Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
File: 00QDowsxN1mvliav2NPSOAX8yA4.mft (raw, json)
Hash identifier: qekRJB4Mi9kWgqPyC7AI4jJKeTqdOu4rou8bphPqp28=
Subject key identifier: 0B:B7:FE:3D:C1:C4:75:54:88:5B:0A:BA:5A:7D:60:E5:BC:CD:C8:0B
Authority key identifier: D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
Certificate issuer: /CN=d34403a30b313759af9626afd8d3d23805fcc80e
Certificate serial: 0199FDD963A7C58E1A4AEA42A55858A69DF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
Manifest number: 1543
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: 00QDowsxN1mvliav2NPSOAX8yA4.crl (hash: hZikDFY/HymjpwlXnuuOm7EqBmR0qLSqOJcLMJ6/FXM=)
2: cVpmuHdAZzlijHGAjGSKkGw9RjA.roa (hash: qNHNU4vOIkFIe1aGqstJlXjPN0jdP5RduNW12cDiCyg=)
3: yay3nN2FWSrpjXKo77YZUaENbjA.roa (hash: 3dd/DLtrx7aUgl5CmfhFn/D7OtLGGdM5Nn2M37wMGvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:63:a7:c5:8e:1a:4a:ea:42:a5:58:58:a6:9d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34403a30b313759af9626afd8d3d23805fcc80e
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=0bb7fe3dc1c47554885b0aba5a7d60e5bccdc80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6e:cc:9e:9c:47:68:08:8e:c4:65:03:43:d2:
bc:a4:82:39:05:0f:4e:83:f2:d4:85:6c:de:0d:4f:
74:41:31:48:3a:c6:99:27:02:06:ec:ea:6e:5e:27:
ab:01:e3:31:1a:c5:86:3a:1b:74:9d:f6:01:9e:64:
e1:8d:7e:8c:54:0f:4e:c5:30:9b:f3:1f:e4:a0:b5:
f6:86:3e:a4:80:e5:6a:77:ad:6c:41:e9:7d:8c:c0:
eb:ad:50:54:99:8a:48:ec:97:bd:e5:13:8b:58:56:
55:3d:55:7d:1e:5e:09:7c:50:12:57:46:d4:29:cb:
e9:59:68:f5:ad:e1:59:7f:5c:3c:44:4d:5c:16:db:
81:7c:fd:fe:11:0b:6f:fc:10:81:6f:d0:eb:62:59:
f2:bf:5e:00:b4:38:26:c0:8f:30:5c:fc:f5:9c:df:
a0:94:57:ba:12:2a:72:bf:ca:04:e6:55:2f:79:a6:
d6:bd:79:ba:20:03:37:19:97:b4:66:ea:2c:bd:cf:
c7:69:19:46:ec:f9:2d:01:c0:a5:28:95:89:34:fe:
9c:11:57:5a:b1:2b:2c:84:94:35:4f:33:03:90:0d:
af:20:2b:65:2e:65:11:b2:7c:5b:8b:86:3f:91:ea:
16:ed:72:2f:41:93:d0:e2:a0:1f:9f:4a:a6:ee:18:
54:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B7:FE:3D:C1:C4:75:54:88:5B:0A:BA:5A:7D:60:E5:BC:CD:C8:0B
X509v3 Authority Key Identifier:
keyid:D3:44:03:A3:0B:31:37:59:AF:96:26:AF:D8:D3:D2:38:05:FC:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00QDowsxN1mvliav2NPSOAX8yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/5678cd-d77b-4563-afe3-b40527dd43fc/1/00QDowsxN1mvliav2NPSOAX8yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ed:62:20:a5:9f:14:72:69:93:29:bf:39:c1:3d:9e:20:2c:
c2:8b:a7:4c:9b:2d:dc:b0:50:a8:20:d0:47:e9:6c:65:f5:3f:
38:ff:79:5d:26:a7:7a:72:1e:b5:a6:92:e6:5a:9c:df:dd:6a:
82:72:cf:f9:05:e5:5e:b5:c2:2d:f2:36:45:32:ad:96:80:14:
80:ae:12:ef:c7:65:d9:88:08:34:20:53:6d:8e:e2:27:e8:b0:
4a:18:dc:64:23:e8:2a:56:1b:04:84:3a:fd:6b:e0:1d:2d:be:
90:49:c8:79:dd:75:c4:60:49:63:d4:58:6c:3a:ee:d7:ea:1d:
f5:68:03:77:6b:5d:41:cc:12:97:bb:2a:fb:27:b4:ed:3a:8d:
a2:00:cc:80:e9:1b:37:6e:6b:24:71:9c:9f:d1:24:0e:a4:d8:
a4:71:23:87:92:80:3a:a6:d5:40:c4:d2:aa:9f:0e:33:a9:f7:
9f:b3:74:97:79:8a:aa:93:03:b3:c3:e2:60:45:8e:86:15:43:
0c:f9:ca:0e:8b:ff:7d:1d:87:01:18:b8:b0:15:d0:20:26:39:
73:77:6e:45:78:05:9f:06:6a:33:ab:b3:4b:4a:67:5e:bb:fe:
db:13:77:17:54:16:c6:49:af:c3:40:e6:ee:c2:48:f5:1c:d2:
98:c3:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:13 2025 by rpki-client