Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
File: qSskQKfHot_PLkIW2oo73mi5uJg.mft (raw, json)
Hash identifier: bOTyJ6QOqlNoq7XM6dXuoAzQnb5YFO2wZzElaJ5ydiA=
Subject key identifier: 17:78:BA:D4:07:70:28:EC:B9:05:E9:69:68:BC:2D:C9:53:4A:45:72
Authority key identifier: A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
Certificate issuer: /CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Certificate serial: 0199FD340AB9EAA4CA43F5BD141A815AF010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 16:01:10 +0000
Manifest this update: Sun 19 Oct 2025 16:01:10 +0000
Manifest next update: Mon 20 Oct 2025 16:01:10 +0000
Files and hashes: 1: _n0xC-sidbdSFPfTnRV-lr4kGic.roa (hash: ++bpQemmXYA46AzwIRn3gko69y6uULCJsSLSxSSwsGM=)
2: qSskQKfHot_PLkIW2oo73mi5uJg.crl (hash: cYnjQIA/ewPoI5bZM2ilc8tiQQuK3b021RERae8aVmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0a:b9:ea:a4:ca:43:f5:bd:14:1a:81:5a:f0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b2440a7c7a2dfcf2e4216da8a3bde68b9b898
Validity
Not Before: Oct 19 16:01:10 2025 GMT
Not After : Oct 20 16:01:10 2025 GMT
Subject: CN=1778bad4077028ecb905e96968bc2dc9534a4572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:e3:b1:66:f6:eb:bb:77:31:c1:0c:8f:54:
18:20:99:c6:0d:be:db:92:d9:53:65:9c:b9:1e:a8:
ca:77:59:80:48:20:9f:ad:b1:c8:05:e4:75:7f:ab:
fe:2e:11:ad:63:59:1c:2c:5d:f2:82:60:fd:8e:52:
b8:67:74:09:1d:e5:7c:31:b5:e5:a8:0d:3a:8e:48:
40:1f:c9:81:f4:cd:a2:5d:81:fa:dc:28:9b:15:fd:
04:47:f7:60:98:28:70:dc:31:2e:b2:09:3f:d9:44:
b2:f9:2f:5d:14:d8:8b:94:c6:45:56:c0:57:d7:80:
fc:15:8e:bd:18:12:36:41:91:d4:e8:05:c3:94:81:
2b:d9:0b:78:51:32:ba:bf:b0:39:0b:78:3f:8c:17:
d5:23:bf:1f:bc:34:e7:13:cd:ac:bf:9c:cc:7c:59:
d2:3c:e2:f1:14:ab:de:33:97:90:21:8f:2a:8d:da:
e6:04:97:e1:24:7c:5e:cb:f5:ec:fb:12:6b:ce:95:
75:8d:d3:5f:de:06:0f:43:f3:1e:0a:b3:d7:e9:b4:
12:8a:54:c3:39:c3:81:49:24:d0:dc:14:cd:e7:32:
ec:b9:31:c7:c5:c8:1b:ed:8e:69:97:f8:5b:01:5f:
99:c6:72:2a:97:eb:98:5a:4c:ee:e5:7f:d1:35:d8:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:78:BA:D4:07:70:28:EC:B9:05:E9:69:68:BC:2D:C9:53:4A:45:72
X509v3 Authority Key Identifier:
keyid:A9:2B:24:40:A7:C7:A2:DF:CF:2E:42:16:DA:8A:3B:DE:68:B9:B8:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSskQKfHot_PLkIW2oo73mi5uJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/892193-9ed9-4447-8402-f2c67eca3e5b/1/qSskQKfHot_PLkIW2oo73mi5uJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:aa:fa:55:64:46:0d:87:c0:ef:c2:92:ff:77:03:b5:06:
6c:0c:1a:a6:e8:46:d0:b7:93:27:25:15:8f:02:49:49:da:46:
be:35:e2:3e:18:8c:05:20:39:20:c2:c1:a7:fb:4b:b7:bd:18:
57:de:30:28:1e:49:ee:85:16:b5:9b:eb:3b:17:fb:ad:4d:12:
07:27:a7:b5:7e:cb:89:6a:f5:c6:9f:f9:c4:ec:03:09:55:82:
74:4f:0a:f8:72:48:19:64:86:a5:d2:f0:55:f9:28:8c:5c:c2:
f8:0f:1e:f8:a6:ac:04:ed:ec:47:1e:b9:48:44:9e:2a:50:77:
a7:b0:c4:32:ce:85:87:dc:54:8e:97:51:e4:d3:57:98:59:65:
5f:ab:e3:cd:f7:bf:e5:87:97:72:b8:17:c0:c9:9b:34:6e:e3:
39:7e:5a:22:44:f8:f7:3d:b9:5b:7e:0e:4c:bd:0c:57:21:a4:
ee:5e:e0:ab:b3:1a:52:65:71:2c:00:d0:7b:a8:0f:58:bc:5a:
d4:be:37:6b:15:25:69:8c:4a:4c:fe:cd:a8:4f:cd:b5:0c:fb:
9b:86:d1:36:ba:e1:ea:f2:b9:41:d6:46:b7:03:26:6f:82:30:
b3:49:cd:2e:58:dd:e0:91:74:24:6f:c6:78:48:c9:91:5a:0f:
38:26:cf:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:14:56 2025 by rpki-client