Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
File: q-CopGLQ3h9NMBLD455c2mA-j5E.mft (raw, json)
Hash identifier: S4D93zF8rZiBVW4A7tnj4zeeAbUTO/++qI/7KmOtJms=
Subject key identifier: 28:55:EA:E8:53:20:C9:EB:7E:56:AD:5E:79:89:8C:10:81:10:43:0D
Authority key identifier: AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
Certificate issuer: /CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Certificate serial: 0199FDD8BF21C2D9B57142FF8618FAA02861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
Manifest number: 1335
Signing time: Sun 19 Oct 2025 19:01:04 +0000
Manifest this update: Sun 19 Oct 2025 19:01:04 +0000
Manifest next update: Mon 20 Oct 2025 19:01:04 +0000
Files and hashes: 1: 1W5smHKXook3Cttl9rBFCphz4iU.roa (hash: pODFfCt0njdSi3l+0iabpv9dot/GnoaQcWWIJ30v1gM=)
2: q-CopGLQ3h9NMBLD455c2mA-j5E.crl (hash: XN1x7rpGmiZwIW39nwoKihZBBbARPMPk466HmYWem6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:bf:21:c2:d9:b5:71:42:ff:86:18:fa:a0:28:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe0a8a462d0de1f4d3012c3e39e5cda603e8f91
Validity
Not Before: Oct 19 19:01:04 2025 GMT
Not After : Oct 20 19:01:04 2025 GMT
Subject: CN=2855eae85320c9eb7e56ad5e79898c108110430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:69:b9:5c:4d:5f:d6:1e:2b:d3:7f:35:a0:ef:
60:31:fe:5a:34:f9:2b:9c:fe:35:6d:a9:fe:dd:6d:
56:ac:8a:76:2a:c0:e2:67:c6:b4:f6:ef:0c:df:32:
8e:33:8f:ee:68:e3:dd:5d:2d:50:97:48:28:6f:f2:
77:0b:89:9b:8d:3c:82:73:aa:91:08:5e:39:3c:d0:
20:3f:50:d1:91:94:68:94:be:54:c7:0a:6a:bf:ca:
cf:e9:5a:0e:29:b9:9b:3d:0c:cf:29:2d:71:62:31:
63:06:c8:78:05:4d:47:ae:fe:f1:ed:61:2b:4a:73:
f0:5b:07:9c:ec:17:8d:03:a9:97:c0:78:47:f1:d1:
e1:ac:5f:f6:ab:41:0e:30:21:98:24:f4:76:de:b0:
b7:1c:ca:cb:19:b2:6e:db:68:17:dc:95:a3:3a:65:
19:9e:80:09:d2:cb:91:ec:ca:c9:64:1f:1c:60:59:
9c:41:7d:37:f9:ee:dd:66:e8:72:76:05:c9:8e:5f:
1f:1e:8e:00:61:6d:5d:6b:75:f1:0c:b3:1d:74:81:
aa:db:b2:0d:9d:58:b3:94:d0:57:af:6b:e6:1d:fb:
36:23:90:2e:51:f3:55:1f:1e:da:3c:27:38:e4:39:
97:a0:d6:94:51:c2:8f:bc:54:d1:b0:d0:57:c7:a7:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:EA:E8:53:20:C9:EB:7E:56:AD:5E:79:89:8C:10:81:10:43:0D
X509v3 Authority Key Identifier:
keyid:AB:E0:A8:A4:62:D0:DE:1F:4D:30:12:C3:E3:9E:5C:DA:60:3E:8F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-CopGLQ3h9NMBLD455c2mA-j5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/dec31c-dcd4-4da7-9dda-c4a07d61689d/1/q-CopGLQ3h9NMBLD455c2mA-j5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d1:c7:52:99:e0:7d:f1:d8:93:1d:c4:c6:73:55:da:4b:49:
66:73:e4:22:dc:ca:09:2c:53:9e:d9:fd:29:ab:1a:46:64:87:
24:27:7d:70:e1:d9:52:7e:15:b3:a2:83:78:79:10:46:5d:f5:
19:3a:b3:eb:7d:1a:1f:c5:1e:70:e4:ce:d7:61:15:37:3e:d0:
a7:90:00:74:83:c9:96:68:9b:53:01:37:1d:ee:01:9f:ec:70:
06:18:60:f1:d8:61:27:60:4e:4c:0e:0c:1f:1f:67:be:a8:e4:
c7:30:13:66:3b:77:83:6b:0f:f4:6c:eb:f4:45:9f:f7:66:68:
3c:93:f4:f7:85:7f:36:fa:f7:d7:dd:8f:72:e8:44:2d:a4:95:
3f:6c:fc:94:67:da:63:ea:90:af:95:d7:79:2d:2f:5a:a4:6e:
ba:44:08:ad:48:57:db:5b:9e:3d:16:f8:82:79:bf:cb:d9:5c:
3c:9c:a0:c0:c2:84:04:e3:de:ed:95:5c:f3:b5:50:7b:be:63:
1e:09:4f:01:bc:72:62:94:c5:bb:b3:f5:f1:56:a2:23:0c:d7:
c0:82:ac:2e:25:7b:bf:2e:13:bd:12:83:7a:fb:07:35:fe:a5:
65:a2:4a:53:7e:2c:95:7d:da:b6:60:7f:30:e2:8d:39:52:f4:
0b:f0:1f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:07 2025 by rpki-client