Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: gCu7XhfwunXiazQ0tbetdvxR2grgj95pZzp6wSLsrhg=
Subject key identifier: FD:A3:14:3E:6E:79:AA:4F:9A:F7:90:8D:F2:5B:E2:0F:8C:10:A4:58
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 0199FC21D0E37AA52E30270CA0FB306A7370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 11:01:38 +0000
Manifest this update: Sun 19 Oct 2025 11:01:38 +0000
Manifest next update: Mon 20 Oct 2025 11:01:38 +0000
Files and hashes: 1: 1nJZi9GJ90J5FpzQE_nW1w9Y34A.roa (hash: GVbUZdYnFxfV/6HU/T0jmvYJT+FivYMJd3zG7OwlXB4=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: lUeSmsnfPf+aCoiqHQosgo5HJ5qgLOX9ZByXx2UJHW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:d0:e3:7a:a5:2e:30:27:0c:a0:fb:30:6a:73:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Oct 19 11:01:38 2025 GMT
Not After : Oct 20 11:01:38 2025 GMT
Subject: CN=fda3143e6e79aa4f9af7908df25be20f8c10a458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:40:4c:6a:4a:2c:c2:2a:ae:f3:b4:69:e3:
99:c0:ea:ce:e2:cf:09:48:ca:43:22:bd:35:77:92:
4a:d4:09:e9:b5:62:9b:47:36:be:16:2f:c0:6a:b8:
99:bf:21:84:f1:63:53:47:ef:30:66:15:fe:77:57:
03:0f:0d:a2:41:c3:e9:4b:de:a2:27:6c:38:a2:04:
66:eb:4e:b8:8f:27:61:d8:d4:52:46:08:22:09:37:
d4:64:51:ea:03:4d:22:cd:24:7c:32:a6:ad:ce:7b:
c6:28:7b:4d:a1:28:4d:a2:41:32:e1:0a:f0:cc:e9:
55:86:66:fe:b8:cd:62:b7:3d:a5:28:59:6f:06:0d:
1d:d8:fe:94:77:1b:57:70:b5:3d:68:81:1b:85:ff:
3e:22:e7:29:66:cf:a2:df:d7:04:84:14:da:0b:2a:
17:9c:de:67:c8:56:67:b3:ce:f9:7e:27:fb:23:c4:
05:9f:b5:15:6a:4b:d3:72:21:a9:68:dc:0b:eb:df:
92:03:5d:47:60:a8:db:5e:90:2c:32:22:7d:93:bd:
07:79:a2:65:b1:2f:e2:73:d9:d6:81:1b:d6:44:60:
99:d8:af:4c:9b:69:51:18:5a:76:7e:5a:9c:e5:4e:
f6:50:7a:83:6a:af:96:1e:7d:27:cd:ca:05:2c:6b:
bb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:14:3E:6E:79:AA:4F:9A:F7:90:8D:F2:5B:E2:0F:8C:10:A4:58
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c5:4e:15:58:94:48:2b:df:e5:c5:ef:c3:6e:7b:68:5a:77:
a2:58:e0:9d:30:09:eb:e3:0f:a9:ab:e2:d2:ef:b0:03:82:95:
11:b0:6d:13:f5:66:bd:2b:0d:02:c5:f4:6e:95:ce:f8:21:e7:
34:65:a9:f7:fd:bf:7b:a9:4d:2b:e9:6f:80:7b:9f:f5:56:c5:
d1:55:72:da:75:bd:50:c0:15:c6:61:48:d5:85:be:85:22:a6:
8d:a4:84:87:8f:9a:f4:4f:0f:e5:b7:59:5f:b3:25:8a:95:01:
8a:32:81:4e:86:40:d8:fa:91:6c:c6:f7:40:5c:43:d5:e9:30:
d7:a9:89:33:26:af:ce:e1:eb:bc:8f:e5:f5:06:ad:97:d7:df:
c7:a3:8f:a0:67:fe:46:62:f2:0c:56:9c:aa:85:7e:5d:f1:fa:
4f:02:d7:4b:15:5e:62:1f:d4:c7:49:f5:9f:f3:d3:35:53:8d:
35:c2:70:03:f7:13:ac:52:5c:8d:10:af:11:f7:a2:22:6d:bd:
34:42:fa:0c:2d:58:9c:32:46:8a:90:30:2b:be:39:f5:a3:b2:
35:e1:93:22:47:f1:b8:12:ad:12:f7:01:a6:ba:5f:38:aa:b4:
6a:9f:c7:ff:5a:c1:5b:82:a2:48:45:f6:80:67:fc:9f:05:33:
af:e3:bf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:44 2025 by rpki-client