Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
File: mq5G4hNZMNomjAZNzlrbtjoM7DY.mft (raw, json)
Hash identifier: zokGE7/wYn+tPGOyVkeaApXkpL6HXyEPyDfQV9G5R4o=
Subject key identifier: F9:06:89:C1:64:F6:F6:F4:3A:13:54:13:8E:9F:E7:57:4A:10:62:74
Authority key identifier: 9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
Certificate issuer: /CN=9aae46e2135930da268c064dce5adbb63a0cec36
Certificate serial: 0199FBEB400F917AEEE886DD98C26C8E4BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
Manifest number: 10AD
Signing time: Sun 19 Oct 2025 10:02:02 +0000
Manifest this update: Sun 19 Oct 2025 10:02:02 +0000
Manifest next update: Mon 20 Oct 2025 10:02:02 +0000
Files and hashes: 1: STbkSsaZ4h0iV7Ywpice3xeLm7Q.roa (hash: OYYfvGM7goZ9gxelNf2ly9w5B8haX1abcCwOvQfYiPk=)
2: mq5G4hNZMNomjAZNzlrbtjoM7DY.crl (hash: iO9z2iai+pQ9kbMwx+7lTmRYaIFsRTibclqp7Xt9rPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:40:0f:91:7a:ee:e8:86:dd:98:c2:6c:8e:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aae46e2135930da268c064dce5adbb63a0cec36
Validity
Not Before: Oct 19 10:02:02 2025 GMT
Not After : Oct 20 10:02:02 2025 GMT
Subject: CN=f90689c164f6f6f43a1354138e9fe7574a106274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:dc:64:f2:d8:89:7c:5d:8b:83:b4:89:e2:
35:86:e1:72:a8:5d:47:06:71:e4:8d:9f:48:cc:5a:
15:27:e6:8c:2a:00:b1:b5:05:9b:10:3a:3a:a7:68:
ea:85:5c:66:b0:69:2f:25:1a:4b:84:bf:fd:d5:87:
c5:2c:69:b1:1f:3c:a2:76:47:f7:2f:d2:46:44:fa:
1d:9c:b8:02:fa:d8:f7:f4:21:36:bb:ff:83:01:1f:
32:28:e9:df:ef:33:2b:5c:1e:c1:91:63:fb:ec:0e:
26:7d:80:7d:0f:9e:e1:62:81:a6:cf:c1:df:ce:0f:
5b:b0:b4:c7:e7:4b:c7:f2:6d:11:28:69:7d:30:b6:
4b:b0:5f:63:5d:fc:43:80:87:9d:2f:9f:87:cc:76:
7d:91:be:7a:79:bc:57:c2:5a:12:60:9c:8a:ea:61:
85:ed:f1:25:08:1c:8d:6a:2b:01:33:8e:24:24:36:
60:3e:4a:7e:d0:c3:0f:a4:e2:f2:59:b3:11:7e:96:
9e:2a:ff:c1:55:5c:d7:b0:c2:a1:d0:d1:05:0e:77:
bb:9c:5a:2f:31:1c:6c:39:cb:03:09:7d:a7:73:ca:
b3:2a:80:cd:f4:02:0b:d3:ac:e1:1e:4c:d3:9a:ff:
a5:1b:69:31:a5:7c:f3:5f:f0:5b:02:47:87:69:58:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:06:89:C1:64:F6:F6:F4:3A:13:54:13:8E:9F:E7:57:4A:10:62:74
X509v3 Authority Key Identifier:
keyid:9A:AE:46:E2:13:59:30:DA:26:8C:06:4D:CE:5A:DB:B6:3A:0C:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mq5G4hNZMNomjAZNzlrbtjoM7DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d8fc78-a51b-43dc-b50a-8ae43081aa36/1/mq5G4hNZMNomjAZNzlrbtjoM7DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2a:3b:f0:12:4a:77:33:b5:df:e3:0c:d9:3d:00:0e:13:d1:
3f:3a:5d:a2:bf:3b:0c:8e:d3:de:ad:8b:57:cd:14:4e:fc:fd:
dc:19:ef:e1:8d:eb:4d:73:ac:d0:59:fb:50:9f:69:8d:d1:95:
44:57:dc:b6:59:12:47:e9:5b:12:41:4d:df:95:18:38:68:d3:
7a:a1:9c:98:73:2c:54:5b:10:b5:93:76:d5:b9:47:12:fd:0a:
7e:f5:e2:03:a6:6d:ec:db:d3:1c:17:1c:ef:0c:26:3d:a0:0b:
d8:a8:68:79:6d:3e:39:d5:1e:96:54:8f:be:a5:11:14:e8:40:
dc:aa:da:3f:4e:39:eb:64:1c:75:78:fb:f4:99:02:86:47:a7:
25:0c:ac:2f:6f:be:6d:4a:6d:26:40:8f:95:dd:95:d0:00:39:
8e:fb:0c:0b:32:4c:94:58:63:45:3e:4a:ac:f6:5b:66:df:fa:
3a:41:af:c1:9d:57:b7:93:9b:f6:cb:8c:82:e5:f1:be:5e:1e:
e5:56:6e:6f:c6:60:9b:9d:68:d7:8e:d1:f3:6f:e3:c4:c7:d0:
83:82:b7:1e:1d:3f:d0:59:96:c2:c1:d7:0a:c4:93:40:2b:8f:
a1:b3:77:8f:7e:8c:bf:50:f7:de:23:ae:9a:bd:1e:84:03:cc:
0b:19:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:50 2025 by rpki-client