Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
File: q8ETx66mtxSgYOn3w-cVaeYD05U.mft (raw, json)
Hash identifier: /y3MiVMTwce+Svgim4+gbGl9AEXaBrre5GF3zo8BtGc=
Subject key identifier: A0:AB:BD:BE:6C:D2:44:A4:F8:10:43:9C:0A:49:F4:D6:60:EC:4A:C9
Authority key identifier: AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
Certificate issuer: /CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Certificate serial: 0199FB7C9DA4F0FF93DC82599439B59198EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
Manifest number: 0DD2
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: cACLsETFkrWp2y3uSppllbzeN8M.roa (hash: 69+xRQ628SJEg1B3Gvd/lIbJ0dPAum9FWWtmKpGIALk=)
2: q8ETx66mtxSgYOn3w-cVaeYD05U.crl (hash: niIV534IHxyIp2k5LdCA7DWP+oEwxfgAEOvERvA50Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9d:a4:f0:ff:93:dc:82:59:94:39:b5:91:98:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc113c7aea6b714a060e9f7c3e71569e603d395
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=a0abbdbe6cd244a4f810439c0a49f4d660ec4ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:07:dc:0c:e5:95:ee:1d:bd:1c:50:a0:6e:
7f:ef:44:b5:74:d8:6a:78:54:45:0c:f6:c9:f0:14:
e8:81:a8:fc:86:1a:e9:2f:0d:9b:66:64:b8:83:98:
79:df:64:f1:1c:40:b9:d2:ac:96:70:0e:21:ee:47:
0e:95:4c:43:b5:8b:2c:26:47:60:3a:ce:33:ad:23:
f8:be:30:82:bd:57:bc:65:ff:36:53:49:81:fe:6d:
7b:c9:32:d0:20:22:a8:9c:92:6f:7d:f1:12:78:c0:
76:73:a0:46:2b:2d:66:90:26:34:c2:f1:82:ff:ad:
27:8f:1e:e9:80:2c:3a:59:af:10:4b:b7:08:f6:c2:
87:c4:3d:90:48:bc:40:1d:b4:9c:3b:3c:60:dc:de:
b5:49:7e:6c:6f:19:a3:bd:3b:f0:20:b6:55:ff:48:
e0:e6:dc:f8:73:ad:5d:21:c0:c3:45:70:35:73:eb:
ea:cc:72:e9:4f:5d:7c:80:3b:60:05:00:a4:5d:3c:
a0:31:f3:fc:37:1a:26:4a:4f:db:12:42:eb:48:d6:
93:0b:1f:73:73:db:71:1d:88:de:3a:62:5a:18:c0:
46:4c:6c:1d:e4:c9:bf:21:78:60:4a:bc:bf:cf:08:
3a:49:0c:70:3a:26:c4:e0:9d:68:f0:09:21:9e:e6:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AB:BD:BE:6C:D2:44:A4:F8:10:43:9C:0A:49:F4:D6:60:EC:4A:C9
X509v3 Authority Key Identifier:
keyid:AB:C1:13:C7:AE:A6:B7:14:A0:60:E9:F7:C3:E7:15:69:E6:03:D3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8ETx66mtxSgYOn3w-cVaeYD05U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c0ad4d-20fe-4a93-af06-1d0a4ec827ab/1/q8ETx66mtxSgYOn3w-cVaeYD05U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:29:38:b5:5e:1b:43:23:24:e4:65:08:55:df:da:e6:22:34:
91:65:21:ea:42:74:18:01:0a:b2:36:1b:f0:68:23:67:5a:94:
2d:1f:03:f1:00:2d:75:14:e1:26:9b:69:79:de:59:8c:3f:1a:
ca:b4:b0:a8:55:9a:ae:66:6d:ed:b6:53:c6:a4:ae:2e:4d:5d:
e8:60:63:70:90:e2:f2:06:62:69:95:fb:11:38:54:d9:99:d1:
c0:73:e9:8c:16:e1:92:36:65:9a:15:11:ae:11:86:60:9a:03:
c2:86:4b:2f:53:93:48:0a:d9:a9:ce:43:28:8e:2c:60:ff:32:
4b:3d:7d:cc:5b:36:dd:10:9f:e5:85:e0:21:de:30:cd:dd:b9:
79:d6:69:7c:09:6b:08:7c:be:75:c5:44:cc:ee:99:c3:ef:bf:
eb:9d:c8:9f:52:0e:19:a0:ff:52:e8:7f:a7:47:94:a3:6c:54:
09:43:75:0e:2c:04:df:43:f9:e5:a2:98:67:46:83:d4:f4:9e:
00:51:2c:16:c9:8d:af:2d:b7:58:7e:f5:3b:5e:42:b9:68:97:
57:00:d9:68:22:9a:b6:5b:aa:75:91:ca:27:32:39:c3:97:65:
38:91:fd:8d:89:c9:d9:35:c1:80:fc:6e:29:1e:dd:d2:db:96:
46:15:e3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:11 2025 by rpki-client