Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: deXGE6+QThUxt2IbROeT0LTqQSSpxW/0DwKujEwBpuE=
Subject key identifier: 0C:2D:23:80:9D:2E:36:B2:78:D9:B2:3F:7B:76:12:53:06:C8:5E:99
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 0199FCC606EC37DFE15770F68FCB61D07392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1677
Signing time: Sun 19 Oct 2025 14:01:00 +0000
Manifest this update: Sun 19 Oct 2025 14:01:00 +0000
Manifest next update: Mon 20 Oct 2025 14:01:00 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: Avel44QSivrb0g0ir2DPb0SBF15pBwHhpWon9SSk4+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:06:ec:37:df:e1:57:70:f6:8f:cb:61:d0:73:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Oct 19 14:01:00 2025 GMT
Not After : Oct 20 14:01:00 2025 GMT
Subject: CN=0c2d23809d2e36b278d9b23f7b76125306c85e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:96:e1:23:e7:5d:65:ba:f6:5a:1b:12:9f:63:
0e:e4:b7:af:c2:d2:b3:ed:c9:07:70:92:89:5b:db:
d5:77:68:27:78:4e:46:fc:b5:a7:9f:0a:f7:14:ae:
f3:56:81:aa:c2:ff:f6:a9:bc:92:a6:94:0f:40:bf:
ab:0e:74:e6:cb:5d:4b:42:f0:f9:35:59:0e:91:d9:
a5:61:d2:c4:22:c7:f0:59:80:c0:f0:d4:82:dc:88:
54:34:00:e8:f0:29:32:b0:e8:5a:7f:1c:bf:9e:4e:
10:d7:4a:8d:a6:f4:88:ae:10:1a:9b:d4:19:34:f4:
fd:b2:95:2a:ec:0b:2f:66:22:44:78:0a:19:be:de:
24:01:05:56:12:16:0b:d9:e3:32:c5:93:de:d7:50:
2e:92:8d:17:2e:44:89:69:32:73:f7:b9:d7:cf:a2:
e1:6f:19:ef:a9:02:90:e2:cc:fb:dc:7d:ce:4a:50:
4f:5e:8f:be:88:c6:77:05:5c:e0:1a:b7:f8:f3:d1:
da:b5:e1:7a:91:dc:2f:9a:11:4f:4f:7a:33:e6:2c:
c9:b5:21:30:ee:02:e4:11:fb:0f:dc:40:0d:c5:d7:
47:74:59:43:54:a8:ec:d6:c6:ba:c1:b8:cf:67:66:
a0:59:56:88:a8:29:3e:8a:9c:56:cd:c7:ec:c8:95:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2D:23:80:9D:2E:36:B2:78:D9:B2:3F:7B:76:12:53:06:C8:5E:99
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:18:6f:1d:12:ed:af:92:28:a5:90:d6:b1:35:2c:3a:84:e0:
c3:36:78:ba:3f:03:39:b5:91:c2:e8:51:72:5a:60:ed:a2:41:
cc:96:d8:68:83:86:88:f7:77:44:3d:71:b2:21:c8:39:03:11:
85:7d:d6:66:75:f8:45:43:d2:c7:a5:1d:d7:12:5d:48:b7:44:
89:15:40:95:e7:53:23:07:3e:a5:e2:49:51:5e:04:10:59:c0:
94:1a:6c:cb:35:da:3b:20:fa:ae:b9:f4:90:16:11:42:6f:54:
71:a1:00:71:e8:2c:79:57:65:a0:dd:58:2a:93:16:9f:f9:c6:
2d:96:33:54:06:e8:76:29:39:f4:d5:47:4f:7b:ab:92:54:24:
59:90:59:ae:88:a8:70:5e:fe:84:9a:70:54:d0:4e:6a:32:ae:
f6:1c:dd:75:cc:67:0e:02:48:76:95:e0:e9:93:a0:2c:ab:73:
b9:d1:78:12:da:eb:08:31:0d:a1:02:cf:79:93:ec:8c:f2:cf:
1e:b4:8c:ef:47:c0:26:ce:5d:2e:d7:40:79:ff:5e:c4:0c:64:
16:89:ef:c0:d5:ec:21:02:cf:52:24:b0:bc:ba:e5:01:fc:4b:
a5:68:a5:6d:3a:99:29:95:08:a4:da:16:69:a8:2a:39:ea:e9:
07:86:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:08 2025 by rpki-client