Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
File: pqSmiq_slSLanKyAC0MkzNfWxaU.mft (raw, json)
Hash identifier: aIXZMA9TMmeKVSSLti7PSwsMpexesIJe4yBM0IMedJ0=
Subject key identifier: E8:6E:F6:1F:02:79:E8:07:DD:90:CF:3D:74:E2:2F:0D:9D:0B:56:80
Authority key identifier: A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
Certificate issuer: /CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Certificate serial: 0199FEEBC653FD33F6CEFA281DB730F64596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
Manifest number: 0856
Signing time: Mon 20 Oct 2025 00:01:28 +0000
Manifest this update: Mon 20 Oct 2025 00:01:28 +0000
Manifest next update: Tue 21 Oct 2025 00:01:28 +0000
Files and hashes: 1: FERbP680nVn9-OXBaT2aTWtd8aw.roa (hash: zQlyYeEOYC4qxko+i8oAsMpuMceTMqew9h1oxgQMJNU=)
2: pqSmiq_slSLanKyAC0MkzNfWxaU.crl (hash: dxD6zWgqwtNZWwFCeJfhnAYPerOOQ3kMLyK31dMkcz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:c6:53:fd:33:f6:ce:fa:28:1d:b7:30:f6:45:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a4a68aafec9522da9cac800b4324ccd7d6c5a5
Validity
Not Before: Oct 20 00:01:28 2025 GMT
Not After : Oct 21 00:01:28 2025 GMT
Subject: CN=e86ef61f0279e807dd90cf3d74e22f0d9d0b5680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d9:7a:d2:47:10:eb:c9:8a:fc:ee:90:98:b1:
07:d7:62:ad:6e:3d:4f:e7:91:cb:94:eb:21:8e:45:
fd:6d:11:a3:b8:80:ad:13:56:7a:b8:d5:15:a7:df:
df:ac:6b:14:30:31:8b:08:db:1b:5c:cb:68:27:b6:
42:82:ea:88:2b:68:a2:a7:14:13:7d:83:7a:91:28:
69:57:56:ff:2c:5e:83:a8:46:e5:eb:7f:43:8d:08:
26:c4:fd:48:fa:a1:fb:69:77:ce:e4:3d:2a:61:0e:
a2:01:90:4b:e0:04:2b:60:e2:1c:aa:9f:63:5a:89:
bb:73:2d:66:82:d1:e5:8b:25:96:9a:4c:f7:df:81:
d4:fb:4f:86:67:84:28:2a:e7:7f:45:33:33:16:af:
0f:77:f2:08:29:71:d6:f7:65:b0:d8:1e:07:20:c9:
5d:01:d0:fb:dd:9b:55:4a:88:49:e3:c8:9a:88:eb:
52:d5:54:f4:f9:81:75:8f:69:16:b4:10:e4:55:81:
4d:04:f4:b7:bc:a5:c9:5f:f0:dd:11:ae:fa:64:ab:
c9:07:55:82:f3:54:f3:b0:69:6f:1d:62:8a:d4:5d:
43:1a:4f:67:95:74:de:6e:4e:01:1b:46:82:1d:c3:
4f:26:e4:e6:11:26:df:fa:ea:13:39:3d:f7:dd:27:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6E:F6:1F:02:79:E8:07:DD:90:CF:3D:74:E2:2F:0D:9D:0B:56:80
X509v3 Authority Key Identifier:
keyid:A6:A4:A6:8A:AF:EC:95:22:DA:9C:AC:80:0B:43:24:CC:D7:D6:C5:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqSmiq_slSLanKyAC0MkzNfWxaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9e9b17-ed83-4272-bfbe-e9301afc384f/1/pqSmiq_slSLanKyAC0MkzNfWxaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0b:2a:d7:d8:cb:2b:2b:0b:4b:b4:38:e2:ca:de:4b:3a:a5:
7e:a1:79:b4:4e:f8:ee:f1:17:4b:b8:e0:f5:b8:b8:be:d6:27:
9f:a0:ab:1d:74:7a:43:67:6f:ec:91:15:3c:69:b7:84:4d:d5:
c3:5d:f4:77:0a:70:5f:30:d2:e6:30:7c:aa:27:b5:7d:b2:86:
47:81:7f:27:97:a6:29:d2:45:12:75:11:33:8d:8b:6a:2e:be:
15:4b:a6:45:9f:72:29:93:c0:39:7f:82:3f:3c:58:5c:54:b9:
20:78:8f:aa:24:42:d6:35:f5:b0:8c:e7:b1:96:7e:ec:50:95:
57:eb:f1:d4:6b:c5:ba:60:f3:ed:3f:e9:2f:70:2d:5e:11:4d:
60:5d:d1:c2:32:10:28:20:d9:e5:39:39:2b:4e:ea:3c:03:84:
94:19:06:7a:3e:f5:9d:da:aa:9d:98:c9:3a:63:f0:a3:33:f0:
16:7a:7d:06:ff:4a:07:aa:c2:c5:a0:16:85:32:3b:58:30:a8:
29:37:56:85:78:ae:96:1a:e3:f9:ff:b6:b3:b9:15:ab:8a:b5:
38:32:36:bb:36:50:55:cc:21:96:46:28:26:9d:de:51:9e:4c:
2b:2b:df:6c:f9:b2:4e:82:4a:40:83:c2:7e:a8:e4:1b:48:bd:
ba:ee:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:26:28 2025 by rpki-client