Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier: C3bkomgMgXdema5GibffebccGCxOuTGkhHfpsS/YySg=
Subject key identifier: 05:B0:62:6B:AA:13:DF:BC:94:7E:5D:62:32:A6:7C:35:52:B4:80:F6
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 019A4F9928756DB076E8ED723A07090DF545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 16:00:28 +0000
Manifest this update: Tue 04 Nov 2025 16:00:28 +0000
Manifest next update: Wed 05 Nov 2025 16:00:28 +0000
Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: kpeBfy3apXu1xpi0gofzS/A3ThEg4jBqc7OPKcqQiXU=)
2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=)
3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=)
4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:28:75:6d:b0:76:e8:ed:72:3a:07:09:0d:f5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: Nov 4 16:00:28 2025 GMT
Not After : Nov 5 16:00:28 2025 GMT
Subject: CN=05b0626baa13dfbc947e5d6232a67c3552b480f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:21:23:62:05:5d:3c:bb:3b:55:c0:36:b7:
44:f6:b0:4f:06:02:7a:6e:12:3a:26:86:b4:09:ac:
87:8f:71:dc:72:5d:14:c5:4d:c8:9f:d8:7c:65:69:
e3:3a:80:4d:65:b5:f9:29:e1:c5:a7:fd:e2:e3:fb:
dc:d2:b1:38:2e:82:02:11:a9:35:5b:c8:11:a4:58:
f9:af:d2:45:33:ff:2b:b8:10:f3:a3:d5:f7:58:56:
48:2e:24:e0:13:bc:87:26:66:cf:6b:59:4c:50:99:
ec:b4:89:7d:46:23:c4:65:84:0b:05:df:5c:72:ba:
5c:2d:06:83:10:8c:c8:a8:b6:9c:bd:1b:97:95:63:
d8:5d:1c:45:68:2d:70:fd:47:c6:7b:9b:3c:4d:78:
3f:ce:dc:af:7b:1b:6f:4d:7e:e2:57:97:be:3d:01:
4c:d4:08:42:ea:c6:60:48:08:21:80:4b:ea:49:ae:
bd:02:5c:fd:ef:97:1f:be:ba:32:43:57:a8:c5:5d:
41:ed:91:59:0e:a9:65:13:78:d3:38:89:a5:f8:95:
03:f3:cc:82:f1:26:d2:93:96:44:bb:82:d1:51:0e:
21:87:b9:42:f9:e5:95:34:7a:3c:06:ef:0e:a2:98:
ef:eb:13:5d:aa:c6:01:65:e9:c4:30:44:fe:44:f6:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B0:62:6B:AA:13:DF:BC:94:7E:5D:62:32:A6:7C:35:52:B4:80:F6
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:cd:d3:8e:65:63:89:22:1a:f1:e5:2f:cb:f0:1b:a2:17:
2a:7b:42:8d:fc:f4:d6:74:9c:e6:02:9c:e7:d6:ea:81:6a:a0:
21:bc:5f:fd:f7:94:5c:66:8c:64:ac:79:d8:f9:79:3a:af:21:
4a:fe:c0:97:54:ae:e5:33:1c:bf:75:5d:d1:71:84:8d:44:5a:
c7:46:3c:1a:cf:06:6d:f8:6d:00:53:ad:24:df:7d:ee:a1:41:
b0:e4:4d:68:b0:95:b5:f4:de:90:e0:a8:75:72:2a:44:01:bb:
d0:3c:c2:77:cf:d1:de:10:c5:93:6d:48:5a:77:b3:b6:eb:b8:
30:0d:ac:71:84:8c:4a:e8:11:88:44:1e:bd:0d:c0:be:b1:e5:
9c:57:ed:3d:5a:d6:14:67:07:fc:30:19:1f:62:cf:59:8f:19:
74:97:1a:00:8b:a0:d2:94:dd:cc:63:cd:d3:78:d6:2e:96:81:
6d:e4:0b:c3:3c:17:e0:94:70:88:73:1c:ab:e3:66:a2:9f:88:
e6:28:f5:26:82:c3:fb:ef:b5:9c:21:c5:ca:20:24:b3:be:f6:
c8:da:08:24:9f:92:55:48:57:05:22:a7:f8:00:9a:20:b1:b6:
4f:c3:7a:f0:90:f8:48:c1:a9:83:75:90:03:2a:c2:df:d9:a9:
a6:f9:2a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:22 2025 by rpki-client