Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
File: cqpTdXQ1Dyam82tD3DA7njOefuw.mft (raw, json)
Hash identifier: ydnb7jnlcXijKn2RSIEWr7qCorb2mQLR45FprSvevpM=
Subject key identifier: DE:51:A0:7A:94:55:13:B1:A7:23:DA:A8:8C:E9:2B:E8:D9:ED:EE:2C
Authority key identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
Certificate issuer: /CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Certificate serial: 0199FAD7A5FC96B40982956E00E06B21D412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
Manifest number: 56
Signing time: Sun 19 Oct 2025 05:01:00 +0000
Manifest this update: Sun 19 Oct 2025 05:01:00 +0000
Manifest next update: Mon 20 Oct 2025 05:01:00 +0000
Files and hashes: 1: OdQoZmUeQxbjQw9Xd3JcS6O4ZB0.roa (hash: h6gBIhto95GvAYtKF7Qysg2Pvm4JnUu8RgX7IrQ7D+s=)
2: cqpTdXQ1Dyam82tD3DA7njOefuw.crl (hash: wfk6tkRi3Wn4ampNCrx3ALeHYEQW6zYw6grLyPWSHl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a5:fc:96:b4:09:82:95:6e:00:e0:6b:21:d4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72aa537574350f26a6f36b43dc303b9e339e7eec
Validity
Not Before: Oct 19 05:01:00 2025 GMT
Not After : Oct 20 05:01:00 2025 GMT
Subject: CN=de51a07a945513b1a723daa88ce92be8d9edee2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:89:43:67:eb:3c:eb:fb:da:c0:56:56:8b:
6f:3c:68:3f:2d:9d:da:a2:ed:bf:a2:12:91:cd:9b:
c1:f8:a0:53:79:45:64:5d:dc:1f:91:fe:5d:74:01:
ad:a6:81:c1:9b:10:c5:c9:00:d6:80:51:ca:32:05:
fb:b4:10:54:a4:3b:b2:42:51:19:5a:c8:07:c4:fb:
91:e7:b0:2d:46:9a:81:a0:4e:b4:e8:60:13:26:03:
65:3e:e4:28:79:b2:89:e5:fe:4a:c4:b2:ae:77:2d:
32:7f:6d:17:ee:9e:52:fb:cb:06:ad:0d:ab:53:95:
de:44:1b:b4:fa:b8:76:81:c5:86:31:85:2b:7c:3d:
12:cb:17:a9:3a:6d:c4:24:c5:d9:e2:83:5b:8b:7b:
b9:f7:0b:94:26:cd:36:a6:e1:73:27:2e:f9:f3:b2:
f9:92:5c:55:48:be:bb:ce:b6:1f:13:3c:e3:48:ce:
20:52:df:28:4a:69:ff:64:63:6d:dc:62:68:1f:c4:
9a:ac:55:73:6a:2c:8c:0c:d6:a8:6e:83:27:48:28:
a1:f6:b2:f1:1f:aa:45:a0:d1:e7:32:0f:f0:93:7f:
81:29:38:b2:4c:d9:a8:7a:fd:37:34:d9:d4:85:fd:
c3:04:e7:4a:29:73:39:7d:6e:d0:65:32:68:63:19:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:A0:7A:94:55:13:B1:A7:23:DA:A8:8C:E9:2B:E8:D9:ED:EE:2C
X509v3 Authority Key Identifier:
keyid:72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:17:cf:27:1e:f8:c6:f7:2d:54:c4:10:1c:32:7d:be:d2:fe:
62:ae:d3:05:24:16:1f:77:7f:ce:10:db:5f:72:2f:a8:64:88:
57:34:74:13:eb:ab:4d:88:4c:14:c8:c8:7a:97:0f:8a:2f:97:
0c:74:04:3c:60:db:40:30:ca:d9:c1:94:22:c8:10:cf:b5:4c:
df:70:e1:6d:e5:95:65:97:f9:cb:8e:5c:0b:86:dc:6f:54:0a:
b7:7e:a3:ea:9a:7f:c0:6c:8a:4c:56:0a:db:4f:bf:5e:49:4d:
c3:4f:f7:65:2e:01:54:97:d3:89:58:b9:1d:d0:58:79:9d:7f:
39:45:62:96:6a:77:7a:dd:d8:af:d9:c8:5a:c7:9b:99:ea:9c:
35:aa:24:c3:56:7d:76:20:02:5a:52:b4:06:33:7f:80:bb:b3:
40:16:de:a9:b4:f6:94:3f:a5:cd:60:16:88:f3:c4:85:cb:1f:
26:55:59:90:7a:95:f1:46:1d:6d:e4:78:e6:c5:b0:77:47:e8:
17:f9:a8:f1:09:ff:dc:b6:84:c2:20:42:df:3d:32:cf:52:e4:
88:95:b5:10:35:72:0d:52:90:56:70:4e:00:fa:90:52:9a:49:
06:0d:2e:a5:61:f8:b3:45:f9:c6:d7:66:4c:aa:52:46:aa:ce:
c1:e1:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:34 2025 by rpki-client