Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: t80pme7zXTcjhwyZPmVK1REIo+QNRWZLm3TFwLRmvTA=
Subject key identifier: 4C:86:FE:5C:08:44:2A:1A:35:13:DD:3B:51:A2:39:6E:F0:14:49:A7
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 0199FAA110106B6BDCE312E81A694B1C174F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0BFE
Signing time: Sun 19 Oct 2025 04:01:23 +0000
Manifest this update: Sun 19 Oct 2025 04:01:23 +0000
Manifest next update: Mon 20 Oct 2025 04:01:23 +0000
Files and hashes: 1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: dNqka2c1oAcyAqr9FrAJFaDR2I1/RFCYtz42i9h+5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:10:10:6b:6b:dc:e3:12:e8:1a:69:4b:1c:17:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Oct 19 04:01:23 2025 GMT
Not After : Oct 20 04:01:23 2025 GMT
Subject: CN=4c86fe5c08442a1a3513dd3b51a2396ef01449a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:36:6b:6c:df:94:5f:c7:88:f6:0f:a0:7f:
15:a4:11:37:1e:98:ea:b8:0b:5d:b2:5c:2c:2a:19:
10:56:1e:e2:dc:fc:1e:9f:3b:b6:31:93:d9:dd:67:
5a:df:11:4b:f8:13:68:08:35:a7:93:df:a3:da:24:
a9:aa:34:23:b0:ef:a6:c6:48:d2:48:26:83:87:63:
3b:26:ab:cd:e2:e5:48:b5:d0:f0:da:21:0e:9a:07:
9c:4b:a5:79:31:07:68:89:33:e7:31:92:99:ac:4e:
35:8a:a1:28:1c:9c:2b:62:c6:11:35:c9:55:09:18:
97:82:df:ed:0b:7b:c2:89:57:bb:68:88:07:f4:e1:
95:3c:97:84:41:55:a8:2a:de:6e:40:28:75:99:1f:
33:f0:12:40:99:f1:b8:30:58:bd:9d:b8:73:cb:f8:
7d:76:d6:e3:3b:56:9c:06:ee:41:2f:19:2d:e1:a1:
72:04:52:ac:5a:a0:41:5b:eb:06:54:8c:c7:14:10:
84:4d:e4:5c:89:20:fe:52:18:b9:f4:94:70:1d:31:
07:de:cc:ce:34:ba:c2:28:44:2d:ca:13:de:fd:d6:
7d:a5:49:35:87:a2:d3:b1:8b:5f:ce:40:83:be:c6:
a9:82:77:01:f7:59:b0:8d:8f:e7:17:9f:02:3e:bd:
f6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:86:FE:5C:08:44:2A:1A:35:13:DD:3B:51:A2:39:6E:F0:14:49:A7
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:aa:e1:9d:cc:a4:e7:33:f3:52:14:34:c7:ef:00:f0:e1:34:
be:38:30:84:5b:7c:e4:6b:0e:05:f7:b2:77:af:d8:96:93:48:
d0:ec:4e:f5:b6:2d:6f:25:ef:15:66:fe:59:bd:ae:b8:c7:f5:
0b:75:01:a4:9c:01:1d:61:3d:cf:13:35:6e:1e:26:50:82:54:
43:95:a3:04:96:91:79:c3:9a:c7:95:53:6e:f4:79:d8:50:bc:
0b:c2:f7:22:8c:3e:72:83:9b:56:b6:4a:cb:ff:c8:12:2f:fe:
38:9b:fa:3b:ca:67:e8:0f:6e:49:72:6b:97:f9:02:0e:8c:e1:
e0:9a:88:64:a1:cc:08:26:e4:be:e5:f1:d6:d2:37:4a:cf:d8:
77:56:09:02:a5:12:7c:4d:01:07:a0:3d:40:31:2a:fa:5a:f7:
a1:00:83:26:ae:d9:b2:32:09:7e:3f:96:4f:54:83:7f:db:11:
ca:df:2f:72:24:17:d6:0c:02:91:bf:6f:80:a4:3a:f7:86:a3:
42:01:c3:c8:0a:56:57:10:56:bc:3b:82:b2:fc:fa:90:18:ea:
90:d4:1b:d9:5a:54:42:1d:a4:2e:3a:3a:19:3b:f5:5d:23:0e:
3f:1d:eb:c4:54:ea:86:75:e1:83:dd:93:63:63:23:fd:fa:bb:
4c:bc:04:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:07 2025 by rpki-client