Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
File: q3qquyPNJFv6go-wJSHWRMbVtWY.mft (raw, json)
Hash identifier: bls/ZB98i3bbzc0HZfiUW6IlhldxMmpTh7QM77e432s=
Subject key identifier: 9C:28:DD:0E:B7:CD:39:E7:27:BA:87:31:C9:B7:52:EA:CA:0E:25:5A
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 0199FAD7FD1F4317BE88F72941D8169D6623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
Manifest number: 13C8
Signing time: Sun 19 Oct 2025 05:01:22 +0000
Manifest this update: Sun 19 Oct 2025 05:01:22 +0000
Manifest next update: Mon 20 Oct 2025 05:01:22 +0000
Files and hashes: 1: bgfztVWShrtQVnnUy79Uwf2ad-U.roa (hash: 6rNqpGYtQ5hCAICw5R79FB5nCbidIpeSHwH6YCdW27k=)
2: q3qquyPNJFv6go-wJSHWRMbVtWY.crl (hash: OEc64LDwsi1GuQv+9b5rsuUAx6+P6rfOszs3oLm3SVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:fd:1f:43:17:be:88:f7:29:41:d8:16:9d:66:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Oct 19 05:01:22 2025 GMT
Not After : Oct 20 05:01:22 2025 GMT
Subject: CN=9c28dd0eb7cd39e727ba8731c9b752eaca0e255a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:67:d5:47:29:b2:1e:fd:64:52:1d:9f:9a:e7:
f8:53:53:c1:32:85:a5:59:f5:26:b0:0f:8d:28:ec:
a5:1b:7b:7f:65:bc:91:64:e3:07:0f:a0:45:b6:ec:
ed:53:9e:8b:53:b6:f1:f7:85:cf:6b:00:2d:39:ce:
0f:fc:ce:0c:ae:88:b7:c3:be:8d:f2:0a:44:8b:0b:
dd:7f:35:41:2e:e4:6c:0b:a9:e1:1a:7b:0c:1b:4d:
df:10:43:bd:38:29:e3:d9:3e:fb:3a:dc:3c:c0:16:
a7:28:69:7e:3c:3c:f0:fa:da:95:84:cc:f4:ae:67:
76:f7:ce:e0:33:9d:a1:a8:12:43:20:33:a7:51:e3:
fb:34:9e:de:aa:49:b1:18:6f:85:d7:98:31:ab:98:
e9:a7:f4:1f:40:98:b8:6f:cd:71:31:31:0a:dd:8f:
56:4e:d8:b6:a5:3c:c1:cd:55:da:4d:5f:94:5a:28:
20:a3:f0:41:cc:1a:9a:87:10:f0:16:fd:89:8a:8f:
26:fc:92:0c:4a:f2:1b:76:a9:c3:60:51:76:2e:c1:
fa:46:2a:b2:03:c2:f6:78:d3:0a:aa:88:95:f7:36:
e9:aa:77:07:74:d5:a1:72:28:2a:dc:e5:ee:8c:66:
5a:cd:e8:b5:6b:dc:d7:4c:1e:d1:9c:02:0e:13:c0:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:28:DD:0E:B7:CD:39:E7:27:BA:87:31:C9:B7:52:EA:CA:0E:25:5A
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9a:62:cc:a2:ba:06:c6:3f:21:fe:ac:ca:96:4f:19:c7:f2:
f7:4f:76:6a:1f:dc:54:b4:82:26:08:61:83:a4:02:63:af:39:
71:dc:1f:6e:a4:28:33:ed:72:d7:46:a3:54:d9:12:fd:ed:c0:
0d:3b:ff:4a:5a:38:a2:ee:2c:7c:1f:55:4f:3e:73:ec:dd:ea:
af:47:8f:db:e0:1d:37:8a:e4:24:e6:09:ad:c5:18:66:c7:75:
e3:7e:cf:e4:54:3a:72:0c:a7:83:37:4e:cf:52:06:89:01:65:
e2:3e:5b:ef:45:e2:ed:c1:d1:94:d0:7b:d3:15:f3:14:89:71:
9e:ec:ae:e4:c5:0f:44:ff:78:4a:ce:7b:2f:d3:14:7b:98:6f:
70:c0:72:e6:98:0b:21:69:1b:65:bd:56:36:9e:dd:3b:de:06:
33:a6:7b:77:a8:7c:fc:70:89:6f:79:bf:96:68:3a:dd:d0:dd:
fe:78:ec:05:26:b7:bf:be:00:0f:ad:e1:49:eb:9c:c1:7a:b5:
40:e1:55:00:de:59:13:58:53:1b:6e:4a:0f:55:80:d2:54:1a:
4b:66:e1:02:67:4c:41:66:e8:9d:25:be:2f:75:f0:b1:69:56:
95:01:2d:74:53:e1:a7:cb:d6:f6:17:f6:2e:15:4b:67:16:1a:
fc:18:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:22 2025 by rpki-client