Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json)
Hash identifier: 6OCR96fWiMk8m6siTvV/1AOGh3kKj2jFaQNYzMiNPpc=
Subject key identifier: E8:F1:CD:1E:6D:70:63:8C:08:63:57:4E:4F:CA:D3:62:6C:01:37:34
Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Certificate serial: 0199FFC8527E413FD24E77882B64FE6D9FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 04:02:22 +0000
Manifest this update: Mon 20 Oct 2025 04:02:22 +0000
Manifest next update: Tue 21 Oct 2025 04:02:22 +0000
Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: u24nEWg+q4QAC66FrSW4eAE5edOZpWBWHXqXTEDCbTo=)
2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:52:7e:41:3f:d2:4e:77:88:2b:64:fe:6d:9f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6
Validity
Not Before: Oct 20 04:02:22 2025 GMT
Not After : Oct 21 04:02:22 2025 GMT
Subject: CN=e8f1cd1e6d70638c0863574e4fcad3626c013734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:7a:6b:e8:bb:44:39:11:90:35:d0:50:fb:
5e:0b:3b:6e:dc:29:8f:96:9e:8c:c7:48:9c:3e:52:
43:1c:d2:98:7b:91:52:92:ca:f0:24:cc:39:9c:d3:
f9:6a:41:80:09:8e:6b:be:46:97:ab:d4:30:39:86:
5a:c4:60:b8:be:20:02:97:33:13:e5:87:b5:33:78:
9b:c8:68:78:bf:95:19:1c:e2:a5:ad:aa:5d:92:cd:
96:a4:ee:70:f9:99:02:a6:49:b6:5d:33:c7:62:5d:
91:8f:14:ba:df:e1:82:7c:ac:1b:79:f6:9e:df:5b:
ea:d1:e7:b1:c2:b8:5d:ed:47:09:13:32:e4:54:c0:
b5:24:fe:6f:e6:ac:15:3c:83:87:72:f6:70:ba:27:
8d:3d:b7:26:00:90:63:a2:4d:e7:3c:7e:ac:1e:c5:
c1:55:70:f4:0f:63:42:a3:30:b5:fb:f0:63:88:46:
8e:ca:37:a3:db:b3:e1:91:bc:19:be:2f:f3:2e:38:
44:20:f8:b1:5a:4d:e5:58:c5:1d:67:ab:5b:bb:3a:
c1:af:89:1f:c6:62:4e:20:98:68:6b:0e:09:27:22:
2f:6e:da:9e:29:79:15:ee:96:66:56:5f:93:6f:ee:
4d:13:e1:4f:91:a4:82:90:26:9d:23:f0:8d:8d:84:
1f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F1:CD:1E:6D:70:63:8C:08:63:57:4E:4F:CA:D3:62:6C:01:37:34
X509v3 Authority Key Identifier:
keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:94:62:e3:46:5a:8d:ca:68:93:95:b4:00:5e:8c:6b:96:32:
2d:59:93:5b:b9:66:59:9a:90:18:4c:d2:4c:07:85:a2:6f:f6:
5a:f4:f4:8b:bb:e6:78:bb:af:53:d1:ab:02:29:ae:a8:98:1b:
54:7b:a5:62:2e:c6:b6:3f:de:d3:b1:ee:b3:40:35:df:af:9f:
11:1a:76:11:ef:00:28:f6:5c:97:18:b0:a7:e1:b7:be:7a:a6:
23:79:31:36:98:27:e4:9d:a0:2f:c9:e4:ef:9d:7a:45:5f:a8:
47:2a:95:a0:5b:97:7b:04:c8:53:79:ff:17:ba:87:76:30:df:
d2:4f:2f:5f:42:ef:d7:b4:1a:42:18:17:ad:5d:98:31:22:56:
8d:14:84:e3:e9:f4:f3:ca:1b:07:c7:1b:4c:6e:2a:b1:24:62:
a5:ff:60:ee:80:76:09:6a:88:a9:8e:95:6e:50:82:b1:5d:18:
3b:2e:df:b3:65:45:cc:9d:88:f1:f8:22:c2:e5:f6:7c:1f:cb:
61:83:fa:35:90:5f:7e:16:ed:d0:89:96:77:aa:d1:6e:b8:f7:
5e:30:a5:ea:20:c8:fa:ae:87:cc:5f:52:c0:0c:3f:9d:cd:23:
b6:24:9b:d4:c2:a5:95:73:93:92:a6:50:c2:af:13:c6:43:ce:
ae:71:e4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:37 2025 by rpki-client