Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File: q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier: avAufV9dY4FT5t8YSp/qrc2bzQELmlPc5T24Y8S8nTk=
Subject key identifier: E1:45:1C:8A:39:8E:B9:EA:13:35:73:6E:45:12:AE:F0:E3:17:56:CD
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 0199FCFD4695546EF9F8B1C8C4D4D495C876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=)
2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: p1KC5hgHD6k8a/2SedKs6Pau6lhUxxeRoIbjji46Ul4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:46:95:54:6e:f9:f8:b1:c8:c4:d4:d4:95:c8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=e1451c8a398eb9ea1335736e4512aef0e31756cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:0b:1f:2a:f5:09:0b:a0:31:86:0f:f4:e6:
fc:15:86:aa:df:47:3a:4f:7a:be:df:38:91:5f:bc:
fd:e9:3d:71:5c:b6:ba:ca:db:3c:d8:2d:f6:63:1d:
08:36:51:9d:3d:97:0d:87:4d:9d:fa:5f:a3:52:b1:
14:b8:15:e0:e9:4f:e5:87:5c:21:c5:69:fc:94:3e:
8d:8f:e1:c0:ed:b2:f2:ae:1d:ef:1d:77:92:61:b1:
81:bb:f6:68:57:36:0d:9f:1f:9f:88:2d:f2:ec:59:
b9:81:08:18:cb:81:4e:3a:f7:47:13:0a:87:20:d8:
f6:c3:cc:86:0e:07:8c:18:95:4b:f2:d1:fb:bd:ae:
cf:da:dc:3c:d2:13:6c:3d:bb:14:61:9a:67:26:eb:
13:85:3e:e7:4e:e3:06:3a:7c:c3:18:be:8b:11:6c:
46:ea:7b:09:9d:09:16:c6:90:7b:a6:be:3a:6f:7a:
d9:75:2d:cd:2b:01:2f:50:5b:54:bf:d7:7e:90:4b:
76:da:d5:66:32:77:8e:68:c1:ef:26:46:f0:7d:3b:
49:1c:12:bd:c8:4e:1a:25:2f:51:13:40:58:3d:eb:
f3:fe:ee:ec:44:cf:7c:0f:69:61:5c:b1:44:65:30:
17:71:90:e8:2a:ff:ce:da:16:4d:fb:dd:8a:fb:e5:
7d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:45:1C:8A:39:8E:B9:EA:13:35:73:6E:45:12:AE:F0:E3:17:56:CD
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bf:ad:49:f8:80:51:4a:ff:dc:b5:e2:9c:e0:a9:00:c8:e9:
0f:67:48:f3:cd:a5:7f:fb:53:8e:33:83:9a:b4:7c:7c:2f:d7:
30:a3:6d:f7:62:95:c2:b5:d4:fa:c5:07:d4:cc:8c:9f:da:6d:
7d:d6:69:99:93:17:8e:28:c5:e2:c2:bf:58:f6:3b:8f:a7:85:
13:47:d9:7e:d8:8c:62:aa:86:3b:fb:5c:45:9b:fb:ee:39:dd:
85:e6:66:b6:3c:ef:da:92:5a:09:00:7c:59:d0:6d:23:09:c6:
de:f4:ad:3c:f4:be:90:2e:66:a9:5f:93:b8:75:0c:f9:e7:bf:
0e:97:f9:a0:86:de:51:15:ce:48:14:ba:ad:66:9a:40:24:d6:
ed:14:b9:71:e3:5a:dc:b4:e0:03:76:f4:68:11:94:e1:e2:40:
d7:b2:92:f9:34:eb:37:48:e9:78:b4:47:2a:26:74:1f:66:f5:
3c:0a:5a:18:18:18:f0:cf:bf:18:89:dc:51:79:50:21:b0:7f:
c7:eb:ca:89:60:d3:c5:ab:cb:46:2e:07:c1:e5:e4:c5:32:04:
88:b2:9a:90:63:bc:8e:b0:a4:02:51:eb:e2:f5:ef:22:83:ec:
c6:4b:69:06:57:77:b4:45:35:a4:28:76:71:b3:5f:10:85:1b:
f4:c7:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:10 2025 by rpki-client