Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
File: Q0llhOXPObVodN6Nx3qjpv-eih4.mft (raw, json)
Hash identifier: R7IQOw8pjCs14/MBl+1MQt0lOlgtvOt8Hu/ODBMrgMo=
Subject key identifier: 16:6A:F6:10:62:49:C0:74:D8:69:2B:48:DE:49:58:DF:16:D0:E8:35
Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Certificate serial: 019A4DE16DD2471D2D1F9A0A1A5E40518AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
Manifest number: 13AB
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: Q0llhOXPObVodN6Nx3qjpv-eih4.crl (hash: ZUvRdX61KhlTWxgks2xmWj5jYGsbo4+LEcdTnVATIQQ=)
2: mF8H3prBEeFw8vv0-wYmE8_MtFk.roa (hash: k6q/MJjxt2Tjd0EikWZoheIRBqYjVQryjlZ0eCvLYRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6d:d2:47:1d:2d:1f:9a:0a:1a:5e:40:51:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=166af6106249c074d8692b48de4958df16d0e835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d3:3d:4d:ce:99:57:da:5c:50:5c:3b:7c:96:
ad:2d:83:3a:9f:11:1b:06:35:9d:3c:9f:91:71:a5:
15:6d:35:81:c4:43:b4:76:8f:20:13:8e:d1:83:cf:
3c:1c:7c:07:72:db:5b:9d:b6:8d:8f:06:d7:21:0e:
f3:ac:c2:4d:92:70:2c:cf:0c:4a:56:d7:75:f9:f4:
80:1f:8e:a1:c7:97:38:d7:c5:4b:a0:50:da:05:83:
c7:68:f1:de:df:ec:64:22:37:09:e6:4b:e1:5e:42:
69:4a:6e:a3:27:f8:f9:63:a0:37:1f:fe:96:f8:fe:
50:b0:58:19:68:c6:d1:fe:fb:95:ea:0e:19:30:37:
b5:71:b9:63:17:9e:72:2d:62:c3:35:23:7e:74:2d:
91:9d:05:15:88:10:39:bb:4c:61:05:1b:aa:89:77:
9f:88:c5:35:b5:19:8b:f9:cf:70:87:43:6e:40:2a:
a1:72:90:32:31:c9:bd:1f:66:d5:bf:ea:38:59:5d:
3f:3e:27:ec:e1:21:45:27:ed:33:2d:12:81:85:37:
b6:69:2e:58:06:e9:b5:19:54:c9:70:32:55:1c:7b:
89:ee:b7:f4:95:2a:82:d6:0b:9e:20:a9:0e:80:8e:
95:ce:56:0b:0c:7e:4b:a0:5f:43:9f:dc:73:a9:2f:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6A:F6:10:62:49:C0:74:D8:69:2B:48:DE:49:58:DF:16:D0:E8:35
X509v3 Authority Key Identifier:
keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e4:3f:44:9e:20:54:43:e5:f5:56:26:24:68:b6:64:e5:81:
ad:c2:59:03:35:7c:f6:2b:e7:d9:67:cb:e4:1c:44:45:1f:c6:
70:cd:27:a8:a7:4b:50:44:fe:6d:d9:42:f1:68:36:ff:90:a0:
55:f9:7d:3c:17:c7:4e:53:f2:ae:8e:7e:be:93:44:47:b6:a8:
a5:a8:c7:45:ea:77:80:6d:1b:3f:7d:8f:9e:f2:28:65:b5:e3:
22:5d:e1:36:ec:d8:14:c8:41:e8:5a:6b:17:32:64:a0:ac:87:
51:e6:fc:4c:76:81:ac:93:d0:71:d3:d4:40:ad:f5:2e:49:c6:
4d:e6:90:eb:3c:71:c1:e3:f2:cb:6c:77:2d:f5:b8:27:75:35:
fd:ba:35:85:c5:af:eb:22:2f:08:9a:fc:75:d5:b4:ca:fc:04:
4d:17:8d:89:50:3b:8a:f8:72:4e:f1:cf:1f:5f:d2:bb:a5:03:
b8:d2:b6:49:a0:57:3a:98:60:b3:29:14:1f:7b:7d:b4:61:70:
57:1f:06:8b:be:4c:50:0d:c4:5f:b5:45:0d:6c:2c:2c:88:72:
3b:d3:b3:3f:eb:25:b9:51:c1:55:b9:ec:c0:32:69:89:1f:71:
7e:fb:d6:a3:ec:31:06:80:2f:64:01:d3:8c:9e:c2:b9:45:f6:
4a:15:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:00 2025 by rpki-client