Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier: ZUf0MkQtCBfOZe0FMon5j97y1zqeBCJgQBQrmAbFyZA=
Subject key identifier: 8D:E0:6B:36:8C:E9:04:D6:42:41:DD:34:50:33:7B:7E:A1:5A:E8:97
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial: 0199FAA0EDD2E2AD86AC4D045160E24598A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number: 8C
Signing time: Sun 19 Oct 2025 04:01:14 +0000
Manifest this update: Sun 19 Oct 2025 04:01:14 +0000
Manifest next update: Mon 20 Oct 2025 04:01:14 +0000
Files and hashes: 1: BrmKnel9vz9ZJoRYmUMmfv_fkdA.roa (hash: iTZbysj75EFXeStqkEh3kRfDOJLprFh8UOBLsS70Pok=)
2: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: ZiEhn5LXrLl6fCIxQALdxrUTvEZXALYdGm2J1v+8rVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:ed:d2:e2:ad:86:ac:4d:04:51:60:e2:45:98:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Validity
Not Before: Oct 19 04:01:14 2025 GMT
Not After : Oct 20 04:01:14 2025 GMT
Subject: CN=8de06b368ce904d64241dd3450337b7ea15ae897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ce:3a:6a:bd:e2:a1:8d:aa:3c:45:4b:c6:3a:
21:c6:b3:c7:bc:73:e6:c5:67:89:6f:3f:27:4a:61:
a7:83:29:27:98:96:d6:ce:47:56:bc:c1:87:c2:04:
41:c2:a5:26:d4:76:4d:99:9b:5b:23:7b:de:cf:69:
1a:a1:a1:38:71:d5:d8:ee:e1:74:1a:6d:f4:4c:8b:
c2:3e:4e:5f:e4:dc:a0:2a:a4:49:70:20:74:eb:fc:
bc:9c:20:5d:e6:75:b3:63:37:fd:51:b1:2c:19:d1:
1a:c0:45:f7:8b:b2:fc:ed:ad:17:74:c7:df:5d:34:
46:d5:b5:ae:87:3a:76:c5:72:9a:35:26:28:46:8b:
77:94:97:a1:9c:db:b9:c3:18:1d:1d:00:2a:fd:30:
09:0c:7e:60:e4:e4:09:2f:60:7a:7c:6a:9f:f2:80:
36:29:e8:18:cd:3c:30:c6:e3:3a:0b:78:db:ff:6a:
59:8e:52:eb:e7:0f:99:aa:e1:8c:53:c4:92:fb:b5:
dd:8d:04:c8:e8:af:cc:6a:00:73:44:a2:83:82:e7:
54:07:10:1d:23:b1:c7:9c:03:e0:24:ad:2d:46:43:
7a:44:dd:cc:2c:0a:09:57:44:56:ee:59:78:00:22:
50:40:0c:12:13:68:10:e2:aa:78:ed:a3:b0:f6:e6:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:6B:36:8C:E9:04:D6:42:41:DD:34:50:33:7B:7E:A1:5A:E8:97
X509v3 Authority Key Identifier:
keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:44:9c:ea:02:0a:53:2e:b2:3a:1a:bf:f6:d9:01:69:2e:d6:
4f:7b:3f:9f:d1:52:d0:fb:2a:9b:95:0e:5d:96:e6:18:52:dd:
42:88:cc:83:39:8a:06:7e:a2:22:c8:2a:a8:bb:d3:cd:57:9a:
a0:31:23:bf:f4:58:dd:90:73:1a:f4:f6:b8:58:fe:d1:2c:10:
6a:61:f4:b8:07:ae:16:f6:24:f0:06:67:82:b6:93:7a:d5:82:
28:05:4d:e2:3a:f8:48:6f:1f:11:88:03:dc:6e:83:c1:a9:4f:
72:02:22:e6:a2:ee:ac:89:9b:6d:d2:f4:43:f3:e4:b7:2b:dd:
ae:6e:c9:46:7f:bc:f3:89:19:49:6d:88:e4:67:1d:53:c0:0f:
6f:1f:14:03:48:7e:a2:00:11:eb:78:48:9e:b0:2f:7c:9e:b7:
6d:20:68:b8:8e:4e:e7:b8:bc:5c:2a:fe:78:9e:3c:e0:42:28:
93:40:1d:4a:3b:df:5b:10:42:88:5f:f2:72:82:18:00:85:7a:
9f:c6:aa:c2:b4:b3:b9:c8:c5:21:30:de:c8:3d:e4:52:d4:08:
dd:f1:f3:ab:c4:b7:3c:cb:1d:ac:3f:ad:34:02:e1:d4:59:44:
87:85:6b:ea:0b:0e:e1:e8:c5:5b:ff:a6:14:56:17:a1:e2:d6:
61:64:f0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:23 2025 by rpki-client