Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: ky3tQXw6JjLZcOS6D5/qiww/IBLKITBvGvtm/oyUS6E=
Subject key identifier: 1B:B1:C2:D2:EB:57:6F:74:E9:2E:4A:93:48:63:2C:44:B1:36:07:49
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 0199FCFD9032061DA528D3C2AABDC0749706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0943
Signing time: Sun 19 Oct 2025 15:01:39 +0000
Manifest this update: Sun 19 Oct 2025 15:01:39 +0000
Manifest next update: Mon 20 Oct 2025 15:01:39 +0000
Files and hashes: 1: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: mXNEYo1bV5MFh24hNllNOdyJZ3UIT8As58jhEV07pv8=)
2: u2PcO0qxdpMSmR6nWgSSQ3nTHEM.roa (hash: hawJL7X7ALdqooYTS/10qneIqHecH3wASpMJDU35WRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:90:32:06:1d:a5:28:d3:c2:aa:bd:c0:74:97:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Oct 19 15:01:39 2025 GMT
Not After : Oct 20 15:01:39 2025 GMT
Subject: CN=1bb1c2d2eb576f74e92e4a9348632c44b1360749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:1d:09:34:07:7c:3b:13:f0:36:a9:5e:11:
32:0f:68:77:27:77:5d:9f:f4:ae:6f:e2:25:68:df:
b9:d0:55:05:8a:86:1b:7a:28:14:6c:b2:7b:e7:32:
21:87:2a:ea:e7:ad:ef:ac:68:1c:26:3e:7c:e9:1b:
42:37:7d:1d:62:d2:df:55:db:1c:38:96:8f:14:dc:
60:b8:9a:a8:1b:0b:dd:df:99:dd:bd:2e:cf:aa:74:
54:72:59:9c:51:a5:b2:20:2b:43:75:30:0c:ae:44:
03:77:bd:ac:57:68:5e:05:60:44:99:18:8e:1d:6f:
46:34:16:a4:5a:6b:c5:c5:c2:83:b0:ad:1c:1e:6e:
31:1d:96:a2:9c:5e:9f:fd:43:e9:2b:43:9b:06:60:
91:2b:93:7c:b7:42:ed:9e:ba:2f:36:c6:13:46:fb:
b6:4e:fd:b4:b1:98:c3:6c:bc:82:98:59:f9:9e:10:
74:1f:be:5d:44:17:98:8d:39:4d:c9:ab:ba:78:4f:
cf:87:7e:47:0c:a1:d3:28:64:58:46:81:9b:f5:ee:
f1:bf:89:f5:f0:5a:1a:70:38:a3:ef:9d:ee:3e:e2:
79:1b:4a:a9:4a:9e:18:cf:3d:ce:31:e2:2f:9b:63:
68:d6:62:c5:d3:4f:24:de:27:61:5d:05:62:bb:1c:
d3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:C2:D2:EB:57:6F:74:E9:2E:4A:93:48:63:2C:44:B1:36:07:49
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:80:00:cb:86:e4:7b:cd:93:47:93:11:30:ad:ef:1f:78:
da:79:17:e1:c4:61:42:0c:0e:44:50:3b:2e:5b:94:b4:03:a7:
d7:c3:76:39:37:a2:4e:c4:0e:66:5c:a5:a5:6d:de:7e:ae:a8:
1d:95:36:c3:37:87:3f:56:e1:c5:fa:84:f9:9c:a2:fc:e3:28:
69:8c:ce:c5:c2:f7:a3:a7:70:6a:d0:ed:8f:02:fb:61:4b:08:
8f:57:a6:86:7b:c6:86:b5:f7:d9:40:6c:19:a9:80:37:c6:72:
f1:08:d8:6e:9b:6a:13:7c:c1:de:d0:20:4c:da:bb:89:43:fa:
ce:ce:7c:ff:06:e8:56:82:a6:44:da:3a:3d:41:f8:d6:1c:a8:
45:22:d8:3d:45:90:eb:a4:1b:ba:a0:3a:2d:fe:37:c5:0e:e7:
eb:9d:bf:a6:07:c3:4c:f1:b1:f3:cb:59:e3:ba:14:6e:ba:7d:
54:4c:7c:0f:60:5e:8d:00:79:82:83:c7:a6:eb:98:b6:a7:39:
d9:84:b0:f8:83:d4:65:fe:98:b4:ab:26:46:d4:aa:e0:b8:38:
10:4f:0f:da:12:b7:0a:88:68:77:15:76:73:61:b0:45:8e:ef:
5f:7a:b2:39:1d:bc:34:06:06:4e:c5:26:1d:a6:ae:28:78:4e:
68:56:ed:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:02 2025 by rpki-client