Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: uG8lmbKXLHv5MlHpyOwoiEGnp4fReH2v1F9/RAf0d+I=
Subject key identifier: 78:D7:5B:6C:14:D7:2E:5D:76:78:77:36:0B:C1:C5:7D:B3:E9:B7:90
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 0199FF59626CFCE565A7D08669986F80919B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 1090
Signing time: Mon 20 Oct 2025 02:01:11 +0000
Manifest this update: Mon 20 Oct 2025 02:01:11 +0000
Manifest next update: Tue 21 Oct 2025 02:01:11 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: RHE0ex4DQbkzU9M3bEZdMWXcBZXFtiOlGzvM1rArB9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:62:6c:fc:e5:65:a7:d0:86:69:98:6f:80:91:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Oct 20 02:01:11 2025 GMT
Not After : Oct 21 02:01:11 2025 GMT
Subject: CN=78d75b6c14d72e5d767877360bc1c57db3e9b790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:05:f8:cd:57:77:68:2a:80:3d:a6:61:21:
8a:67:82:87:23:40:f3:c9:b9:e9:e0:74:92:0e:5e:
f8:bf:83:70:0c:db:36:48:ec:dc:57:14:a4:3f:e0:
81:c0:ba:02:61:90:86:65:e3:82:42:d1:44:34:69:
82:11:9c:fe:c5:93:17:ce:95:a4:79:f7:b3:00:0f:
b1:fb:4f:d1:fd:82:cb:11:a8:12:b2:08:2f:a5:11:
30:93:bd:61:3f:f6:06:f5:7b:15:12:f3:5e:fc:17:
ad:9b:3d:97:c4:43:d4:e9:f2:aa:1b:f1:b4:10:54:
b5:4c:f3:9a:71:c1:6d:c6:b8:f4:e0:44:93:f0:3c:
9a:53:a8:5a:7e:1b:62:f6:16:5f:ad:be:46:79:24:
af:a0:6e:c2:82:ac:df:aa:da:ee:2d:7a:5d:b7:e5:
94:93:6d:d6:38:91:fc:ce:72:b1:45:40:38:fb:b6:
3a:73:42:d5:61:dd:5e:8b:f1:73:f7:27:d3:db:8d:
81:78:76:14:d1:5a:2e:cd:9f:59:fe:7f:00:37:1b:
ff:83:e6:ba:42:6b:28:39:c6:19:19:d2:66:2a:69:
5a:9b:eb:ce:d9:15:72:c6:1f:88:a9:dd:a2:1a:05:
33:f5:a4:5c:96:1d:ea:66:cd:c8:d6:10:ae:df:65:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D7:5B:6C:14:D7:2E:5D:76:78:77:36:0B:C1:C5:7D:B3:E9:B7:90
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2f:e2:22:35:aa:e2:0d:40:c6:79:d9:ed:75:78:63:18:3d:
73:df:9d:44:0f:0a:15:62:00:be:af:3e:18:6a:b6:b5:4a:13:
af:2e:56:24:a8:a4:7c:6a:d8:d9:d7:f7:67:17:69:70:b4:0e:
7b:38:ec:d6:59:97:d8:ae:7a:02:2c:d2:e4:9d:b4:93:e3:aa:
ba:23:54:27:24:a1:d5:f9:58:b4:05:60:84:d3:1d:a9:c7:68:
5c:13:7d:37:e6:64:bf:42:74:22:8b:11:58:ea:f0:88:3c:16:
ac:41:eb:0b:c8:c6:e1:37:c6:4b:21:2c:df:0e:2d:ef:bb:c4:
56:e7:57:53:c5:b1:f8:9f:2a:d4:53:6d:9b:10:47:d9:1d:8b:
e5:96:e0:22:cb:19:52:fd:d5:39:04:6f:a3:2f:c9:72:1b:6c:
f3:1d:19:bf:82:1b:dc:60:ce:93:78:35:a8:5b:8e:95:f7:75:
f0:57:17:c4:ef:c1:c2:7a:ba:c3:4c:87:81:f2:31:9b:bc:c1:
46:71:cd:29:17:09:5c:5c:a6:64:38:88:eb:c6:26:99:07:85:
27:50:c1:f0:e9:d4:9f:0a:c3:30:81:36:a5:05:17:51:70:4c:
68:25:0d:fe:0c:b4:ee:75:bc:c2:2c:3f:5c:b2:37:b1:42:b0:
de:f9:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:58:59 2025 by rpki-client