Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File: q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier: 15RwQToLT3LjdxBMHGDJxO65exnMcu7RAPAVy96eVyo=
Subject key identifier: A2:AC:9E:2A:21:BE:11:00:0A:6F:0E:14:D2:09:A5:9E:51:F1:E1:3C
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 019A01114F56361FF2AF3005E5F2B6BBB3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number: 16EE
Signing time: Mon 20 Oct 2025 10:01:42 +0000
Manifest this update: Mon 20 Oct 2025 10:01:42 +0000
Manifest next update: Tue 21 Oct 2025 10:01:42 +0000
Files and hashes: 1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=)
2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=)
3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: ZUxna6W5MHNek3E9iJxmggSjZxQb35abDal4svwXBWA=)
4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=)
5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:4f:56:36:1f:f2:af:30:05:e5:f2:b6:bb:b3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Oct 20 10:01:42 2025 GMT
Not After : Oct 21 10:01:42 2025 GMT
Subject: CN=a2ac9e2a21be11000a6f0e14d209a59e51f1e13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:98:e4:bb:b7:bd:fb:8b:52:b6:29:02:a1:57:
2a:75:e3:eb:e3:e9:90:08:38:ad:b6:ed:03:f6:7f:
49:74:6e:3b:96:1a:10:25:e1:2a:c6:65:71:1c:37:
45:41:d1:4f:23:23:a9:90:ba:94:e4:a3:86:5c:2f:
26:42:1b:54:c7:e8:54:2d:32:26:b0:c2:e1:c2:31:
fd:66:98:f4:63:21:35:61:09:99:70:3c:41:cb:e8:
94:2e:a3:2b:88:71:5e:09:84:73:77:e4:78:68:75:
8a:ec:38:e4:bf:74:8f:6b:78:5e:01:04:f9:73:94:
ab:58:0f:d8:c3:98:ba:a4:a3:5c:5f:0c:39:42:c0:
55:08:eb:35:ee:82:33:7b:88:fd:aa:fd:14:60:3a:
36:4b:5a:8a:46:04:c3:e2:12:6a:cb:f2:ff:94:f4:
3b:b3:fd:0c:d8:a3:2e:5e:db:76:b4:c5:90:cc:cd:
9c:a3:78:b5:67:c5:79:5f:e4:ed:ef:f1:ea:88:19:
62:b3:53:c7:25:76:ac:70:3a:52:c2:e2:8c:62:71:
29:3d:0c:4b:e5:15:97:51:ea:c0:a6:53:ec:8a:c0:
a1:3a:4b:d3:15:6a:fe:20:c3:41:8d:a9:e9:d2:b5:
6b:52:26:71:ce:5b:c3:86:8d:44:5b:ea:58:9e:30:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:AC:9E:2A:21:BE:11:00:0A:6F:0E:14:D2:09:A5:9E:51:F1:E1:3C
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:44:27:a7:a6:38:59:a4:0e:e1:3f:e0:0f:4e:78:33:b0:4f:
79:73:a5:44:9e:41:4e:0d:f9:f7:a8:9a:4b:e6:07:2a:db:24:
9a:1d:fa:17:55:9f:cf:a4:ed:97:fb:8e:91:c0:d6:98:40:8d:
90:af:79:e5:58:ec:9e:f1:d8:b3:47:f4:6f:b7:0e:a5:db:4e:
ec:d5:d3:d9:b7:8c:61:a0:dc:82:41:83:80:09:7a:9a:19:e8:
d6:0a:ef:27:e7:5b:ed:84:19:9b:d4:1a:63:9a:a7:b7:1d:82:
50:b1:0b:96:6f:dd:9a:97:af:38:41:c8:22:cb:cf:71:1e:c1:
0c:0c:de:5a:3b:ae:18:e3:84:35:ab:28:33:a5:c9:b7:6d:62:
95:a8:39:9d:05:a1:5d:3a:5a:36:64:b1:60:39:c1:7e:9f:9f:
b9:90:4f:48:29:0d:00:a9:f0:aa:c9:35:52:d0:88:e1:a5:bb:
46:f5:21:cc:c0:f7:57:44:33:8f:bf:3c:91:ec:83:51:80:c2:
bf:bf:86:3e:d2:9c:e5:b4:8a:24:50:c0:8f:36:f3:c5:52:75:
7e:82:bc:db:c8:a9:ac:89:6c:cd:d0:ae:2f:67:aa:9e:c4:5f:
2e:9a:75:d8:ae:ac:f5:89:97:4f:28:c5:0a:48:3c:ad:50:10:
86:14:5b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:12:37 2025 by rpki-client