Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
File: q5ddtDeN_KfClTuG07GNyLIY7Gs.mft (raw, json)
Hash identifier: nRdeJc18bPFWC5aHOLdo9rDreSJmvAOnN/D0Yv8WCE4=
Subject key identifier: 7D:0E:C6:37:32:A6:4B:8B:70:11:C0:9B:F2:E3:C0:E6:08:B9:19:EC
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 0199FCC6335035C373BF92968E02112783A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
Manifest number: 0E67
Signing time: Sun 19 Oct 2025 14:01:11 +0000
Manifest this update: Sun 19 Oct 2025 14:01:11 +0000
Manifest next update: Mon 20 Oct 2025 14:01:11 +0000
Files and hashes: 1: RbouPlrvjxMByw-unVzRP4nNXJw.roa (hash: XJEjUdWYmJvOBDOP+ovs4X9aLXbBgk9gR+EZ+bBT2d8=)
2: f1kmm1viP1JpShChN2T-8khwmCE.roa (hash: oA16peDdFaNYYVYRr7l06EBaQutaxn0Ux8cCt1MZLyc=)
3: q5ddtDeN_KfClTuG07GNyLIY7Gs.crl (hash: ZNkvg1xwYzQz6p507cnpVlt2P4L5lbbURMcauwvqLtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:33:50:35:c3:73:bf:92:96:8e:02:11:27:83:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Oct 19 14:01:11 2025 GMT
Not After : Oct 20 14:01:11 2025 GMT
Subject: CN=7d0ec63732a64b8b7011c09bf2e3c0e608b919ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:90:98:5c:a9:ed:6c:85:3d:df:ae:38:0f:
66:c0:28:f4:7f:d4:8f:1c:0a:ce:d8:f0:d9:a9:c3:
cb:3e:57:c2:6f:96:89:2f:31:5e:f4:ea:ca:4d:d3:
a4:99:a8:97:fc:be:17:af:4e:b8:be:23:0f:da:0d:
a2:ff:4b:62:a8:c4:4a:9d:87:ff:95:75:b1:97:5a:
7d:c7:26:30:37:cc:55:35:00:3d:69:ab:b2:d0:ec:
02:3f:4f:8c:64:16:1e:08:79:16:22:69:21:98:1a:
f0:13:7a:76:7f:5f:01:89:32:42:06:c3:66:08:e1:
a1:a4:82:96:88:65:31:a8:95:e4:ea:68:fa:6a:c4:
08:4d:a2:43:79:2b:e0:5b:1f:72:37:7f:52:fe:37:
11:0a:53:13:8c:72:ec:31:76:9d:fc:bb:cf:e1:54:
91:bd:4e:42:6c:51:5e:e8:4a:2e:d6:3d:aa:34:ea:
72:48:5d:bf:b1:0f:ed:d7:b7:8f:06:ea:b9:e2:6d:
75:f9:70:6d:5c:5b:03:83:a6:ba:c3:d8:73:4b:4e:
df:d5:b0:a4:ad:59:6f:f4:1f:af:51:d2:d2:de:8b:
9e:ea:c2:25:99:82:75:ec:e1:c7:e5:4d:16:e4:4f:
8d:fb:2a:e6:b2:ec:b6:8f:d7:92:d2:0c:5a:97:13:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0E:C6:37:32:A6:4B:8B:70:11:C0:9B:F2:E3:C0:E6:08:B9:19:EC
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b0:11:69:e8:63:e9:c9:03:87:dc:d1:77:9a:33:17:bf:58:
e6:e8:58:3e:f3:08:dd:5e:b6:c7:92:84:e4:2d:e3:ff:27:cb:
bd:2d:0c:fd:64:33:3f:f9:27:06:9f:9b:1f:b2:8a:55:1a:31:
b3:f5:05:bf:e2:a6:79:ba:36:28:84:a2:d7:41:d6:b9:71:9a:
f0:3b:58:c3:ea:92:f7:10:e1:4f:75:6c:e3:9f:4d:51:93:3d:
db:6c:ed:15:3a:7e:24:57:c4:ea:2f:e3:03:27:d4:3e:c8:22:
ea:38:69:fa:53:2f:b3:16:dc:ef:58:c0:05:fa:71:a1:ef:6e:
32:15:b4:2b:f6:20:1e:e8:07:e2:1f:16:4c:d1:cf:54:0f:10:
8a:be:d6:77:7b:9c:1b:73:7a:9c:51:fa:de:ee:b9:33:02:ea:
aa:18:4c:6a:91:b5:ef:3d:92:25:8d:42:64:13:ca:49:1d:18:
53:62:7d:38:25:92:7d:f8:b9:83:23:f4:a1:db:39:06:17:cb:
3d:b3:e0:fa:c8:36:24:65:3d:d0:a4:97:13:57:fc:fb:e2:a9:
6c:95:dd:2d:22:4a:15:0f:3c:b0:10:12:8c:18:07:22:91:25:
2e:8c:e6:36:6b:d8:6b:d0:fc:bb:41:0e:ad:dd:e7:57:28:32:
bb:5a:fe:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:23 2025 by rpki-client