Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: vONHCj2Zq/Btq5rTdVsm8SoqZhyYh1wNL+eQEAv2MPY=
Subject key identifier: 08:23:4B:6C:DE:C1:C7:53:0F:35:21:0C:F3:E6:11:74:29:10:BA:12
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 019A5074C46926D3A2474D05CB605346D86E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 20:00:20 +0000
Manifest this update: Tue 04 Nov 2025 20:00:20 +0000
Manifest next update: Wed 05 Nov 2025 20:00:20 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: PHGv-iP3-GV5PUVRHcEuKvBjePw.roa (hash: 7jlPPnbCBHtnfInB0g3T4zwfv1LlUHpXKaShvtDGxfY=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: 0QoG4PSxfdIn7fyT3b6+S15HoxA+iz5xbNAtx59wxj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:c4:69:26:d3:a2:47:4d:05:cb:60:53:46:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Nov 4 20:00:20 2025 GMT
Not After : Nov 5 20:00:20 2025 GMT
Subject: CN=08234b6cdec1c7530f35210cf3e611742910ba12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:e8:80:d5:fd:ac:8c:d0:a5:1f:4c:80:12:
73:ed:59:61:a3:24:35:56:f9:98:13:97:d6:b4:39:
12:d6:b9:39:d1:8b:97:4e:b8:05:85:b0:0a:69:29:
63:d5:97:39:db:17:a3:ea:b4:9a:6c:3d:2b:04:56:
51:4b:b0:c3:a1:ee:2d:90:58:83:3c:42:ca:3e:12:
95:1f:36:da:cd:a6:ac:0f:39:ea:bc:51:11:0a:e8:
81:b5:f6:ef:82:21:32:41:fa:09:f8:66:2f:77:e1:
cf:07:13:35:01:20:1c:8b:03:e6:29:d1:fe:0a:38:
f8:87:22:bc:8a:33:53:d6:0c:bf:1f:64:f4:c9:00:
fd:b8:83:66:8f:d2:f4:91:55:08:4c:f0:b2:bb:e1:
88:f6:71:26:93:c3:05:e2:cf:b6:e2:49:88:f9:0a:
72:4b:fc:8d:f2:66:a4:00:1f:c0:63:c3:ad:33:68:
aa:93:ce:58:44:47:b0:8f:ce:58:6f:8d:85:3f:cb:
a7:fe:05:d0:11:c3:f3:d9:93:88:0e:c3:47:a5:81:
e4:65:b1:70:ec:59:1d:f7:ef:c6:f4:c9:ae:e2:1a:
ef:99:da:7e:5d:aa:9d:b4:dd:c7:7b:43:62:7c:b9:
af:36:32:4d:a0:fc:8b:2b:39:ae:27:40:6a:a0:2d:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:23:4B:6C:DE:C1:C7:53:0F:35:21:0C:F3:E6:11:74:29:10:BA:12
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:52:66:83:ac:de:48:2b:b1:06:6d:16:0f:0d:de:34:b1:81:
d5:4b:d7:54:ab:cf:45:e8:85:9f:0f:f4:3b:2b:bb:27:74:76:
fa:0e:00:f2:28:12:81:1f:d1:4f:7d:a8:72:45:45:10:75:21:
9a:d8:72:b1:6b:14:5e:4e:cd:42:23:9d:3e:e3:fc:19:0c:5d:
9e:e0:44:31:6f:23:0b:e2:19:a4:f4:9b:64:9a:0f:20:38:9e:
5f:4e:3e:57:92:68:97:07:ee:5e:83:9a:32:17:18:a3:cb:92:
6c:13:96:97:9d:7d:1b:69:d3:93:c0:c8:34:79:8d:bf:93:1f:
ed:89:97:a4:67:8a:75:3e:d7:f4:8f:85:5c:15:19:df:fc:ca:
44:9b:4a:4d:61:34:bd:da:e5:8a:f3:cc:58:0a:f4:13:0c:36:
32:f2:a1:40:ce:10:d5:6c:f8:5c:27:24:fa:b3:0c:14:bc:20:
05:cd:39:17:bd:bb:b8:c4:a3:80:bd:0f:51:3b:b8:83:84:13:
5c:67:67:89:c6:0e:6e:eb:93:8b:ef:38:15:b0:10:e8:3f:72:
48:5c:e5:16:14:d2:f1:ba:96:c9:24:52:df:7e:b1:f7:dd:22:
80:9f:e9:4e:c8:6e:1c:0b:aa:c2:73:e6:8a:d9:b0:ed:2d:33:
dd:0c:a2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:34:43 2025 by rpki-client