Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: Cjpnbu7i46VbYZwCiapRreK3j9kW237/ev/uBElm1XI=
Subject key identifier: A8:86:2C:6D:C5:99:1D:42:B2:C8:C4:68:91:17:45:A6:B7:24:F8:24
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 0199FD6AF0A1A6E4551FF59475723420AE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 17:01:07 +0000
Manifest this update: Sun 19 Oct 2025 17:01:07 +0000
Manifest next update: Mon 20 Oct 2025 17:01:07 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: ziRlT91is7XHt1Jh+U8fKaJ6cl7pC2mbaZ/iCP+LKVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f0:a1:a6:e4:55:1f:f5:94:75:72:34:20:ae:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Oct 19 17:01:07 2025 GMT
Not After : Oct 20 17:01:07 2025 GMT
Subject: CN=a8862c6dc5991d42b2c8c468911745a6b724f824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:a4:ee:b0:9c:02:3e:38:62:9d:86:8c:2e:
d2:78:0b:93:aa:a5:1f:1b:a5:2b:64:fe:69:e2:9d:
e7:67:78:be:b1:45:03:2a:01:74:ef:0a:94:10:89:
9c:0d:79:64:a3:bc:d9:01:8d:34:42:3a:a4:d5:fb:
b9:c5:a6:31:8f:a3:73:2e:1e:5a:58:41:3e:99:33:
ca:cc:50:a4:ab:93:c0:24:fb:10:7f:75:94:d8:30:
92:2f:b3:8e:98:c9:76:e2:fe:83:0d:d9:bb:76:5a:
07:43:9c:29:f0:2c:57:e2:b4:c4:ec:c7:a0:e8:ec:
30:93:53:ef:9f:68:d4:ca:1f:04:51:12:f9:82:d1:
48:65:15:03:d2:b5:e8:7a:9a:6c:6a:92:ec:f0:12:
51:3f:6f:9b:2f:5b:51:cd:ec:c1:b6:b8:92:4d:b4:
38:59:bf:4f:65:05:e2:ab:25:e5:19:7c:da:80:8d:
d7:ca:ac:c1:e6:60:66:4b:a6:e3:3d:72:d0:c3:98:
e3:2d:85:10:b5:4e:18:ef:90:36:fc:26:3b:f2:10:
d1:b8:8e:12:00:55:53:91:f9:b6:d5:38:94:40:1d:
cf:9e:73:11:3a:ac:b3:0d:11:5a:a8:27:16:08:e9:
e1:6d:21:a7:4e:78:b6:27:ef:74:7c:4f:31:26:9a:
5a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:86:2C:6D:C5:99:1D:42:B2:C8:C4:68:91:17:45:A6:B7:24:F8:24
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:95:06:b8:79:17:86:e9:c5:16:19:42:aa:18:2f:7a:bf:90:
c5:72:ba:47:44:f8:04:c0:1e:3b:64:40:b9:9d:c5:ed:b8:dd:
2a:f4:e7:53:2d:ff:3c:cf:25:3b:38:5f:cf:ee:ce:80:b1:c6:
8a:ef:26:5b:44:da:04:3f:9e:eb:40:3a:f3:1a:37:16:7c:37:
52:68:a4:c2:3d:23:ee:1a:0d:6f:65:fc:f7:3b:b2:4a:cc:31:
4f:14:b8:17:bc:86:91:f5:5f:d8:4f:13:16:d7:87:90:5f:07:
62:3e:52:ac:71:84:d0:77:21:bb:54:13:a9:04:f1:23:7d:54:
a3:d0:c8:24:b0:c4:d8:aa:f3:de:c7:3d:80:28:aa:87:c0:65:
2d:6a:bb:2a:a2:44:d8:63:23:61:a1:dd:bc:1e:5d:de:a7:17:
60:5a:8b:3f:6d:7b:18:c2:01:61:71:58:b7:72:6b:1f:44:40:
57:74:3a:42:cd:97:90:11:d5:2f:4d:f8:3a:18:3e:8f:59:02:
d9:09:8f:a6:71:d6:bc:7e:0b:1f:c4:7e:82:77:46:db:de:2e:
42:85:34:90:94:a2:91:f8:6e:4d:03:9d:9c:4e:fc:02:75:7f:
dd:a8:0e:a1:67:a1:50:35:7f:06:91:b6:a5:7d:dc:c1:ca:c8:
e9:94:39:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:15 2025 by rpki-client