Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: MeQcBmAYkJj4x4JizPfTYG0FmdhpiwyNoRoGPNJ15eI=
Subject key identifier: F9:49:76:6A:6B:7E:23:18:9F:3C:F2:28:30:8D:D6:38:7A:96:91:02
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 0199FB459333B6DD15FA7D3CB127AB7941E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:04 +0000
Manifest this update: Sun 19 Oct 2025 07:01:04 +0000
Manifest next update: Mon 20 Oct 2025 07:01:04 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: hcPRuwTUxjuOryg2lU/6fLKJznkOPR3E3am//XTepvE=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:93:33:b6:dd:15:fa:7d:3c:b1:27:ab:79:41:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Oct 19 07:01:04 2025 GMT
Not After : Oct 20 07:01:04 2025 GMT
Subject: CN=f949766a6b7e23189f3cf228308dd6387a969102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:23:ef:12:77:16:cb:f7:76:a5:6b:5a:b4:
a6:59:0e:c4:03:bb:1e:0e:76:fd:48:93:09:d2:91:
38:3e:38:47:b1:35:19:9d:28:86:76:8a:97:7f:17:
fa:32:62:7c:ca:32:b2:11:97:f3:9d:d5:ec:6d:89:
be:55:9e:ae:15:2d:d8:0a:9a:a5:45:ed:97:b9:30:
93:86:07:e4:16:3f:dd:06:10:f7:ce:7f:ec:8f:71:
74:00:9e:5d:ce:01:41:94:96:8d:90:cf:d8:15:62:
74:be:ad:28:59:9d:7c:3e:1d:97:95:ac:44:ba:f6:
a4:15:5f:7f:45:db:46:23:c0:76:d4:8e:9c:46:e9:
0a:a0:7d:f6:df:b5:fb:cc:01:78:84:03:26:27:5d:
1f:0a:2b:e5:ca:e0:52:24:1a:96:9e:29:25:ef:00:
01:ea:73:a7:b9:9e:6a:09:3e:f6:43:d1:33:f2:8f:
10:d8:69:8f:28:35:3b:6c:26:65:0b:35:7e:fe:00:
7c:75:a0:80:bc:1a:08:1d:46:c1:cb:a7:7b:b6:41:
53:65:c2:95:26:41:bf:0e:65:dd:72:d7:5e:69:69:
4f:f1:76:aa:41:85:aa:42:44:31:6d:04:83:06:b0:
e2:e4:01:a8:b2:0a:29:22:e3:76:6d:bd:cc:23:c8:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:49:76:6A:6B:7E:23:18:9F:3C:F2:28:30:8D:D6:38:7A:96:91:02
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9c:76:e4:6b:50:37:fc:1d:60:9d:51:fb:44:36:76:56:a2:
59:93:9f:3c:64:bf:6a:0f:9b:b7:72:49:5d:b8:b7:bc:78:97:
c2:2f:5d:d5:b8:35:92:44:c2:ec:c0:b9:e6:b0:8a:00:67:92:
89:88:a8:6d:8e:f3:7b:fd:9f:ae:60:40:81:46:6e:2e:08:0b:
39:b2:c2:15:d6:3e:d4:1d:cc:41:31:a5:39:01:f8:82:90:eb:
a2:47:f1:07:65:19:d0:49:06:45:10:6d:81:b0:78:63:60:27:
35:f7:31:4f:23:d0:c1:bd:24:66:6c:04:00:be:a7:88:35:56:
94:17:23:c9:15:bc:71:b4:c1:3a:ff:32:ec:fd:02:9b:6f:96:
7a:36:c8:6e:a7:b8:d1:4b:70:47:0b:e6:80:83:77:df:5b:6e:
f1:22:6a:55:30:54:7c:ef:26:58:8f:37:a4:50:d1:ee:7a:50:
46:9c:51:ee:fc:3f:1a:b7:60:14:34:4f:98:95:e1:c4:b1:00:
a5:d6:31:6b:82:45:a0:38:09:31:c7:f8:99:d5:ef:cf:1b:a3:
aa:25:b5:5f:be:d3:4e:ac:a3:44:91:6b:15:02:6f:f2:da:fc:
ff:31:f8:bc:d0:6b:97:12:88:7f:8a:e8:a1:5b:9d:45:bd:0d:
18:d3:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:48 2025 by rpki-client