Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: slGNIbASB0oXTB8n7NZ23BT7CBHZf1WW5HxuJsDdGlc=
Subject key identifier: 7D:56:14:0C:52:50:9C:5F:B2:38:48:7B:E9:9F:71:B2:B4:A9:3A:6E
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 0199FBEB4E90B86787C78EC242D8358F749D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 1324
Signing time: Sun 19 Oct 2025 10:02:06 +0000
Manifest this update: Sun 19 Oct 2025 10:02:06 +0000
Manifest next update: Mon 20 Oct 2025 10:02:06 +0000
Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: ucs1XKujzdGPmq59OTtXulqHaWb7ABqlkFXTf0bfME4=)
3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4e:90:b8:67:87:c7:8e:c2:42:d8:35:8f:74:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Oct 19 10:02:06 2025 GMT
Not After : Oct 20 10:02:06 2025 GMT
Subject: CN=7d56140c52509c5fb238487be99f71b2b4a93a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e8:08:b6:d8:34:c1:3a:89:0b:1c:ba:1b:55:
1b:17:72:4e:a0:b3:0d:13:dc:a8:c0:7c:61:2c:05:
5b:ae:fc:bb:dd:79:7f:b7:e5:ce:36:02:d5:be:db:
de:d1:95:0f:c6:10:2d:1a:b9:ed:bc:09:82:4e:14:
cc:3e:c6:9c:96:59:c0:21:35:95:3b:29:c1:1e:70:
f0:90:b3:d3:d9:7c:42:e1:93:d9:f2:3a:80:0b:c2:
0d:a7:d2:66:a7:f7:d8:da:02:25:14:45:cf:88:54:
e3:d8:e0:a2:99:0f:6e:45:f6:85:b7:bf:78:a0:05:
df:5e:21:4e:83:2e:09:57:b6:c4:93:47:d1:8d:c7:
e7:93:11:2e:fb:01:0d:3b:c8:4f:b0:bb:fb:02:f1:
4c:c3:de:da:f1:f7:f0:e3:8b:79:c3:b7:19:34:8a:
85:28:ad:bf:84:e7:a8:53:8d:fa:0f:76:bf:33:2b:
ca:23:18:34:d0:59:53:8e:94:ee:e1:91:e7:e9:fc:
55:44:fa:cc:a8:08:71:19:39:31:89:5d:ca:a9:6c:
40:f0:1c:2f:94:99:b8:f6:68:54:bf:df:fd:a1:ef:
01:ff:04:b7:20:00:10:0a:54:ca:b0:36:05:f7:b8:
66:ba:49:98:37:2b:01:5b:ad:47:ed:30:02:9c:a0:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:56:14:0C:52:50:9C:5F:B2:38:48:7B:E9:9F:71:B2:B4:A9:3A:6E
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:21:a4:0c:c2:6c:ec:6d:76:8e:44:47:a3:0f:16:a8:bb:47:
d7:95:5d:2d:39:8d:df:0b:49:0e:42:f9:8f:fb:2f:1f:d9:bd:
bd:fc:b9:96:0a:58:71:ca:84:c2:ba:30:50:58:f4:37:24:df:
4f:e4:6b:ac:dc:aa:fb:d4:ba:29:53:37:35:b6:18:3a:7b:23:
b2:7c:ad:b4:e6:20:aa:ed:f4:a0:1c:66:0f:45:41:d7:db:15:
d2:54:0e:8f:e3:2f:74:ed:5e:65:9c:f4:e2:a0:2c:13:05:b0:
40:f6:b7:da:0f:94:f3:e5:63:74:e3:3d:ac:9a:9e:ec:64:72:
bf:0e:78:ea:c3:70:3a:35:8d:4a:7b:4e:7f:f7:9e:90:ee:74:
62:89:bc:87:b6:cd:bf:68:ad:18:83:b6:a8:19:53:dc:57:3e:
70:de:40:77:45:3f:8d:55:26:6e:78:30:61:38:ab:2e:1b:56:
e8:24:9a:11:a8:8f:04:13:e4:55:0b:ac:7c:39:c6:10:d7:5e:
6f:7d:9c:2f:d6:7c:36:b6:4e:f4:f5:3c:69:0e:57:24:fa:dc:
e5:64:b0:a1:46:61:b7:4b:bd:dc:58:f8:97:1f:4f:80:1e:78:
cd:c2:4b:60:c5:d7:01:cb:00:0b:f8:0d:22:e3:0b:36:5d:44:
46:8b:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:30 2025 by rpki-client