Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: QFxag7/H1PTBr1S2VRKUj5BtMTcdmNnGn2nl3e0t0ZA=
Subject key identifier: A1:3C:33:B3:EB:9B:E4:5E:84:9F:17:6C:88:A3:E5:26:CA:42:97:16
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 0199FD344D0C56844AFEFD39D2D2F116CCF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 010D
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: g6lOJZk_IOKaTF7q4TnhPviaoeE.roa (hash: 3uBzUH3gzYo8KFcFQD+b7edt/srB4qwjOtcspxNTXPs=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: aqrfLC10gXVAr47lf0X9xpOpc2x4ERl24onJabGB1eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4d:0c:56:84:4a:fe:fd:39:d2:d2:f1:16:cc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=a13c33b3eb9be45e849f176c88a3e526ca429716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:87:12:3b:71:ab:dd:42:3d:87:62:a7:2a:
da:80:da:0a:d0:2a:84:80:b8:32:cb:e9:4d:b2:5b:
7e:ff:44:b3:de:ab:ba:46:da:24:ef:d1:d8:32:ec:
9d:94:69:7b:40:57:23:e7:d0:41:61:eb:23:bf:2c:
71:2c:d1:40:75:fa:d6:a9:7f:ca:39:55:2b:6e:27:
6c:2a:2e:1c:b5:70:e7:b5:a6:6a:3f:85:5f:d8:da:
18:ec:ce:78:2e:0b:98:06:6a:ec:d3:d4:36:51:f1:
11:28:59:7e:cf:49:fc:09:d9:76:a1:f4:aa:11:03:
f0:66:09:1a:bb:b8:9a:b7:2e:49:6d:1a:11:82:ba:
b2:29:7c:9d:c0:2a:04:8a:6d:67:96:59:05:4a:d2:
10:51:21:12:a1:9a:c1:8f:cd:54:8d:6e:30:c2:37:
0a:f3:3b:6e:2a:85:5f:c2:1e:08:b5:1d:c9:85:a7:
e7:a1:70:29:c8:f1:f3:61:be:a7:06:83:bc:c5:30:
bc:b0:19:e1:93:66:b4:6c:f9:ad:35:c4:64:11:a5:
5c:20:dc:18:14:1f:56:df:72:9a:15:76:cc:dd:27:
2f:f3:c0:c1:4e:e2:eb:46:4f:26:55:78:d3:b0:af:
84:69:3e:4a:1d:27:92:cf:a1:55:53:12:37:a0:ea:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:33:B3:EB:9B:E4:5E:84:9F:17:6C:88:A3:E5:26:CA:42:97:16
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:68:49:fd:cd:51:53:b3:85:24:86:6b:f3:c0:e3:81:8e:25:
63:69:13:7d:5b:8a:a3:d0:5a:f9:cc:d5:6e:0c:5d:64:a3:f5:
90:05:88:ba:09:d2:c1:f6:5a:ef:7d:51:5c:c5:eb:15:d7:79:
f5:a5:72:85:c2:35:1a:3d:dd:1a:bb:f0:6e:6b:96:51:fb:53:
e8:7e:81:3e:cb:44:29:1d:c3:cf:91:d4:f9:0b:65:ea:01:01:
37:63:f3:a5:75:e0:f0:05:04:31:24:52:84:ae:63:33:bb:70:
03:24:59:82:ad:b2:43:20:cf:1e:e5:be:f1:d6:7e:02:b8:ab:
07:a2:47:ef:76:fd:c4:53:c8:14:1a:ed:7d:70:b5:0c:4c:52:
a3:03:bc:2c:33:ac:c5:bc:d9:39:21:4b:ae:16:41:aa:d9:72:
01:76:b9:0b:41:fa:ea:ec:02:dd:e6:40:f8:87:5c:59:37:81:
fd:dc:49:2d:fb:2d:4b:3f:f3:be:48:c0:81:5c:ff:57:44:c9:
18:93:58:3a:c6:ec:9f:21:b0:b4:54:25:67:ee:d7:e7:55:00:
31:66:87:df:9a:47:32:c8:6a:fc:1d:45:f8:b4:90:68:e7:09:
83:fb:09:14:11:87:ed:ef:9c:1d:d3:b6:7a:94:27:12:60:c0:
3e:21:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:33 2025 by rpki-client