Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: +57326Jp9JaGc1g77lZ21scUNtLinwYoiwUNYEXydBU=
Subject key identifier: 3D:5F:F8:B0:3C:1F:10:82:0E:7C:1F:4C:CB:63:A1:7C:4C:54:F9:54
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 0199FC8F2C46BBA9473165438AEA14550424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0C57
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: igehxlQfuEretchRzgDd3ObmUA+Yv8UHba5b6CChrlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2c:46:bb:a9:47:31:65:43:8a:ea:14:55:04:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=3d5ff8b03c1f10820e7c1f4ccb63a17c4c54f954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:10:f0:aa:3a:46:ba:7c:87:03:0f:87:31:
98:3f:20:cc:03:80:02:df:8a:91:b1:b0:6b:af:71:
24:e8:36:c3:ce:90:8f:7c:0d:42:94:b4:2f:70:e2:
63:bb:4a:b7:36:de:de:08:6a:0f:23:28:10:4e:6b:
5e:8a:5a:32:c7:ae:9b:07:af:a9:01:af:98:d8:81:
1c:b4:77:9d:1e:94:f5:0e:b7:c5:35:d9:da:17:2b:
b5:1a:28:15:95:c0:0c:2a:ef:83:5a:da:97:57:2f:
7e:55:d5:86:e1:5d:79:fc:51:04:2f:09:31:2e:94:
cd:a9:75:92:41:84:b4:3e:88:b9:92:9f:70:d8:09:
df:c0:1f:71:9c:48:fd:0d:4c:b0:19:b8:80:1c:24:
bc:c0:4f:34:0e:bb:a7:82:8c:bc:d0:56:9b:ca:fd:
69:0d:aa:d4:79:fd:d7:84:72:9b:0f:00:fa:1a:30:
13:42:0e:95:bc:f7:9e:44:6b:5c:2e:31:ce:b9:4b:
b3:e9:90:7b:07:43:d1:37:17:98:f3:c8:4d:74:9f:
fc:b0:9a:83:3b:50:cc:88:04:33:49:0d:7d:c3:e6:
32:02:25:52:b1:a8:f3:70:a2:74:23:d4:e1:16:45:
d4:b0:ed:cb:06:7f:10:70:92:1f:c0:23:ea:14:00:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:F8:B0:3C:1F:10:82:0E:7C:1F:4C:CB:63:A1:7C:4C:54:F9:54
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1c:f6:d4:a8:b0:89:45:95:2c:d3:fb:1c:a0:95:2a:17:45:
b9:db:27:5c:22:fb:ef:9a:f0:d8:7f:4e:30:31:f9:ae:98:50:
9e:dd:00:07:da:7f:11:9a:14:4b:b4:a6:d8:4c:fb:25:9d:fa:
08:75:9b:69:3c:35:33:76:b4:1b:f4:9c:b9:0d:8f:01:03:ab:
1a:11:df:da:26:e4:42:a3:b1:bd:94:a8:fa:ef:51:b3:32:92:
b4:85:71:98:e7:cb:2b:df:b2:ae:47:c9:02:c1:a6:51:ae:2f:
ce:6f:9c:8d:c9:23:3e:df:47:ce:02:08:92:53:b3:80:ce:cb:
b6:f4:7e:df:b4:f0:d7:46:39:67:0f:aa:01:80:97:ee:85:f1:
d0:d7:5f:30:15:ce:a6:95:38:0a:d1:99:fe:c8:82:74:8d:a1:
bb:55:a0:c8:97:c7:6c:fc:bb:11:fa:f6:ca:26:ed:84:c9:b6:
30:67:99:39:73:fe:17:0d:9e:aa:d1:c4:0e:7d:af:10:14:88:
73:cb:7f:a8:0a:f8:25:86:17:b6:2b:a9:7d:f2:9b:61:ac:8c:
27:2c:15:77:05:27:f6:73:45:f0:f8:4d:f3:5d:0e:3a:27:0b:
00:64:65:38:25:32:03:3a:7b:2f:be:a2:56:fe:a8:0f:dd:91:
8e:9d:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:34 2025 by rpki-client