Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: +Nf8GXvleHt3K+YzZe873Obf0eQoCjt2v2NxccGidu0=
Subject key identifier: 43:16:2B:9A:3A:C0:6D:01:3D:30:46:43:2C:3C:BF:5B:E6:4D:18:CA
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 0199FCFD7D83075890EE92995E181A4F1A26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: Xr15nfd4+OiMXiFmJrSYz8psNREFTZLHLEkNyt15xeo=)
2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7d:83:07:58:90:ee:92:99:5e:18:1a:4f:1a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=43162b9a3ac06d013d3046432c3cbf5be64d18ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:23:1c:fb:0e:b5:e7:8c:0c:b2:0b:bb:de:
df:a5:da:0e:ca:ab:f9:62:85:dc:6e:0e:07:e0:56:
94:23:7f:ce:72:35:25:a4:51:86:ae:e0:85:e0:bb:
ad:3d:b6:1c:a0:1d:06:1e:ac:b6:12:7a:49:90:bf:
2b:af:b8:9d:02:4b:63:8d:f3:7e:3c:3b:9c:e6:9d:
74:12:36:01:6d:c5:36:dc:05:e3:3c:a8:49:a5:d9:
23:36:4c:79:5b:3a:e4:c3:8f:45:02:64:14:ef:fb:
56:93:8d:40:c8:b1:3e:88:38:d9:c4:a1:b1:d9:7e:
3d:1e:7b:0d:d0:6d:bd:d6:a2:78:4c:c8:64:e3:c0:
1f:e3:6d:c0:c2:71:0a:81:76:2a:05:b9:b5:c7:15:
42:ff:cc:a6:6b:b8:01:6d:45:22:58:4d:ba:03:75:
19:17:68:3d:3f:21:ea:f8:2e:5b:7b:86:53:43:4a:
64:b8:8f:23:a7:70:48:fd:c0:3d:81:48:a8:9e:31:
66:c1:89:69:dc:92:da:f0:4d:42:6c:ce:c7:ac:22:
80:f1:81:ab:62:9d:da:2f:6a:92:3d:9d:32:9f:1e:
1a:9e:ad:25:b1:6f:e1:03:94:a7:8c:32:7e:1a:d2:
a1:68:ed:2f:ee:0b:1d:11:67:e9:74:ca:f6:04:52:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:16:2B:9A:3A:C0:6D:01:3D:30:46:43:2C:3C:BF:5B:E6:4D:18:CA
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b6:de:c0:c4:13:b2:13:ea:5c:e6:5e:88:9c:37:09:62:56:
c4:7d:55:b0:aa:f5:10:2a:54:ac:97:c7:50:91:69:c0:a7:da:
6a:d6:2a:15:50:39:fb:fc:a4:b1:a7:5c:14:e8:c2:9c:9f:de:
53:f5:91:91:f6:84:3b:f4:68:87:f6:eb:e9:bb:9c:87:88:c6:
5f:98:fb:a2:79:94:d4:8a:54:5d:df:b7:f4:38:eb:c7:9c:82:
ae:ba:fb:8f:ab:7e:60:12:e4:67:ed:e2:37:1e:6e:24:ae:66:
ba:6f:39:13:f5:c2:73:88:ad:c9:6c:13:26:42:0f:b0:b7:87:
30:e0:b7:2b:1f:f6:34:eb:4e:b9:87:98:25:0f:e1:1c:ca:10:
6e:eb:22:22:e3:1f:4f:06:44:3b:5e:64:51:29:6f:72:a2:b0:
18:68:2d:2f:75:03:1d:3f:a2:2b:34:86:c9:06:db:36:ba:68:
eb:80:5c:b6:86:d1:7c:e5:da:dc:73:25:32:3f:e1:78:4b:a8:
f4:bc:db:90:6e:44:ed:99:82:80:df:32:c0:80:b6:46:fb:7b:
1d:0f:9a:a4:4e:b3:b0:84:5a:a5:4a:83:09:cb:d9:07:5d:87:
a6:bf:09:98:8b:55:80:aa:f5:31:33:96:1b:c6:5f:a0:70:1f:
f0:30:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:10 2025 by rpki-client