Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
File: Rq9sozU0uFMLnyFOyOqT3SW9H88.mft (raw, json)
Hash identifier: paa1PpkC3Xi12G2r1aHJPMNNh026FjxzvH1T1yFZllA=
Subject key identifier: 0E:DB:CE:85:AF:48:C0:8F:38:02:EB:88:83:ED:D2:4A:C4:6B:A8:C1
Authority key identifier: 46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
Certificate issuer: /CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Certificate serial: 0199FB0F06E439C95F9F6765892F58ECCD0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
Manifest number: 0C8C
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: 1-DjrG4WtOf5mfvjc_0ex1qmM7_0.roa (hash: hnXFvQKmTthNRY+MRdmK+ICiF4IvzT+rwNQnD35oyyk=)
2: Rq9sozU0uFMLnyFOyOqT3SW9H88.crl (hash: sHfybylw82z0M0fX4+t0+jdd7QNTYxfe+wh6dtb7aiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:06:e4:39:c9:5f:9f:67:65:89:2f:58:ec:cd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46af6ca33534b8530b9f214ec8ea93dd25bd1fcf
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=0edbce85af48c08f3802eb8883edd24ac46ba8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ee:1e:2e:8c:3d:58:d5:a1:15:34:b9:b4:a9:
4d:53:11:fd:e2:14:f0:09:e4:0f:2f:37:8c:66:5a:
3a:c2:00:c5:b9:df:5f:f1:8e:95:9f:fd:2c:05:b2:
c1:05:f1:90:1e:5a:cb:ab:71:39:60:82:3e:f9:88:
44:c4:9d:00:34:47:b0:5f:63:8e:ca:17:28:c5:b3:
78:e4:b6:ca:f0:1f:67:a2:a7:fb:46:b9:c7:4e:be:
51:54:5e:82:f5:16:a2:c1:87:a4:ff:0a:68:f6:7e:
9a:ee:a9:87:da:93:1f:39:96:b0:35:d2:b9:ee:49:
ab:b6:6b:df:cb:4b:a8:d7:96:b3:61:99:5c:72:20:
59:42:de:3c:7e:79:34:f3:e5:0b:5e:e4:6b:bc:7c:
09:a6:2b:46:c6:e8:9f:ae:ce:ce:94:c4:25:73:75:
05:0b:29:f7:0b:f5:72:29:57:b4:0d:52:d9:df:66:
9f:90:b1:d0:2b:2e:cf:3b:a8:9e:50:d9:86:d4:b9:
4b:38:58:68:94:e9:38:13:46:1c:80:f8:f4:20:5e:
27:72:a9:aa:a5:d9:d7:46:c1:08:d4:7f:e0:91:6e:
45:09:3c:1c:65:b0:9d:af:0d:42:28:b0:23:42:c2:
81:f2:cf:21:c2:78:2d:05:45:cc:e3:4e:32:b7:cf:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DB:CE:85:AF:48:C0:8F:38:02:EB:88:83:ED:D2:4A:C4:6B:A8:C1
X509v3 Authority Key Identifier:
keyid:46:AF:6C:A3:35:34:B8:53:0B:9F:21:4E:C8:EA:93:DD:25:BD:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rq9sozU0uFMLnyFOyOqT3SW9H88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8e80af-2d64-4784-8115-c5cefd98f621/1/Rq9sozU0uFMLnyFOyOqT3SW9H88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:99:c9:50:8b:18:f5:36:d7:b3:93:3d:07:ec:a9:5f:96:16:
b5:fa:ed:6b:9c:ac:70:5a:22:9e:8a:95:1a:22:45:63:2b:81:
33:8a:4f:52:b8:19:55:59:45:a9:99:77:aa:61:83:f8:0a:b2:
d0:0e:5e:17:49:fc:a4:ee:75:e1:0c:43:fc:c8:d7:f9:87:3d:
b0:7d:b7:ab:47:15:4b:27:3c:d9:d8:07:cd:f2:fd:ea:09:c5:
44:fc:86:f7:66:45:81:8b:25:e9:e0:10:8f:64:90:88:11:7f:
42:98:a6:06:02:4d:a9:91:d2:bc:6d:61:ed:be:b1:6d:bd:e1:
27:d8:0a:19:a4:1d:eb:30:0f:7c:cc:6f:de:10:c8:22:c5:b8:
77:f7:1b:f6:1f:ce:a6:c1:cd:67:47:ae:dd:e0:b0:55:bd:8e:
05:0c:d2:72:4f:76:12:cc:46:d3:e8:b0:dd:1d:40:13:07:4e:
3e:a2:a2:bc:ca:82:fb:40:69:84:b9:46:d0:75:d5:6a:bf:b2:
4e:78:d6:6d:88:3b:21:a3:bc:ef:13:5a:ce:01:6d:0f:c2:98:
1d:ab:56:31:ef:86:0e:05:f1:1c:2a:ca:b4:ff:7b:15:15:fc:
b5:78:1d:0e:cc:c5:25:86:1e:65:3b:84:09:b7:cd:d3:0a:18:
9e:1a:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:52 2025 by rpki-client