Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
File: qERxpm95BxB-RTRxa_pCCNQGlp8.mft (raw, json)
Hash identifier: RC6YUgPunNzaoUVPGFQ7hr1rkUgWA18OojDXmmFn6jk=
Subject key identifier: C5:7F:FE:A3:00:C8:45:54:0C:8E:90:06:8F:8D:44:E9:B1:0D:7B:48
Authority key identifier: A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
Certificate issuer: /CN=a84471a66f7907107e4534716bfa4208d406969f
Certificate serial: 0199FC8F6768CFEFC956D3DFBA7E2960345D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: JTBFzZ_Xd-qKEEB1M2yH_cqN0L8.roa (hash: UtmE2VrYOG/N+bYO3QuLYMQZyMdAh9FYCP1pfkSwK6Q=)
2: qERxpm95BxB-RTRxa_pCCNQGlp8.crl (hash: nLvtT9GRBQuGg7JghE/v4nMeaAOgDWEIyi3usAfTH0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:67:68:cf:ef:c9:56:d3:df:ba:7e:29:60:34:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84471a66f7907107e4534716bfa4208d406969f
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=c57ffea300c845540c8e90068f8d44e9b10d7b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ab:ba:7f:8c:0f:38:9b:06:38:af:ca:3e:5c:
3d:38:88:dd:5a:04:5e:a7:49:29:8c:c7:8d:36:b1:
c2:10:52:ad:87:c3:82:8d:7e:cc:e7:46:32:9a:a3:
5d:f9:4f:87:cf:3d:7a:46:34:7a:2f:1c:1a:ea:56:
80:17:13:25:9a:6e:c1:d3:a1:cf:a2:b3:a7:48:1b:
36:67:3f:5d:e0:42:52:c9:c4:71:8f:6d:be:9f:eb:
c4:3d:6e:dc:41:62:77:0d:d2:be:0f:1a:9b:17:7b:
99:5c:88:48:40:95:fb:82:20:a2:6d:76:60:db:87:
6c:b6:50:61:fc:85:90:bf:c9:8e:44:23:4f:81:4d:
9e:45:a5:f1:91:db:96:29:cd:e4:29:63:2c:e8:3d:
1e:47:07:89:c9:82:28:ab:c2:af:2b:ee:a9:db:09:
de:8a:4a:d7:f2:85:b9:b5:a2:3b:96:6a:f2:1d:e4:
36:a7:a0:e9:92:2f:68:34:ce:bc:3a:97:32:55:4a:
48:3a:96:62:cb:7d:ba:24:23:74:d1:7b:e0:ae:f0:
d5:c3:9a:ee:ad:f3:8e:13:75:b4:fb:6e:2b:53:eb:
96:53:5b:7f:7f:44:86:dd:8c:46:f6:1f:47:8a:b1:
63:ae:81:dc:a3:4d:9b:a7:e4:26:a3:0d:5a:89:43:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7F:FE:A3:00:C8:45:54:0C:8E:90:06:8F:8D:44:E9:B1:0D:7B:48
X509v3 Authority Key Identifier:
keyid:A8:44:71:A6:6F:79:07:10:7E:45:34:71:6B:FA:42:08:D4:06:96:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERxpm95BxB-RTRxa_pCCNQGlp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/85d097-0153-4902-af7a-b8c331a848aa/1/qERxpm95BxB-RTRxa_pCCNQGlp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:91:80:7a:46:0e:e2:f0:60:48:ca:ee:38:84:22:a5:7c:c6:
7d:de:46:92:2e:5c:c6:61:c6:2e:43:b6:61:8f:72:c6:52:2f:
9d:e6:45:f5:c4:90:dc:8b:e2:99:b7:b2:a6:26:18:eb:04:da:
7f:a0:ff:37:da:41:06:e5:38:7b:c4:de:ec:b4:b7:de:84:6c:
e7:e8:f7:24:70:08:34:09:b6:60:aa:8b:24:ad:25:21:50:56:
86:2d:ec:ca:95:97:8a:e1:5e:a5:74:d0:23:e9:61:4a:ff:05:
35:95:52:ad:f2:ea:ac:ba:e3:56:05:db:92:32:f9:d8:94:26:
e5:87:7f:66:ba:80:03:0c:b0:a0:34:ae:11:29:0b:6c:aa:ad:
36:23:0f:db:01:e4:40:b9:f0:d4:05:3f:e4:76:bc:5c:df:e3:
1d:22:15:d3:3a:68:d2:05:ea:aa:01:7b:ea:0c:a1:9b:c7:9f:
b1:60:9f:4e:b5:ab:80:49:3b:3b:aa:4c:bd:86:1d:c7:ed:c3:
53:0d:89:d6:d9:81:1e:17:17:4f:c9:30:00:9a:75:29:70:d9:
c4:9f:e8:6d:06:bf:16:d6:ef:94:b3:6d:45:5b:3b:4b:6b:98:
52:51:ab:e4:ed:c4:cc:fb:44:6e:1f:c8:34:27:25:3d:00:8c:
33:1b:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:14 2025 by rpki-client