Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier: 8QjzLXOwFD9IUZ93yP96OKxkuJ9cm6nhmghhRxUaco4=
Subject key identifier: 0A:31:76:F4:FC:68:01:E1:A4:61:0A:74:3F:6A:20:C3:7B:A7:DF:F1
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 019A500767BD45E9317CB6D02234341D6E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number: 0644
Signing time: Tue 04 Nov 2025 18:00:53 +0000
Manifest this update: Tue 04 Nov 2025 18:00:53 +0000
Manifest next update: Wed 05 Nov 2025 18:00:53 +0000
Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=)
2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=)
3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: iveBS4mRqwFiAc/hEUiod4uXhJt/Ng6S2D7pILcNEE8=)
4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:67:bd:45:e9:31:7c:b6:d0:22:34:34:1d:6e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Nov 4 18:00:53 2025 GMT
Not After : Nov 5 18:00:53 2025 GMT
Subject: CN=0a3176f4fc6801e1a4610a743f6a20c37ba7dff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c2:fa:05:c1:d6:22:2e:3b:66:19:00:e7:ab:
29:33:ac:ff:18:3b:50:4e:4f:c9:74:c1:d8:9a:57:
c1:49:07:b5:3a:79:f8:80:0a:31:a6:ff:4d:35:eb:
52:1c:9c:98:41:b9:cb:fa:fa:9a:bd:1a:99:cc:e9:
16:f1:09:44:fc:78:41:64:04:b9:85:23:b1:18:ee:
ff:eb:5f:e1:f2:eb:e8:1c:a2:de:e6:ae:4c:da:a5:
44:7e:68:6e:31:ba:cc:30:52:4d:35:f7:5d:20:56:
12:02:25:a7:92:f0:f2:6c:8c:c1:2c:61:55:ac:f0:
df:c9:94:09:35:0c:81:a0:05:82:0d:e2:7d:71:4d:
a0:61:1a:57:23:bf:76:32:e8:e1:99:51:c0:ad:45:
a7:61:19:ad:5f:ad:f0:b3:a8:9c:2d:c3:0b:f7:c0:
a9:8d:70:fe:30:b4:59:d2:01:7c:00:73:4b:22:d5:
ee:b4:97:7e:e5:c7:65:9f:d7:33:30:54:fd:05:8a:
4a:a0:b5:86:f9:40:72:d5:7b:3a:5e:51:78:be:bb:
56:2a:ca:58:b0:4e:8b:2b:ac:68:04:f1:ca:00:6d:
05:13:e9:18:ae:f7:83:04:4d:85:88:a0:bf:ee:0d:
8d:c8:89:3e:e2:34:1b:9e:a6:07:c8:68:cb:b1:7d:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:31:76:F4:FC:68:01:E1:A4:61:0A:74:3F:6A:20:C3:7B:A7:DF:F1
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ef:37:9a:f3:f6:8c:6a:6e:22:b2:45:c5:61:a6:c8:51:5a:
97:a8:eb:71:da:0e:8f:9a:9b:b5:c3:79:03:c1:55:72:e3:4c:
45:d7:59:3f:7e:61:a7:b8:cd:86:59:a2:1c:f1:b6:5a:38:27:
ee:b5:61:e8:e5:62:23:78:04:94:0a:d1:b3:7f:24:9a:79:70:
78:8f:f0:8b:b8:46:36:e8:cd:b9:f2:17:52:9f:8e:cd:2a:a0:
b0:8c:84:2c:84:3c:1c:2c:d8:82:23:90:ff:b9:d1:b8:2d:a9:
b5:b4:cd:3b:4a:ec:0b:f6:55:fb:ed:5b:f0:94:af:05:47:ec:
d5:84:3a:59:bf:80:c4:ae:36:ca:f7:9d:38:ae:11:c0:76:be:
08:d3:b0:67:14:ff:73:a7:06:ab:cb:84:c0:8f:b3:80:9e:b7:
c4:2a:80:4e:c4:a0:25:fc:d4:0b:d0:dd:bc:12:7d:fc:23:77:
df:f5:c2:04:d8:3d:db:a7:df:88:7f:58:c3:4e:ac:bf:38:03:
90:ec:e0:dc:b4:6b:17:5e:d9:19:b1:51:63:1d:32:27:b1:f8:
7c:3a:8b:44:d4:b7:b7:2b:17:9b:81:55:e3:d5:e6:79:24:08:
e6:52:ed:ac:46:ca:fc:52:bb:fd:94:f2:fd:b3:eb:2a:f3:2f:
c8:dc:9c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB2e9RekxfLbQIjQ0HW56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1
ZTcyYTgwHhcNMjUxMTA0MTgwMDUzWhcNMjUxMTA1MTgwMDUzWjAzMTEwLwYDVQQD
EygwYTMxNzZmNGZjNjgwMWUxYTQ2MTBhNzQzZjZhMjBjMzdiYTdkZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68L6BcHWIi47ZhkA56spM6z/GDtQ
Tk/JdMHYmlfBSQe1Onn4gAoxpv9NNetSHJyYQbnL+vqavRqZzOkW8QlE/HhBZAS5
hSOxGO7/61/h8uvoHKLe5q5M2qVEfmhuMbrMMFJNNfddIFYSAiWnkvDybIzBLGFV
rPDfyZQJNQyBoAWCDeJ9cU2gYRpXI792MujhmVHArUWnYRmtX63ws6icLcML98Cp
jXD+MLRZ0gF8AHNLItXutJd+5cdln9czMFT9BYpKoLWG+UBy1Xs6XlF4vrtWKspY
sE6LK6xoBPHKAG0FE+kYrveDBE2FiKC/7g2NyIk+4jQbnqYHyGjLsX18vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoxdvT8aAHhpGEKdD9qIMN7p9/xMB8GA1UdIwQY
MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt
NzQ5OWE4MjMxZjU2LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2
LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+83mvP2
jGpuIrJFxWGmyFFal6jrcdoOj5qbtcN5A8FVcuNMRddZP35hp7jNhlmiHPG2Wjgn
7rVh6OViI3gElArRs38kmnlweI/wi7hGNujNufIXUp+OzSqgsIyELIQ8HCzYgiOQ
/7nRuC2ptbTNO0rsC/ZV++1b8JSvBUfs1YQ6Wb+AxK42yvedOK4RwHa+CNOwZxT/
c6cGq8uEwI+zgJ63xCqATsSgJfzUC9DdvBJ9/CN33/XCBNg926ffiH9Yw06svzgD
kOzg3LRrF17ZGbFRYx0yJ7H4fDqLRNS3tysXm4FV49XmeSQI5lLtrEbK/FK7/ZTy
/bPrKvMvyNycMQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:07:57 2025 by rpki-client