Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
File: q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json)
Hash identifier: jRD3NxyWn/Bg5tGWYZZv4oD6VHKksiohL5bzBR5pfbk=
Subject key identifier: D1:80:82:A7:2D:55:3C:04:ED:59:7C:12:F8:83:FD:1E:AB:6A:2D:4F
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial: 0199FC8F1BBC6E16C9681B3473DAC9FB08CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
Manifest number: 0B4A
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa (hash: 6iS4lGatjNwdjx3TWoy83KW0n9N+x6+eWhAvA99wwRM=)
2: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: hGVP086NftXZ2KDA5egPDkXIE491ty7MsrRlaI08TBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1b:bc:6e:16:c9:68:1b:34:73:da:c9:fb:08:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=d18082a72d553c04ed597c12f883fd1eab6a2d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:42:1e:8a:c3:2c:f2:3a:d9:ab:bf:4a:20:
2c:fb:46:e1:22:97:80:e0:2c:fe:12:4f:c0:5a:23:
d9:4d:ab:af:85:7d:61:79:80:76:b1:5f:eb:53:71:
d0:fd:53:b9:2e:64:d1:8e:63:21:b0:7d:02:33:b5:
5e:7b:b7:35:25:06:f4:90:b5:bf:db:bb:98:ed:ae:
16:d7:87:96:6e:9c:a8:90:da:3e:8a:87:22:8c:67:
62:18:e8:ac:8f:31:2d:c9:a5:69:64:f2:d7:bd:95:
c4:32:33:d8:85:8c:81:11:1e:a5:b7:1a:ad:ab:41:
57:db:6a:70:30:ae:e5:ff:bd:c3:65:2a:dc:d6:52:
77:ef:18:90:74:30:f3:6d:1e:64:b1:7e:07:60:0e:
46:66:da:3e:66:02:6c:1e:ae:bb:3d:d2:3b:8e:95:
32:f5:86:f5:91:06:dc:ad:14:4a:37:db:39:7f:73:
95:cb:b0:50:2b:1c:e8:b2:62:16:1b:8e:77:03:90:
87:da:59:0c:3b:90:8d:70:65:a1:8e:06:06:9d:db:
52:11:81:29:14:19:7e:7d:fb:10:0e:c3:25:4c:71:
1a:aa:57:07:cc:e0:fb:24:64:85:f2:dd:32:ab:53:
01:b6:8c:78:64:57:af:27:62:4e:c0:08:48:93:d0:
60:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:80:82:A7:2D:55:3C:04:ED:59:7C:12:F8:83:FD:1E:AB:6A:2D:4F
X509v3 Authority Key Identifier:
keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:fe:10:8e:ed:b0:99:74:1e:65:3f:33:61:fa:60:0a:bc:54:
ac:bb:a2:1d:0b:19:c8:77:e6:6d:14:4d:76:09:fd:4d:2b:27:
f5:c2:72:0d:4b:e4:6d:7b:c8:e4:c4:b2:1b:12:a3:b0:eb:91:
d0:89:db:e6:9d:3d:20:9c:56:41:6d:77:59:44:b9:3c:42:ed:
f9:34:b0:d4:6b:d9:43:52:84:13:07:0c:ca:1f:21:87:f1:26:
7d:e7:86:07:37:19:02:32:57:50:1b:ad:47:b2:c8:41:78:25:
d3:02:83:88:c5:6b:03:25:20:99:b6:39:c8:e2:ae:2b:a7:fd:
6b:65:fd:00:3b:f0:4d:64:45:60:17:3d:0a:4b:8b:02:a5:7d:
63:c8:6b:c6:de:71:64:47:46:a2:4d:f3:cb:8d:01:30:96:46:
3a:a8:30:4a:d0:04:34:53:1f:39:d1:56:f4:ac:59:13:ff:f4:
72:13:b8:a1:ec:6a:4e:8c:88:f5:d8:36:6f:f4:b4:53:e6:48:
62:d2:11:59:1a:99:9e:cd:42:a5:26:44:9e:9b:3c:5d:9c:bb:
d8:b1:87:6b:07:08:55:93:54:ad:20:6f:95:08:96:dd:b6:1d:
c7:2d:29:5b:e0:95:db:cb:5f:2d:26:e2:ab:18:ba:bf:53:26:
71:39:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:42 2025 by rpki-client