Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: 4Xn1VewXiWpkoXJpT7fSf3LGJVZA0pfxRSS8Xk0nKEg=
Subject key identifier: 90:8A:B9:B8:38:4E:8D:11:C4:67:DE:09:DB:7C:A3:CE:2D:08:97:1F
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 0199FDD8AFE75A5FBE62638E86A2E373813F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 0AF1
Signing time: Sun 19 Oct 2025 19:01:00 +0000
Manifest this update: Sun 19 Oct 2025 19:01:00 +0000
Manifest next update: Mon 20 Oct 2025 19:01:00 +0000
Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: 6IIPBIx9ac/B8cNK1PHCJE36fIcEYyFj/XMt4fM5RNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:af:e7:5a:5f:be:62:63:8e:86:a2:e3:73:81:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Oct 19 19:01:00 2025 GMT
Not After : Oct 20 19:01:00 2025 GMT
Subject: CN=908ab9b8384e8d11c467de09db7ca3ce2d08971f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:98:41:f9:47:56:f5:b1:c1:44:1b:8a:b4:
3a:2b:97:3a:f1:3a:96:2b:68:21:67:13:3e:9b:53:
ba:a5:85:48:c3:50:3f:0e:e7:42:c6:26:06:ce:70:
55:94:9a:b1:79:df:1c:12:00:ef:e3:8f:8f:15:62:
45:13:5f:d0:9d:b1:da:2f:6f:39:79:7b:90:71:53:
fa:83:89:d3:80:40:f0:3b:0a:00:fa:b1:0c:e5:6b:
34:14:10:bb:36:53:d8:d4:35:19:20:98:39:3d:eb:
92:e1:5c:4e:4b:a4:18:b2:94:98:e3:a9:f9:12:0d:
db:2e:e1:53:99:21:9d:b4:33:17:85:9a:c6:e0:35:
de:e1:dd:d6:a0:37:00:e5:1c:86:1f:da:56:c6:cb:
5f:67:b3:92:a1:6c:7a:e0:28:dd:49:f8:ec:9b:29:
cd:61:4d:01:77:e6:b2:06:1e:52:96:85:78:e5:54:
4b:7d:2a:b3:38:c3:e3:e9:bb:d0:1d:8d:7e:0f:c8:
b3:cb:35:02:7e:cc:0e:48:45:23:6c:4f:7b:e3:d9:
32:f3:61:bf:d8:07:77:6e:79:e0:83:cb:7a:30:9f:
24:80:ea:4e:2d:51:eb:e6:ab:a7:f2:40:f1:97:98:
a7:3b:2f:0d:a6:1a:10:39:d2:f4:05:67:e7:39:26:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8A:B9:B8:38:4E:8D:11:C4:67:DE:09:DB:7C:A3:CE:2D:08:97:1F
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:62:c2:6f:ae:61:96:f5:4a:1b:7c:2e:5f:54:b2:76:b9:12:
dc:f5:4b:13:ec:bc:42:99:04:9c:16:b1:fb:32:4f:99:20:a4:
e9:17:fb:db:82:5b:9e:24:76:d3:f2:22:56:fc:7d:6e:56:62:
a6:66:a7:99:dc:46:05:f8:c3:ae:46:c1:12:ff:51:a8:4e:be:
00:58:8f:49:50:6b:26:58:4b:f3:66:e0:05:e9:40:0a:fe:37:
b4:e7:5d:a2:53:67:47:5b:48:a8:18:1e:9f:4a:13:08:6f:a7:
54:d3:29:93:af:3f:f2:3b:1e:35:4e:b9:e0:b4:40:b4:b4:14:
35:11:90:c0:02:81:b0:bc:76:b5:ca:af:4d:38:f2:96:47:2b:
cf:91:9e:01:ac:35:20:f3:d3:c2:0d:61:75:76:2c:4c:49:3f:
7c:08:ab:73:e9:cf:bc:01:56:84:73:6b:3e:6b:71:68:0f:48:
a8:8f:94:41:6e:b1:fc:4a:65:6b:89:cf:d3:c4:3b:a5:5d:e8:
72:a8:6c:1e:84:00:e7:08:6a:36:84:aa:96:6d:12:1d:b5:4c:
3e:fb:52:42:4f:4f:d6:4a:e0:60:ce:cf:8d:84:4a:62:e2:01:
c9:36:a7:c3:56:30:d9:b1:83:50:08:e0:1d:d1:66:c0:6a:21:
26:fa:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:38:05 2025 by rpki-client