Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
File: q9lqrojvmbTVDknsrpyuSPN4gfc.mft (raw, json)
Hash identifier: IuCekfB7psJMPXl4BB+VkX5M/a/EB34JuU28lYDcP30=
Subject key identifier: 42:2B:28:B4:5E:40:1D:52:17:63:5C:A8:DB:7A:01:0C:A6:BD:A1:F6
Authority key identifier: AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
Certificate issuer: /CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Certificate serial: 0199FF59A745D35B6DB9CC07D7A672425A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
Manifest number: 0332
Signing time: Mon 20 Oct 2025 02:01:29 +0000
Manifest this update: Mon 20 Oct 2025 02:01:29 +0000
Manifest next update: Tue 21 Oct 2025 02:01:29 +0000
Files and hashes: 1: jOBsmTZZQR2oFpHPynuOSfcKlhQ.roa (hash: HS2UqrHXUPTUg04Ke/uHXIU8tldEPiGgxWt1zu5k5H0=)
2: q9lqrojvmbTVDknsrpyuSPN4gfc.crl (hash: luDLMYJi9OOBbVlLt9TJkKtta4PfwORZsdyjAm8S9ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:a7:45:d3:5b:6d:b9:cc:07:d7:a6:72:42:5a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Validity
Not Before: Oct 20 02:01:29 2025 GMT
Not After : Oct 21 02:01:29 2025 GMT
Subject: CN=422b28b45e401d5217635ca8db7a010ca6bda1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:61:53:48:a7:31:42:e9:e4:a8:89:f1:a9:fe:
70:b3:c3:45:b8:ce:d4:32:06:7f:52:8c:0f:01:a3:
9f:83:a0:bd:d0:cc:24:92:48:60:1c:81:8a:16:5c:
10:1b:48:e9:c0:d5:37:17:bf:32:c4:b2:24:03:44:
f0:d2:42:15:54:2f:48:a4:22:54:a8:d5:a6:3c:77:
89:fe:cb:a9:94:75:85:87:93:79:c3:6a:81:16:37:
34:42:4e:5a:2f:66:4b:18:87:cb:5f:06:17:60:d0:
5d:31:7f:80:81:3f:00:f0:86:14:95:86:26:11:75:
88:57:ae:e1:be:71:b8:28:34:c4:aa:23:9e:01:fa:
14:86:77:96:2d:8b:30:22:cd:a6:88:e0:b4:3f:18:
ea:7c:61:17:3d:b1:7a:71:8d:f9:60:46:b7:36:dc:
02:79:97:b6:18:14:74:3e:c8:81:94:a0:19:f0:8c:
51:ef:f9:4c:e8:09:db:ac:83:40:9b:cd:d9:20:56:
0b:33:0e:a2:61:9a:42:4f:d0:91:d2:f9:aa:25:c4:
cf:e2:81:84:6f:c3:cd:ef:7f:fd:8b:1e:16:10:2d:
4d:bb:2f:77:30:79:16:29:80:df:57:40:38:eb:24:
5a:1c:5f:99:9a:86:f7:22:3e:b2:e0:ab:e7:00:da:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:28:B4:5E:40:1D:52:17:63:5C:A8:DB:7A:01:0C:A6:BD:A1:F6
X509v3 Authority Key Identifier:
keyid:AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:04:9d:4e:cc:9b:91:0e:d0:5d:e4:70:b5:e9:71:63:ff:6e:
23:49:9c:c7:23:a9:9d:c6:be:a5:a7:44:31:33:4b:bd:b6:f9:
dd:69:36:51:dc:11:85:6f:1d:f7:f7:b4:6f:41:3b:3f:1e:20:
00:e7:f9:91:be:61:51:b7:b6:35:22:b4:a4:b0:a4:1e:25:6e:
14:1e:18:10:3b:2c:1c:6b:50:35:e2:be:f4:67:fc:42:0a:05:
a3:ef:95:a7:ad:a2:6d:14:0a:9b:ab:95:81:7b:f4:85:d2:c0:
80:3e:c5:f4:29:b1:74:3f:ef:c6:54:df:b8:a4:d3:cf:ae:d9:
35:fa:3e:dd:30:5f:cd:46:56:2c:d3:ac:a3:11:f1:87:ba:21:
9f:17:5c:d0:cf:36:9a:05:9f:b6:33:02:27:f4:eb:8c:f0:d4:
6b:62:f5:fd:7a:8c:d8:39:6e:8c:40:68:04:a6:61:dc:e4:82:
79:4e:2b:ab:7d:92:0d:07:1e:8f:86:da:40:35:76:06:66:80:
5f:45:f2:92:2b:77:74:b5:75:29:11:e4:03:e6:9d:53:4d:a7:
e0:c1:d1:9a:36:46:de:86:49:a4:d6:f4:01:2c:8d:a5:c2:b0:
66:09:84:11:c8:9a:4b:0e:d7:1f:d3:ac:eb:b6:cc:79:50:0a:
f2:67:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:36 2025 by rpki-client