Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: bXarg1qR/km7d3ouQT7DGj3OAk+rcIiLmUozseTiryk=
Subject key identifier: 78:11:CF:A8:BA:B0:BD:ED:FE:E0:D2:65:7A:11:F0:AA:5C:92:9E:2D
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 0199FCC6025C588AFDA31FBB1744878A9A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 06DD
Signing time: Sun 19 Oct 2025 14:00:58 +0000
Manifest this update: Sun 19 Oct 2025 14:00:58 +0000
Manifest next update: Mon 20 Oct 2025 14:00:58 +0000
Files and hashes: 1: DcoOphnBv0Z-r0DRs1Wzn6GO5g8.roa (hash: /C9jr7QH16ykeDGqHdZ0LLAVK74Wkvu3hj1t3uV43yA=)
2: Nq6xP1ML7pMOmt1I4z-fGnkBjbQ.roa (hash: eP8YWZy4BtRcpeOrILokYjbMpuSFUnV4sCVcpAqWhwM=)
3: XmMK1HZ3DcPkTMV2el117ysMhn8.roa (hash: 4EKgTSdeFZXBlalCvjDw36pJD0WP5d5sVK8uLLXyrbI=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: 1tIRh5OkysSnV83tXnCCUv35HqXkhKSGLcNW6oUdBSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:02:5c:58:8a:fd:a3:1f:bb:17:44:87:8a:9a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Oct 19 14:00:58 2025 GMT
Not After : Oct 20 14:00:58 2025 GMT
Subject: CN=7811cfa8bab0bdedfee0d2657a11f0aa5c929e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:f7:a4:7d:44:93:4c:3f:5c:5e:12:5e:96:
4d:ce:d5:fd:39:90:39:8e:01:25:27:a6:58:38:0c:
d9:6e:f0:5b:dd:04:03:84:f4:d2:ab:6a:dc:8a:66:
b5:e8:5b:f0:08:17:bf:c7:d5:a6:1c:30:07:ee:eb:
0e:82:23:cf:cf:a4:b4:0b:2f:33:39:17:2b:f2:a6:
b0:65:2d:ae:ed:81:29:a2:db:e2:f0:ce:03:60:25:
1e:c0:72:5c:f8:24:90:21:be:46:6a:7a:0b:aa:66:
c6:27:77:b3:8d:24:d6:a2:36:72:c8:eb:f8:3c:42:
33:90:a6:d2:04:ae:3d:0a:dc:60:28:3c:17:b6:a5:
b0:47:da:b9:6b:63:50:c0:55:e1:1e:bc:a7:6e:18:
18:7a:eb:be:c1:63:fb:d4:6b:93:8c:ab:12:49:91:
ed:d7:26:1a:f9:f4:e7:39:c5:4d:0b:85:17:11:af:
11:1c:58:12:03:68:76:5a:4b:ca:f8:84:94:81:e0:
8c:77:ab:41:67:84:9f:aa:2d:a9:4b:77:0c:12:af:
9c:42:62:ae:dc:d3:3b:91:ea:82:cf:6f:26:3f:93:
ad:41:d5:19:48:22:a4:c6:a7:4c:56:11:17:08:25:
b1:73:cf:c5:2b:77:40:52:5a:ab:89:77:9f:d9:f3:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:11:CF:A8:BA:B0:BD:ED:FE:E0:D2:65:7A:11:F0:AA:5C:92:9E:2D
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b4:37:43:e9:d9:49:04:b1:ca:9d:ee:31:e3:9e:78:0a:5a:
a4:da:60:71:6f:ec:f0:60:a8:b5:85:7e:d5:f5:fc:1f:35:bd:
52:23:3d:7b:ba:17:aa:55:80:d9:98:c7:5e:16:eb:5b:3c:a8:
71:e5:a0:38:5b:c4:b4:b1:77:ae:c0:b7:17:49:a3:e3:31:1f:
c5:f4:08:62:aa:bc:1a:e6:5a:8c:ba:3f:7b:7b:73:90:45:0b:
08:6d:88:52:43:08:cb:28:4d:a2:e9:03:6c:2a:b4:21:b3:43:
5a:ba:eb:dc:37:56:3d:b1:6a:64:24:6e:80:a0:fa:13:ad:b5:
a2:ae:20:5d:c6:2e:38:4a:c8:77:2b:fe:49:5d:f4:d8:d5:36:
c4:c6:ef:78:f9:1e:44:fb:b8:f9:6a:f5:9b:6c:22:b1:47:54:
81:98:17:41:15:65:4e:b2:aa:f3:61:1e:97:0d:10:42:63:3d:
fb:e0:dd:f3:44:23:d3:ce:93:3e:7a:90:5d:69:cc:95:1a:c9:
46:f2:04:85:ba:61:3b:bd:34:78:00:30:2a:2a:16:59:a0:61:
3b:19:6d:8c:87:c1:3e:28:92:bc:79:be:0f:b6:aa:c8:c3:b1:
7d:49:70:70:24:af:bf:2d:9a:e4:19:1b:f4:2a:21:0d:ce:81:
ec:f9:b8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:26 2025 by rpki-client