Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: 5I3QlhD/kZfDR/lSR+PSg/2y3POOyIK/okaOSRxl0yo=
Subject key identifier: D5:EC:03:B7:B0:0E:BD:DB:5A:B0:96:04:BD:7E:A0:41:48:1E:A2:25
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 019A4FD05116152406BBDEA1F67413F016D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 13A1
Signing time: Tue 04 Nov 2025 17:00:43 +0000
Manifest this update: Tue 04 Nov 2025 17:00:43 +0000
Manifest next update: Wed 05 Nov 2025 17:00:43 +0000
Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: j4/hm8FQ++lWLPS0Z1JqrHqo8c1iPSITw8vQIFoMbgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:51:16:15:24:06:bb:de:a1:f6:74:13:f0:16:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Nov 4 17:00:43 2025 GMT
Not After : Nov 5 17:00:43 2025 GMT
Subject: CN=d5ec03b7b00ebddb5ab09604bd7ea041481ea225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c6:ae:fb:86:77:d5:05:69:64:cb:f7:c3:69:
da:11:ae:ce:b8:c3:05:b8:7a:96:04:54:89:dd:49:
1d:48:ce:5e:ae:4b:60:ae:63:0f:69:8e:7b:c4:5b:
89:ab:6a:9d:10:3c:60:21:24:ee:98:97:16:3f:ff:
64:78:92:b9:f2:5f:c1:47:3c:d0:2c:5d:ef:f0:02:
55:1a:c8:8d:78:e5:10:fb:8b:43:d1:d7:00:da:62:
10:02:db:1d:80:41:0e:0d:49:6e:ab:47:6a:d7:8b:
3d:4e:16:f4:82:64:88:0a:05:8a:59:30:e0:9f:c2:
f8:b0:7d:47:23:ab:5d:83:0f:0f:91:ce:f9:fe:cc:
92:c3:dd:ca:4c:6a:ad:dc:50:fd:47:ae:d8:92:23:
d7:c2:cb:77:78:9a:04:9b:ff:02:27:a2:f4:6a:06:
94:f3:b8:dd:24:59:6d:ac:15:31:95:ad:a1:ac:2b:
b1:ce:d2:d2:03:0a:40:77:ba:af:75:04:bb:73:2c:
44:02:1b:c7:04:78:77:f4:de:08:20:80:e1:6f:a6:
79:7e:7f:08:9e:38:e3:cd:59:b9:94:49:c0:6f:ef:
11:60:21:e8:71:96:7c:25:e8:ce:92:18:c9:16:8f:
d2:db:9a:77:6a:69:73:14:dc:28:a7:5c:fe:5b:87:
8b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EC:03:B7:B0:0E:BD:DB:5A:B0:96:04:BD:7E:A0:41:48:1E:A2:25
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:31:2b:35:28:ce:92:de:fb:2a:66:7e:9e:9a:e5:e4:75:f8:
80:ac:40:19:fd:94:e3:6c:ca:e8:97:4a:dc:ba:8d:be:0e:1e:
62:66:82:a2:ca:fc:bb:f4:e2:5d:20:e5:94:a8:92:58:2f:82:
a0:2c:a7:dd:e0:1e:47:17:dc:f4:af:51:9b:3b:62:45:a3:c3:
3d:0d:d4:db:46:5e:2c:ba:d3:0f:68:e5:f9:20:e7:ac:aa:81:
cc:c4:6f:80:6e:de:da:40:ef:28:80:9a:d2:96:ce:98:a0:d4:
6c:6f:f0:0e:20:e5:41:7a:bb:4e:d6:be:1b:9a:b6:3c:3a:06:
7d:a8:ea:f3:3b:7c:28:24:36:24:4c:b4:f5:62:d4:ce:aa:36:
99:19:14:96:ad:33:51:d9:fa:1d:77:ff:d8:7e:d4:7f:e2:3e:
5b:a9:35:43:d8:15:68:8e:9f:9d:b9:8e:1d:ba:9b:bf:b2:e8:
f4:49:9a:9b:8e:0b:68:56:76:db:c3:2a:78:78:dd:d8:31:a8:
7d:c6:3e:55:d5:de:de:3f:4e:31:c7:1c:d0:02:d0:c5:b5:1a:
bd:d7:e1:bf:b1:10:91:3a:f1:64:97:95:2c:09:f0:92:d5:cd:
e1:45:b9:b4:09:ec:de:6f:70:3d:c2:62:0e:b2:0a:e2:27:0b:
a6:85:66:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:29 2025 by rpki-client