Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: 3O+pOcdiTkclHUKWXJdOSpNtkSDTw2ZwR7N+cA3Cs9o=
Subject key identifier: D5:32:25:B7:53:81:EF:5F:DB:9D:05:9E:55:75:69:BC:32:1B:74:2B
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 019A02914CECE690E849F42D6B8C2CC69817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 17:01:07 +0000
Manifest this update: Mon 20 Oct 2025 17:01:07 +0000
Manifest next update: Tue 21 Oct 2025 17:01:07 +0000
Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: Pbom5GzqdbZMKNrIxxxW72dyTzC2nJycedeMPtjcLFo=)
2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:4c:ec:e6:90:e8:49:f4:2d:6b:8c:2c:c6:98:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Oct 20 17:01:07 2025 GMT
Not After : Oct 21 17:01:07 2025 GMT
Subject: CN=d53225b75381ef5fdb9d059e557569bc321b742b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:69:a5:5b:cc:a3:55:3b:66:d7:2e:61:e4:
67:31:a0:01:b4:83:d0:eb:66:40:e8:0f:8a:d4:7e:
53:13:c8:cf:5f:6a:85:7a:a8:cf:54:4a:d6:fb:cd:
1a:a5:66:6e:14:b8:7a:12:a5:24:ab:0a:e5:00:0d:
eb:a4:60:dd:7f:97:65:96:71:5e:f4:90:92:b1:01:
dc:5d:56:99:50:88:37:50:c6:4b:f0:5e:6c:b4:e9:
ca:88:49:eb:7e:3b:34:0d:38:2c:09:e0:c1:63:97:
c9:75:15:33:8b:91:bc:70:c6:78:78:85:06:59:30:
5d:8d:53:f1:92:a0:66:87:3a:44:ec:42:de:05:79:
8d:af:d6:0b:b9:fa:bb:cd:1b:4a:d4:50:53:63:36:
ea:54:b8:fb:77:93:08:6b:27:dc:b5:47:78:e2:a0:
b0:e9:80:0c:1d:8e:9a:5b:61:a3:92:e1:a0:e2:71:
51:9c:85:34:8d:83:4e:55:b4:d3:8b:43:6a:b0:2c:
42:6a:99:0a:2e:c3:f2:b3:4d:55:e5:ee:91:e5:a8:
d3:18:b4:b7:f7:6b:09:a1:a2:21:b9:5b:68:12:ff:
93:b4:55:15:93:40:23:8b:24:a8:36:3b:f4:4f:e1:
84:e0:82:f4:a1:17:e1:d3:ad:f9:1b:b9:28:22:98:
8e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:32:25:B7:53:81:EF:5F:DB:9D:05:9E:55:75:69:BC:32:1B:74:2B
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:19:af:de:a4:fd:29:1e:66:83:b0:a2:17:d6:35:a0:de:38:
c7:27:6c:97:bc:67:1d:f3:9e:42:9b:f1:a9:03:dc:59:c9:4e:
01:ce:69:c5:9e:e5:c6:26:5d:64:6b:1f:14:25:e0:91:ca:81:
75:f0:37:ea:d3:09:3c:16:26:30:dc:73:3a:5d:c6:f6:07:80:
b1:47:cd:a9:e1:27:3d:cc:0b:43:cd:f8:65:45:82:d8:d2:b4:
4b:a3:37:c1:dc:d3:73:f9:d0:e3:d4:cc:95:00:71:fa:45:85:
e1:50:d4:4d:2d:c1:38:92:21:23:8e:f5:b3:0c:c0:c7:83:a4:
f2:ca:9b:f5:fb:bb:90:69:b5:d7:a2:e4:9a:0d:e1:55:a7:5f:
65:d3:5b:05:09:48:69:f9:29:fb:40:a0:78:0b:4a:4f:c1:e4:
bc:e4:8d:62:7a:17:ea:28:5e:33:9a:77:ed:ab:93:d9:61:d5:
90:e4:cb:35:d5:c4:f7:2f:fd:60:a4:16:0d:fb:b8:4a:f5:b1:
ee:1a:3b:2c:ee:78:5e:7f:aa:f5:ff:06:40:08:ec:97:0d:08:
82:89:40:a2:86:30:5a:34:4a:c3:2c:7e:a6:33:8f:74:e8:74:
ac:d4:1d:a7:ce:b2:5c:d9:54:f8:4c:76:99:74:60:a2:40:12:
96:91:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:07:55 2025 by rpki-client