Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json)
Hash identifier: myYEm4/+8Azicw7FTahKH6ZlKyQpmDbAluadmhQ2IvA=
Subject key identifier: 6B:02:4A:AD:8A:86:E1:BE:8E:04:B2:25:74:5C:97:90:12:CC:B3:D3
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 0199FC589D6F0506C52D8FF39FC93E909CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: RAZ6++WeO8JztiArvw1LBMyRq+xYucT17L1DQpMQcvA=)
2: KXd_5OhpNxA2dAEUBM7BRlNmng0.roa (hash: naKbPeMlQvH49cTjg2nRiud0MzlhFN73NWmhIANkiB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9d:6f:05:06:c5:2d:8f:f3:9f:c9:3e:90:9c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=6b024aad8a86e1be8e04b225745c979012ccb3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:ba:da:c1:c1:5c:7f:b1:60:98:1e:b0:a3:
b8:c5:85:dc:47:da:e2:d4:41:c9:7f:b6:30:5d:83:
64:e3:45:e7:6b:c3:a4:b1:fb:18:0d:71:3c:a8:ea:
4a:23:54:69:23:10:24:a8:39:8e:2b:f5:46:26:4b:
6a:b6:1b:fa:d6:b9:f5:36:f1:32:1d:1e:49:21:eb:
55:ef:68:59:cf:47:04:88:10:1a:91:2e:a2:99:d3:
ea:c2:f2:3b:8c:f0:21:12:c4:23:3c:9b:a5:fc:01:
67:2b:4e:23:dc:ad:fd:54:ad:8a:9f:8c:d3:d4:9a:
19:d9:7c:90:bd:f3:b9:7d:f0:0b:95:80:0f:6b:ac:
76:a3:70:8f:4a:31:f0:e1:94:18:f9:f2:46:79:84:
95:ac:ed:7c:66:9a:67:26:6b:1a:98:60:48:0e:16:
0b:99:ed:08:7b:fd:d3:ee:ea:12:75:be:37:8a:33:
3a:c3:e7:b8:b0:6b:1b:22:c0:7d:43:a2:93:0d:c6:
a3:8c:f4:0b:bc:a3:f0:43:0d:92:cd:d1:c1:dc:ba:
46:9f:1a:0d:e6:71:5a:f3:9c:69:75:e0:30:8d:9b:
cd:6f:56:36:88:fb:46:b3:f0:b8:8b:6d:bc:9c:6c:
fd:f6:f7:ed:06:82:01:af:2f:ae:5f:06:1e:9b:4b:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:02:4A:AD:8A:86:E1:BE:8E:04:B2:25:74:5C:97:90:12:CC:B3:D3
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1f:fb:da:cc:c7:18:9d:01:a2:e6:26:99:9a:9f:bd:fb:3c:
a8:11:4b:45:d3:9e:d5:76:3c:51:2d:f8:fa:c6:e4:9d:c1:0c:
07:dc:90:55:8c:80:56:77:8e:74:96:60:be:e2:c8:42:2f:bb:
36:89:91:aa:28:f6:b6:86:cc:c3:23:6d:ff:39:0d:7d:8e:25:
a6:91:1b:8f:bb:11:6b:5d:1a:36:3b:56:82:d6:e0:f8:4e:f5:
6f:cc:bb:e3:f4:cb:5f:71:db:51:9a:c0:15:f6:be:66:7f:05:
b5:c0:19:c4:02:e3:0f:c6:95:f9:4f:19:a0:99:f2:09:37:3d:
33:0a:fe:09:6d:8d:86:34:eb:3c:07:35:a2:d3:3d:95:6a:b5:
d6:99:26:c1:24:0e:2a:93:7e:88:ac:88:59:7f:c4:40:24:87:
30:67:9f:3e:57:6f:9e:ea:8e:7a:12:44:e1:70:a4:69:d2:a7:
bf:cb:43:19:f7:56:3d:c6:86:98:99:d1:24:d3:5f:f4:11:1d:
e7:96:68:21:19:75:ff:79:2f:0a:4a:e5:82:cd:e6:b8:86:15:
d4:ec:45:98:08:c5:85:fc:c4:94:67:0e:4c:66:76:e9:92:5c:
6e:f6:7a:02:d5:22:4d:e9:1e:0a:23:98:a3:4f:44:59:3c:9d:
ef:92:82:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:34 2025 by rpki-client