Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File: rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier: 0YK+d+pSWJsRmmJ60DaNijoqlWW9VnNHR62Hun0odAU=
Subject key identifier: 86:A9:7A:84:CA:22:3B:79:DF:C9:1E:BA:FB:80:C5:3B:BC:AB:BC:B6
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer: /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial: 0199FB7CAE5289D156799BE26C5E5FCA25AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number: 0AA3
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=)
2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=)
3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=)
4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: fLmxHtO3nhv8Xa+B8C+bZqeDzunBYeOsq1AI/H1PrJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ae:52:89:d1:56:79:9b:e2:6c:5e:5f:ca:25:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=86a97a84ca223b79dfc91ebafb80c53bbcabbcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8c:c1:41:59:a7:fc:ae:27:a9:a5:2a:96:bc:
72:0b:87:62:2f:04:ec:24:f1:f5:2c:f6:10:60:fd:
80:6b:eb:b3:ab:90:06:7a:a2:eb:08:3b:5b:54:b8:
96:76:95:15:d2:6e:4f:cd:09:08:f8:ca:78:6b:57:
e7:e0:e9:ee:25:f0:00:56:94:cd:83:7a:67:98:a7:
e1:de:4d:58:9b:32:d7:90:4a:5f:29:ad:c8:2c:fe:
14:86:79:0f:02:78:ff:10:51:c8:4b:34:c2:d5:5d:
df:d0:21:41:f5:35:53:12:aa:0c:48:c6:29:cc:89:
66:12:0f:c9:cf:5f:75:4f:67:67:7c:e8:1d:7c:0c:
0c:8a:30:75:8d:76:8a:0e:36:35:ff:04:62:fb:3e:
82:02:9c:ee:3f:fe:1e:ff:b9:25:14:a1:10:46:6b:
fc:8d:8c:c8:5e:76:c1:ba:e9:d5:62:d8:b1:b5:44:
74:51:89:d2:d4:d3:af:c8:80:62:cd:ff:80:83:47:
79:cf:0e:f9:91:8a:4a:24:70:99:af:63:25:cd:24:
1a:1c:a3:84:2a:2f:b6:97:f7:49:54:48:7e:aa:1c:
81:83:d9:37:44:0e:e0:2c:54:89:83:c5:08:71:e4:
ad:e3:14:51:3d:e5:89:58:de:12:34:fe:19:f1:85:
8d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:7A:84:CA:22:3B:79:DF:C9:1E:BA:FB:80:C5:3B:BC:AB:BC:B6
X509v3 Authority Key Identifier:
keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:df:df:63:3b:6e:59:3a:67:15:58:cd:f7:ed:5f:fe:4d:3b:
bb:2b:4c:9b:f9:18:3f:d2:0e:c5:f4:20:5f:55:7c:c7:38:41:
eb:9e:7f:7a:04:35:53:1f:e1:9b:8c:74:e2:56:7d:4b:7f:ce:
ac:de:7b:ed:38:26:b4:99:78:94:5c:a5:88:d5:4b:50:d6:7e:
c5:45:be:09:4c:01:30:8f:f0:65:3d:24:9d:53:b7:80:0a:49:
56:aa:0b:c2:d1:d2:06:a1:75:1d:ed:a2:ca:f5:c6:7f:18:53:
c6:81:67:40:6c:a3:32:4d:ef:e4:2f:05:a1:82:74:18:43:e6:
50:a6:c6:a9:43:b6:ab:db:14:18:e8:85:1a:64:4f:50:22:f7:
0a:5f:30:99:ca:20:5b:e2:48:0f:a2:2b:50:0c:59:5a:82:21:
13:90:38:db:18:c7:4e:41:20:21:5c:cb:2d:cf:fc:c9:29:c2:
6d:c4:ef:f5:15:50:fe:7b:3a:c0:bd:fb:e3:dd:6c:99:79:43:
be:40:b0:7a:49:36:f4:8b:a3:8c:00:f2:dd:47:65:74:0b:b1:
39:a4:b2:38:61:8d:ce:de:ba:c3:18:73:8c:0e:dc:48:4f:ef:
78:60:d2:30:59:b2:50:5d:21:cf:84:e4:51:a9:91:47:97:3d:
41:bf:66:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:22 2025 by rpki-client