Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
File: _-Q3vK2brPo7drfdBFQTP7TYyz4.mft (raw, json)
Hash identifier: pjldj8HC0LZysASPIxxsM0W9/7nKrvUJbNJyTyz05mA=
Subject key identifier: 5A:AD:6B:97:FA:D9:8A:B3:87:CD:80:F3:8E:35:F2:E8:AE:C1:36:F1
Authority key identifier: FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
Certificate issuer: /CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Certificate serial: 0199FC21AAB5138F73DB99A153E203AE9043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
Manifest number: DB
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: BLqnqYXfNpeDaXR1TT1NxALunTU.roa (hash: HiOoL5QoKyGrCXU+ZvFwDx1bHqF6go6OY2pLOukJd1s=)
2: _-Q3vK2brPo7drfdBFQTP7TYyz4.crl (hash: /1SOFkfHcLswNJn3vQp+EG2BwXGt+b0/FlegLY6bS98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:aa:b5:13:8f:73:db:99:a1:53:e2:03:ae:90:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe437bcad9bacfa3b76b7dd0454133fb4d8cb3e
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=5aad6b97fad98ab387cd80f38e35f2e8aec136f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:9b:2f:66:d5:87:fc:5f:cb:ab:50:63:17:
49:15:89:17:6c:ab:41:b3:8a:4d:33:13:d2:ae:d3:
33:9b:22:b6:ae:e6:7e:5a:fe:85:a3:82:c7:37:8b:
7e:a0:fa:36:9b:ad:ec:01:00:46:c2:c8:69:b7:de:
8c:6e:0e:83:4e:5e:a4:62:d0:8f:76:51:5b:a8:aa:
04:fa:df:70:3c:1b:89:c1:08:7e:9e:84:1e:5b:58:
88:4c:6b:4a:b1:e7:2e:3d:79:58:7f:fa:00:da:a0:
a4:86:26:db:23:fb:92:a8:b2:bd:71:e4:b4:c9:38:
b5:79:86:92:d2:a0:3a:51:47:d1:bd:af:d5:e7:fe:
f3:ca:a0:ae:61:d6:ba:86:fa:d0:24:2e:1d:8a:5a:
fd:15:a9:27:ec:2b:85:55:ac:1f:07:22:34:b0:61:
03:93:23:b5:ff:34:73:9e:6d:41:47:92:00:92:26:
fe:21:64:b3:7f:ed:26:85:2e:4b:f1:7e:ff:f2:0b:
3e:fe:f3:e7:da:37:02:88:e0:68:d1:3b:39:b7:cb:
87:ec:86:99:af:6e:62:ae:74:b1:49:9c:6c:fc:4f:
ca:27:3c:e4:0e:3e:1f:a8:e7:a8:b2:74:c0:f0:43:
2f:ce:88:59:21:16:b1:0e:00:1f:bf:71:56:cc:9c:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AD:6B:97:FA:D9:8A:B3:87:CD:80:F3:8E:35:F2:E8:AE:C1:36:F1
X509v3 Authority Key Identifier:
keyid:FF:E4:37:BC:AD:9B:AC:FA:3B:76:B7:DD:04:54:13:3F:B4:D8:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-Q3vK2brPo7drfdBFQTP7TYyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/3d4827-3f14-430e-9cee-d121c5a75d98/1/_-Q3vK2brPo7drfdBFQTP7TYyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:80:f0:29:22:a7:35:b4:b8:71:56:e9:e8:fa:08:9c:6f:
7f:31:38:66:af:c2:58:54:91:0c:30:88:12:9c:ea:78:ba:4a:
8a:ab:2b:a9:7e:0c:21:bd:4f:49:9d:84:ce:b2:1e:2f:a3:fd:
df:5a:dd:97:7a:a2:55:5d:41:ed:1c:04:a4:8e:a8:e2:c9:79:
9c:5c:ab:aa:35:4b:92:68:f5:03:cb:04:99:ae:0e:fd:e6:6b:
49:d7:71:3a:a2:62:3e:8b:39:09:a1:9b:fb:4b:c1:1e:65:44:
6e:ed:75:c5:81:74:ab:4f:55:64:32:82:87:95:6d:f1:56:85:
9a:f1:c6:f7:b7:5c:2a:b8:de:7d:70:c4:68:18:32:1b:b8:1b:
ce:74:8a:f5:f7:7c:18:b1:35:83:8a:0a:1a:c2:92:52:c8:2c:
08:47:83:28:91:51:79:c9:cf:38:c0:d5:ae:a6:c4:e4:df:fb:
5e:9e:43:3f:10:b8:72:4f:2e:0c:5a:b2:9f:c2:ad:6d:c4:0a:
73:84:24:04:a7:01:05:bd:80:5b:03:4e:54:f1:0f:21:88:c6:
53:94:97:06:47:07:dc:4e:6d:0f:28:b7:62:4b:14:a8:4f:29:
40:e5:e3:a5:3b:4e:2b:9c:4c:73:00:52:9f:cf:9c:af:c1:2e:
9e:b6:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:01 2025 by rpki-client