Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: WI+Ts3MrSVLjtZfO2J687CCqld9HUsiAOYRSebx/Ya4=
Subject key identifier: E4:39:86:AE:8A:7B:46:AF:70:01:1E:64:52:E3:20:CB:64:B5:40:42
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 019A0259A31C4E5822557FD86F5595E92C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 16:00:20 +0000
Manifest this update: Mon 20 Oct 2025 16:00:20 +0000
Manifest next update: Tue 21 Oct 2025 16:00:20 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: NXnD1rhFREoGN306dD0TLsybtHyL+vfBdro2tTicrKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:a3:1c:4e:58:22:55:7f:d8:6f:55:95:e9:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Oct 20 16:00:20 2025 GMT
Not After : Oct 21 16:00:20 2025 GMT
Subject: CN=e43986ae8a7b46af70011e6452e320cb64b54042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:b4:f3:b4:84:53:4b:96:32:39:71:ee:89:
96:8c:18:42:0a:dc:cb:06:bb:bf:5e:9b:6f:d7:69:
4c:79:0f:99:b5:99:5d:69:1f:45:1e:18:78:2c:c1:
9f:fe:c7:39:88:c7:2a:21:bf:16:ea:e0:ea:75:6f:
8a:d3:c0:af:13:97:c7:1f:d0:4a:01:f7:f6:68:2b:
b5:64:01:01:6c:8a:d1:d8:4d:b2:9f:22:cf:41:a0:
2f:c4:9a:90:48:57:07:86:2b:28:ce:66:24:b9:ef:
0b:a6:0a:fe:7c:7c:f5:1a:66:8e:89:85:e1:5e:aa:
c6:c0:69:38:56:16:cf:7b:ca:d0:a7:d6:ca:02:6d:
dd:9b:01:29:50:13:58:2f:b6:57:ea:44:b8:8a:29:
02:ea:11:13:69:2f:21:f0:06:ce:b7:6c:30:13:d6:
97:10:65:1a:b5:da:3a:36:19:31:d6:39:ff:84:35:
f5:17:26:e0:d0:c2:43:9c:a1:0d:f1:43:b0:42:ce:
a8:ad:0c:0e:75:8f:85:a3:0d:1b:a9:c0:03:fc:c7:
86:48:e8:b3:12:35:f1:5b:60:68:81:6f:55:3e:0c:
db:e3:d5:ff:46:55:f0:64:38:8f:5a:24:13:72:b9:
3d:60:8e:50:d4:e2:73:05:99:4c:03:1d:45:54:65:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:39:86:AE:8A:7B:46:AF:70:01:1E:64:52:E3:20:CB:64:B5:40:42
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ce:ee:e7:15:d1:98:e1:67:65:99:4b:e8:5e:e6:b7:be:b8:
e3:5b:5a:38:68:d3:65:fb:e2:c4:7f:4b:a1:f6:d1:9b:22:6b:
e6:6e:bb:76:6c:21:ec:37:00:b1:29:15:8d:02:d4:58:94:90:
8f:3f:e1:14:78:ed:71:46:23:20:93:2a:3e:29:1d:d7:0f:6b:
85:cb:a9:14:5e:19:a5:17:5e:41:72:47:78:82:bc:ba:48:39:
8b:0a:ec:64:c9:fc:2e:f2:5f:93:a3:86:ef:3c:23:2b:58:55:
7c:24:a3:2a:25:a7:72:25:23:f3:e0:c4:db:ab:f8:70:22:13:
c7:b8:83:0f:7a:e2:a1:eb:e1:7f:1f:35:1a:57:cc:ea:8e:a0:
6c:54:bd:e7:85:2a:fb:4b:4e:f3:9c:e4:fe:8f:e2:6b:4b:ee:
39:76:57:2b:c7:29:71:72:cd:36:cb:78:36:d2:7f:68:f8:b6:
cb:64:15:04:38:9b:15:32:c9:bf:e2:9d:84:f3:39:21:ff:33:
62:dc:95:c7:cc:02:93:30:d8:9c:91:4d:4e:26:cb:42:a6:fa:
ba:4d:5e:ae:d3:a5:6f:ce:bc:1b:f1:9d:13:d3:03:ef:e7:94:
44:26:22:71:4a:43:62:06:80:5d:df:1c:64:26:38:32:86:01:
ea:e6:be:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:25 2025 by rpki-client