Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: f9k+8zTGi6MCqUblPNIyYDSRX7MF8fISgIuxCEQ1v3o=
Subject key identifier: 64:68:2E:44:1B:D1:72:FE:0F:C8:8A:6D:51:D7:42:08:83:C4:25:86
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 019A54F633F9C96A6FC74387D06B60209410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: 0109
Signing time: Wed 05 Nov 2025 17:00:12 +0000
Manifest this update: Wed 05 Nov 2025 17:00:12 +0000
Manifest next update: Thu 06 Nov 2025 17:00:12 +0000
Files and hashes: 1: BLqnqYXfNpeDaXR1TT1NxALunTU.roa (hash: HiOoL5QoKyGrCXU+ZvFwDx1bHqF6go6OY2pLOukJd1s=)
2: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: 0vKd8K5Dt8UXKpSzV54XzFgUZMeML1SnMy8vfk8Tfq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:33:f9:c9:6a:6f:c7:43:87:d0:6b:60:20:94:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Nov 5 17:00:12 2025 GMT
Not After : Nov 6 17:00:12 2025 GMT
Subject: CN=64682e441bd172fe0fc88a6d51d7420883c42586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:09:c8:a7:0d:da:76:2e:34:23:af:2f:1b:
3b:31:4c:68:aa:19:20:73:93:43:88:a4:b4:63:77:
eb:86:ce:fc:10:b5:2b:38:f6:69:ad:39:00:69:62:
53:27:87:9f:c0:ec:42:93:76:70:8b:0a:c2:af:29:
10:15:44:e3:a3:3a:0e:56:06:ba:a7:56:29:1b:af:
af:84:17:00:bb:f5:d4:2a:3d:96:04:5c:6f:fd:97:
fc:fc:99:5f:5a:9b:82:30:a1:6e:af:1a:38:b2:03:
a9:ab:d7:e4:5a:0d:ca:8f:b3:6c:9f:39:0c:1f:63:
f3:52:6c:2f:89:ab:2e:f0:e0:15:ed:d4:8f:6b:88:
22:0f:60:a2:3e:a4:8d:ce:af:58:15:0c:75:34:93:
7e:f2:a1:01:d8:d4:c5:d8:f8:26:73:fd:86:24:a2:
b6:02:e8:b0:1e:26:bd:f4:42:02:65:9d:17:18:be:
0c:e4:b8:65:cc:46:46:c0:35:3e:2a:32:54:c9:7c:
3a:01:1b:ab:40:13:77:9f:2c:51:cd:f4:f1:dc:ca:
dd:29:4c:78:e2:bc:ad:fb:00:9a:68:bc:88:3d:34:
d4:96:ec:71:c7:ae:dd:19:b1:34:39:44:34:51:f0:
0d:60:f8:d8:f1:7f:9b:82:d3:0a:3a:6d:a6:2f:1c:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:68:2E:44:1B:D1:72:FE:0F:C8:8A:6D:51:D7:42:08:83:C4:25:86
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:24:d9:5a:62:85:7a:ca:2f:a4:d8:8b:9e:e0:23:5a:9e:59:
33:05:68:7e:05:a2:b3:71:9f:bb:b6:e6:2c:a5:2b:1d:18:60:
ae:b7:6a:89:3a:13:23:1c:c3:22:b2:00:39:ba:75:46:66:bf:
ba:61:63:2a:eb:0d:82:a8:eb:fb:8c:ab:ec:e6:38:05:70:36:
e8:12:d3:f4:dc:d8:b5:f8:10:f0:04:04:8d:a8:12:28:6c:9e:
a6:e9:e8:e8:27:85:72:0e:ec:a0:2e:70:ee:bb:7b:bd:6b:b3:
3a:0d:71:d3:7e:a6:44:3f:3f:e5:62:e7:45:fd:70:58:cf:17:
c7:b6:92:f5:42:43:23:c0:d9:f0:e5:75:f3:30:92:7c:d7:40:
70:ec:6a:d9:1d:6c:79:fc:44:6c:72:84:4b:eb:8c:87:0e:7e:
be:cf:e7:d4:ee:c4:a7:21:ab:7b:d2:84:38:8e:09:39:42:4b:
83:ad:d3:d3:bb:6a:27:42:65:f5:89:c2:cd:1c:b4:cc:54:fd:
b2:7e:96:a1:3f:cd:82:2a:32:06:0d:92:1d:4f:50:2c:58:de:
8b:b3:93:82:64:22:68:75:ae:34:15:43:9e:8b:26:23:5d:38:
83:10:f0:aa:a3:2f:99:a4:a4:64:ea:a5:c6:08:46:e7:6e:48:
88:48:90:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:52 2025 by rpki-client