Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: A3xArfsNhTpTLQynzrcYCj/vwVkfYNYbMQndUykUKEg=
Subject key identifier: 99:48:15:2C:EE:3B:B7:B2:34:76:7F:22:D6:B9:41:C7:BA:E6:7F:F0
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 019A5150CA46FAD6C9D3F071E20E588F9CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0F2D
Signing time: Wed 05 Nov 2025 00:00:40 +0000
Manifest this update: Wed 05 Nov 2025 00:00:40 +0000
Manifest next update: Thu 06 Nov 2025 00:00:40 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: H5Se8Fvmdd7VGW64QFHIFWwAmNoMkZ/Vv8lbQ7Qnkco=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:ca:46:fa:d6:c9:d3:f0:71:e2:0e:58:8f:9c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Nov 5 00:00:40 2025 GMT
Not After : Nov 6 00:00:40 2025 GMT
Subject: CN=9948152cee3bb7b234767f22d6b941c7bae67ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:45:2f:94:8a:c2:b1:9d:80:9a:3e:e5:f3:
78:f7:41:7a:63:8c:9c:c4:15:d8:fe:8d:59:20:91:
9a:6e:3e:7e:39:80:0c:0d:64:32:6a:7d:b3:b0:ab:
f4:bc:86:48:92:1f:06:a1:77:59:d8:90:c0:6f:2f:
a7:42:fe:6f:7b:30:e8:a0:20:fe:1b:04:86:7e:2b:
48:7b:8c:2e:f5:7d:58:68:77:4d:a9:4c:d8:bd:45:
c2:bb:10:01:1f:a6:aa:5f:ee:9f:67:69:17:be:63:
e4:9d:30:c4:9a:ba:41:26:40:80:0c:45:24:e0:d7:
0c:2e:76:8f:da:1d:4c:5e:8c:5e:24:a9:f7:1b:50:
39:da:bc:39:a1:55:74:b1:45:84:d9:7f:3f:41:d3:
24:3d:31:02:38:32:2e:f5:32:b2:2e:5a:67:f3:f9:
cc:3c:5b:ed:c2:c3:08:cf:4a:9e:53:44:3f:db:1d:
a7:82:17:09:e3:bb:f9:6b:f3:c8:57:f7:38:6b:8f:
5b:36:74:a2:98:dc:2a:4d:19:18:d4:c8:9e:61:99:
5e:59:41:15:d8:1a:c0:4e:6e:fd:1f:4b:cf:23:4f:
4c:05:18:df:8e:74:6e:16:1e:e5:e1:01:8c:db:bd:
43:93:1f:92:2e:45:ed:e8:ea:ba:cd:f2:d5:e9:d6:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:48:15:2C:EE:3B:B7:B2:34:76:7F:22:D6:B9:41:C7:BA:E6:7F:F0
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:74:b7:38:7c:c5:00:14:13:87:d2:30:e7:93:8f:be:6d:e9:
3f:56:d4:6f:aa:97:94:a3:26:2e:9f:76:de:a6:b0:96:d1:79:
ed:65:6c:67:90:71:ef:97:13:a9:d4:43:f7:70:16:2d:06:58:
a9:74:f4:dc:a1:6a:af:74:3e:e2:32:ca:8d:6a:57:8e:4f:6c:
3e:23:0d:ac:93:64:09:25:b6:e1:d9:f9:a4:c7:84:a0:5b:0b:
a7:d3:92:42:ee:29:b7:16:df:f0:be:13:82:be:66:b9:ef:b7:
1b:cc:4d:d0:f3:b7:ef:4e:cb:86:98:5c:8e:cc:e4:27:7c:c4:
3e:79:3e:15:26:6a:84:55:bb:b4:e9:7c:59:49:a6:4e:34:38:
7f:b3:eb:f1:e0:b3:75:e9:cf:3c:75:2b:ce:d7:52:d7:2c:52:
2d:7f:0f:61:67:1d:c9:1c:05:41:35:fc:1d:6d:f1:54:b6:ad:
c9:f8:58:d9:54:0e:31:65:d7:ec:63:08:c3:ad:5b:a7:60:1c:
c2:a7:80:2a:57:58:fa:e9:dd:7d:a5:18:3f:9f:fe:59:81:f4:
e6:9f:03:d6:31:ab:81:b8:30:e2:2e:e0:d3:7f:70:86:6d:8a:
06:e6:8a:38:9d:88:cc:8a:10:e3:c5:dd:a4:14:1b:b0:c2:64:
cb:ca:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:57:35 2025 by rpki-client