Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
File: p2q9qQNG0MrSXcpvdFC8z40I53E.mft (raw, json)
Hash identifier: BAeniqWO6z4hZBKmfoOWo6bRw2eWkrI3YyWuaIIDlJk=
Subject key identifier: CD:13:1C:79:FA:CD:FB:1A:08:B3:B3:E1:62:31:3D:90:04:BE:56:78
Authority key identifier: A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
Certificate issuer: /CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Certificate serial: 0199FE103A858398CD3972779AE6A95C8F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
Manifest number: 0DC5
Signing time: Sun 19 Oct 2025 20:01:40 +0000
Manifest this update: Sun 19 Oct 2025 20:01:40 +0000
Manifest next update: Mon 20 Oct 2025 20:01:40 +0000
Files and hashes: 1: MzC4INKIsgRwDzo9x7bkUxRAB1c.roa (hash: Uid11k3HN0TXoHFcev6gIuzNP6/XOwG1nE/1TIUrcps=)
2: p2q9qQNG0MrSXcpvdFC8z40I53E.crl (hash: AufZQSJnEnu2DLwaIdRQpsN8NU43kUz05OnAKIMDT7w=)
3: qo2a4lO3f4INhuJwHg-a_kb1Uw0.roa (hash: Mq/0MPb+8DLoVQSsA/LmGY9yMeYe1hfS1EX+C5wkfg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:3a:85:83:98:cd:39:72:77:9a:e6:a9:5c:8f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76abda90346d0cad25dca6f7450bccf8d08e771
Validity
Not Before: Oct 19 20:01:40 2025 GMT
Not After : Oct 20 20:01:40 2025 GMT
Subject: CN=cd131c79facdfb1a08b3b3e162313d9004be5678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:a9:1e:d0:9c:be:6b:74:bd:f5:29:95:7e:
40:da:6f:51:3e:bf:74:21:a1:be:13:e6:75:ef:e7:
a9:2a:ed:aa:a4:f4:54:fc:9d:00:08:7e:73:ab:a5:
56:24:45:ae:7e:7e:9f:a8:f0:49:13:1d:ad:a5:ce:
80:56:05:e0:03:3a:b2:ad:a1:9c:50:a8:ac:ac:cc:
25:5b:2d:0e:0c:f3:03:51:17:04:7b:f2:89:2d:65:
73:c1:d0:d5:1d:d0:52:6a:05:27:fd:22:13:dc:e8:
53:75:c8:07:be:66:b7:5b:3b:b7:05:81:95:2c:c1:
41:b2:6b:25:fd:0b:65:2a:71:d2:58:2a:44:7e:f4:
cf:54:db:ca:1a:b9:7f:74:50:1b:46:df:bd:82:5d:
dc:58:88:18:c3:ec:b7:33:1d:1d:5d:dc:b9:78:50:
4a:d9:90:61:0a:48:d6:51:26:d8:31:82:45:9f:f5:
55:24:62:ed:85:f4:fd:fd:20:63:12:75:e7:94:b4:
4f:c4:60:8b:80:55:28:7f:f3:35:1e:96:43:cb:64:
a8:89:18:3e:93:15:bc:f8:25:87:f6:e5:14:1b:1d:
49:00:82:7d:98:a4:28:f0:e7:cb:7a:42:42:00:2b:
aa:50:70:55:79:28:f5:fe:7b:0d:82:54:59:c8:4e:
b7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:1C:79:FA:CD:FB:1A:08:B3:B3:E1:62:31:3D:90:04:BE:56:78
X509v3 Authority Key Identifier:
keyid:A7:6A:BD:A9:03:46:D0:CA:D2:5D:CA:6F:74:50:BC:CF:8D:08:E7:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2q9qQNG0MrSXcpvdFC8z40I53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/345c9b-7b4a-4b21-9b00-4d301684c3bc/1/p2q9qQNG0MrSXcpvdFC8z40I53E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:fd:1e:50:28:63:4c:5e:41:06:4d:fb:bd:c8:5b:c2:de:74:
74:a2:a6:0b:fd:f4:0d:6d:f0:1b:87:5d:fa:6a:17:e7:99:65:
95:97:0f:ca:f8:70:ce:41:8d:e9:f3:ac:70:f7:45:78:e4:ee:
64:89:d7:7d:05:49:cf:7c:bc:b0:79:a7:d6:a5:ff:67:25:b7:
a3:1a:ef:15:e6:53:2f:aa:1c:fc:f3:fa:15:0a:aa:8a:c4:6a:
7c:64:c8:85:77:d7:33:27:74:49:2c:0d:7c:c7:62:cd:b9:fc:
a2:00:58:53:f8:a0:5c:48:bd:83:90:eb:1e:68:b5:c5:92:5e:
8f:d7:c3:ac:f9:3e:56:f3:87:32:33:0a:c3:16:03:56:7f:c9:
4e:c4:2f:35:55:97:c3:c9:be:78:07:df:5a:69:0d:2c:02:7f:
1a:dc:ae:44:c9:79:d5:d8:87:d2:aa:64:cf:6a:cf:39:61:b4:
6a:80:5c:17:23:4f:f1:e1:bc:d3:c8:73:78:32:f3:0c:ae:43:
dc:10:b5:d5:22:ca:1a:1b:9d:c7:0f:23:c4:44:1f:88:94:9f:
7c:d6:d7:1d:d5:7d:88:26:dd:b6:88:4d:a2:95:3c:b6:2f:64:
c3:72:25:b2:69:3f:15:7b:d9:71:da:60:96:d2:e8:ec:c5:db:
45:6a:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:25 2025 by rpki-client