Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
File: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft (raw, json)
Hash identifier: bA0hpx/TXnOqPtBp14VBe8JQLdDqUJJKd/lHDgJx8EM=
Subject key identifier: B4:E8:A3:98:AB:09:1D:F6:71:74:A8:94:29:2D:7B:B4:57:98:13:15
Authority key identifier: AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
Certificate issuer: /CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Certificate serial: 0199FC589A0217EFFE3879CFA949C49EC032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: 1Z36oEX0lkx8ndMTGV0SwL3pu6s.roa (hash: oLjRdDjCa874D2Ohi+4lYwxZSVZ663VZAUA47G0Sbic=)
2: rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl (hash: k2eVBkNXxWicT91K43V4/sLsrpzShMzkqWUXbpNyAow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9a:02:17:ef:fe:38:79:cf:a9:49:c4:9e:c0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea84d7e64ba3e85b57036c7318f93cc3d94d187
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=b4e8a398ab091df67174a894292d7bb457981315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6b:b5:1b:4a:42:22:81:f4:c6:66:a4:f2:f6:
1f:2a:cd:b5:eb:c2:c8:37:6f:dd:53:d5:7c:4a:fc:
18:9b:3c:45:ad:3b:52:4c:2b:7e:aa:8c:f8:43:82:
07:d1:b3:e9:32:c2:9f:64:63:1f:30:72:51:54:63:
f3:18:c6:c9:fe:ee:9a:d2:5e:99:22:02:c9:25:ca:
52:72:8a:00:08:42:7e:73:d4:72:ab:69:32:28:ee:
84:a5:b9:57:41:4d:bf:61:a8:af:c7:da:6c:8d:6e:
eb:7a:d2:db:a5:3d:7f:7b:78:5b:01:d4:34:8b:95:
0b:a5:fd:7b:7d:81:c3:e5:22:95:15:b2:df:e0:9f:
c5:e5:91:80:8f:05:79:a7:25:01:4c:cf:e3:71:1b:
b3:93:95:1d:3a:a8:02:49:7b:12:11:35:84:c9:3c:
6c:45:da:db:43:8a:b0:0d:a0:1d:1b:89:f7:1f:14:
33:3b:57:16:6e:53:10:1d:e9:b7:1f:da:52:a4:76:
1d:b3:14:ff:c6:b4:e3:52:05:e9:70:88:cf:54:a2:
88:95:6a:46:f0:1b:90:46:fa:0e:56:26:25:a3:a7:
bd:54:ae:26:8d:6d:4e:7c:b2:de:4a:2d:5b:a1:7b:
e2:10:2a:8a:65:f3:c3:5b:b3:ae:76:fb:18:8c:c1:
48:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E8:A3:98:AB:09:1D:F6:71:74:A8:94:29:2D:7B:B4:57:98:13:15
X509v3 Authority Key Identifier:
keyid:AE:A8:4D:7E:64:BA:3E:85:B5:70:36:C7:31:8F:93:CC:3D:94:D1:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/157f1e-7cf8-4d98-a924-97c332f7239d/1/rqhNfmS6PoW1cDbHMY-TzD2U0Yc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d3:45:f7:c4:46:2d:79:a8:4d:c3:55:f8:ef:3b:9b:5d:a7:
b3:fd:2a:cf:f4:ba:65:8e:89:18:7f:8a:be:e3:60:f1:85:bd:
7c:f0:c8:93:11:1f:25:ac:c3:13:11:9e:25:c4:35:39:34:f7:
57:4a:af:39:fb:47:6d:65:f4:1b:fb:2f:8e:7f:b0:02:31:e3:
6e:ab:3e:e1:ff:dd:f3:ab:66:8f:a3:f5:38:b9:b1:b5:8d:61:
cf:2d:9b:2c:c2:94:37:01:66:de:34:5b:80:14:f4:11:e8:b4:
1d:53:19:da:29:39:e6:ff:5f:f6:a2:43:e1:ac:a4:07:46:53:
61:93:6a:ab:9c:8b:86:54:ef:a7:f8:35:83:be:bb:3a:4b:30:
a6:9f:93:bf:c2:80:fb:9e:f1:c7:52:ae:08:89:b2:0a:cc:6b:
c1:c5:2d:f3:50:81:75:c5:00:79:d8:2a:11:81:7d:4d:5a:fd:
01:a2:67:f0:7b:62:03:36:0f:39:30:52:aa:6d:37:e1:22:59:
38:1d:5d:92:99:4f:17:1c:66:d6:ba:a0:11:77:b7:d6:56:41:
6d:34:22:a6:d4:8c:a8:df:3a:db:74:21:cf:2b:27:84:6b:73:
47:3e:71:fb:d1:9c:a4:da:f3:0f:93:97:d0:dc:61:6d:c0:2b:
ed:09:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:38 2025 by rpki-client