Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
File: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft (raw, json)
Hash identifier: Iy4eab88kkXNZx3+hqt5Jqc6t2wZodppDj5p9LaGZT4=
Subject key identifier: 57:D0:C8:47:C6:47:35:70:DD:79:98:AD:9C:73:50:E2:83:80:42:A1
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 0199FEB4D893F68006707492FFC0B2D0206D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
Manifest number: 07B2
Signing time: Sun 19 Oct 2025 23:01:28 +0000
Manifest this update: Sun 19 Oct 2025 23:01:28 +0000
Manifest next update: Mon 20 Oct 2025 23:01:28 +0000
Files and hashes: 1: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl (hash: Dhr97bAWLThllSvj/PDlNJnGxRBJvDcILvi+7qz/9AI=)
2: vJJQ7dMyrgz7V87aem8R5eRT1tU.roa (hash: YVuwtpk4uTSArI127axgnPV75XcPEeuaWjYEyG0FBxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:d8:93:f6:80:06:70:74:92:ff:c0:b2:d0:20:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Oct 19 23:01:28 2025 GMT
Not After : Oct 20 23:01:28 2025 GMT
Subject: CN=57d0c847c6473570dd7998ad9c7350e2838042a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:84:00:40:5b:15:b6:5a:f2:1b:28:68:67:
2b:30:4b:c4:c9:ae:ab:1c:6b:d2:1f:31:ad:8d:a5:
ba:5f:42:41:41:0d:4e:61:2f:e4:bf:45:0c:6f:c8:
d5:54:a3:53:89:16:b0:68:77:9e:5a:6c:86:e7:6f:
87:3b:5d:0f:78:3f:aa:03:a7:74:bf:a8:25:a5:a0:
ef:d9:56:18:42:9b:7f:4a:38:70:5d:38:e2:09:fa:
ca:a1:ad:b6:e5:ec:d3:a0:e9:18:75:a3:28:7c:d7:
2b:fc:86:8b:79:9e:d2:83:68:3d:d0:df:82:7d:33:
b5:8c:8a:70:73:49:db:bd:c5:8b:6f:b4:90:4c:b4:
bf:0f:f1:24:52:ad:68:18:d6:e2:fd:69:ce:e2:e9:
f4:62:f2:e1:01:fd:5b:67:69:57:46:95:15:b0:5d:
3e:25:0e:70:b3:da:90:12:3f:dc:63:e3:07:9f:57:
36:2e:4f:af:2f:f2:76:2e:3d:83:9e:91:04:41:a9:
78:12:24:1d:0a:50:67:58:be:32:ef:9f:ef:47:9f:
d0:15:7c:27:6e:01:ee:28:f4:43:59:27:f5:51:fa:
f7:60:49:bd:6c:c1:ed:4d:fd:31:04:bf:3a:af:1d:
91:d6:93:71:8f:92:47:c2:16:56:74:f8:72:47:93:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D0:C8:47:C6:47:35:70:DD:79:98:AD:9C:73:50:E2:83:80:42:A1
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3e:ae:19:a4:85:cf:69:7b:d0:69:ec:17:ed:57:42:e0:69:
54:e4:b3:20:45:44:c1:fd:ea:d3:63:f1:1c:6b:d4:aa:be:09:
d0:e6:cf:6a:a4:76:a4:ff:2c:d9:20:0e:ba:c7:5a:98:73:30:
b8:4f:3a:b6:5c:ca:f8:aa:17:be:ba:b4:09:a5:c8:85:48:34:
d9:01:07:00:06:10:9a:44:7d:a9:5e:b0:e6:90:bd:ae:1a:5e:
4d:c5:1e:74:ac:26:1a:0d:6c:ea:81:b3:66:06:aa:4a:aa:e4:
6a:3b:78:ea:48:a2:2a:cd:0b:a2:ed:52:d7:0a:3c:f1:c3:92:
90:35:d1:66:b6:69:6f:ee:39:f2:4c:dd:c7:17:5a:4b:d4:a4:
c8:5c:9f:93:ee:f5:9f:e1:01:10:10:c0:af:28:25:de:53:24:
55:84:59:fc:59:bc:3a:05:02:62:f8:65:c5:5b:54:d8:6c:b8:
11:7b:5d:38:ae:e9:fc:45:b5:97:95:6d:31:27:e4:37:92:21:
83:47:bd:26:8f:6e:94:31:c1:d7:42:b3:6a:18:c9:b8:b2:5c:
65:20:2d:14:f8:1e:b5:f5:1e:de:18:e7:57:cc:7a:21:15:a6:
77:48:41:26:d3:5f:ec:ac:e9:a7:5e:63:83:1b:7e:f7:cf:8d:
42:58:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:38 2025 by rpki-client