a7:c7:30:0f:1f:d1:4c:2e:96:ab:d6:21:5d:1b:
71:65:bb:e6:6c:d1:49:cf:ef:3e:77:aa:05:ba:a9:
da:98:01:92:e0:cf:22:e5:b7:82:b7:f4:ba:04:18:
21:d4:bd:32:e9:a7:e9:bc:95:82:24:3a:b9:dc:2f:
68:e6:ec:06:f4:46:d9:71:4b:c8:2e:fe:fd:e8:b7:
0b:93:02:d5:cc:2e:cf:88:bb:a0:19:4e:d6:59:af:
94:30:c6:15:3a:1c:8f:74:01:d4:27:a9:37:56:4a:
0c:ac:e9:d1:81:63:c0:0f:8c:be:6d:b0:95:ef:69:
be:e7:78:eb:11:8d:23:f1:3d:dc:ff:7d:de:1d:17:
5e:c6:98:2b:93:92:0e:74:a7:db:a7:84:2a:f3:81:
ca:5e:0b:32:58:3c:17:b6:64:7d:4a:7a:b2:3a:72:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:94:2F:BA:B6:8B:95:C0:1C:78:2F:D8:48:45:97:59:D7:14:69:B0
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6f:2e:0a:dd:b4:57:c2:38:ea:55:ab:dc:fc:4f:52:b6:cd:
77:37:3d:05:59:35:d1:8f:57:5f:3f:c3:5d:24:00:99:e3:67:
c8:da:13:98:74:4c:1e:4a:1e:07:c9:96:fd:c1:4e:8a:4d:dc:
09:26:80:04:dc:bc:1c:2d:ab:e7:2f:f9:2e:6b:e5:2b:09:b1:
41:b7:7f:4a:ca:6a:82:7e:54:72:60:e3:ca:4b:6e:61:e7:5f:
43:3a:16:c0:1c:ef:15:5d:d8:8e:1b:bb:03:52:44:73:87:eb:
17:ab:74:6d:ad:dd:9a:8b:64:1c:d4:21:2d:0b:86:bd:4b:5d:
45:07:ed:22:c6:7c:b6:3f:99:20:76:8f:6c:0d:a2:56:da:24:
cb:92:ff:ee:76:d2:8c:b3:17:35:df:91:7e:f8:71:1d:2d:e2:
b9:7e:fc:27:58:47:b9:23:9d:d5:e6:9d:a2:a5:23:d7:d4:be:
3c:f8:9f:c7:c0:21:65:4e:a6:60:5f:10:1f:db:7e:4b:a3:3a:
27:57:4d:2f:ea:13:9c:58:ef:2d:f3:4a:07:a2:b3:99:27:dd:
69:37:1d:9f:54:c5:f3:82:e9:ef:87:dc:3e:df:04:c0:9b:0c:
f0:41:62:87:07:7c:6e:0f:7a:34:d2:d5:f7:5a:0f:ac:8d:51:
0a:f2:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:33 2025 by rpki-client