Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: XanXzqgLQSnfsue7fzonCNd4CjJnBuPz/KO6KmVktQg=
Subject key identifier: B4:9E:AB:85:96:99:7C:C7:8D:AF:46:9F:3B:0C:96:FA:34:B3:96:7C
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 0199FD6B5369034CD7DE8B0D53F78ECF530F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:33 +0000
Manifest this update: Sun 19 Oct 2025 17:01:33 +0000
Manifest next update: Mon 20 Oct 2025 17:01:33 +0000
Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: AiDkEUqo6YWfFALpzKPIuPnss8hupKI4DOhZoO0GQ3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:53:69:03:4c:d7:de:8b:0d:53:f7:8e:cf:53:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Oct 19 17:01:33 2025 GMT
Not After : Oct 20 17:01:33 2025 GMT
Subject: CN=b49eab8596997cc78daf469f3b0c96fa34b3967c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:f4:a1:78:56:e4:ed:d9:b2:0b:26:5d:ae:
5f:a2:7b:2d:ec:ff:d5:4f:e2:04:c8:7e:10:da:19:
49:6c:b6:0b:96:fb:c2:ce:7b:b3:cc:be:eb:95:07:
5d:57:7a:96:29:07:ee:8f:bc:95:70:a3:9d:90:46:
9e:3c:e6:d6:7f:d4:55:74:83:07:35:5c:07:43:bb:
1a:95:02:63:34:29:ea:df:f7:44:0e:aa:68:fe:34:
77:88:b8:1a:91:71:ce:64:f5:bb:cf:c6:bb:bb:48:
81:ee:e5:ab:8e:b1:26:c4:89:f7:0f:48:97:9b:52:
5d:f8:ce:55:2e:c4:b1:f8:71:94:4e:c9:34:8f:1e:
fd:cd:ef:e3:cc:89:53:23:b7:07:c2:a0:0c:95:3f:
4a:f4:37:0d:9e:c7:23:39:46:0a:f6:49:84:b1:49:
08:49:1b:8a:e5:c1:44:2a:dd:4f:1f:43:9e:ad:ac:
b6:2d:f8:0f:2e:d5:60:5b:a0:cc:8f:3b:39:86:07:
34:52:ac:1a:fe:d3:8a:8a:b5:d9:99:cb:0e:58:83:
59:58:41:ab:ad:0c:d1:58:7d:52:0b:0c:a8:c2:80:
d4:4e:41:65:8a:91:eb:de:43:2b:d1:5a:3c:ec:7c:
83:12:99:4e:dd:cd:1b:9a:7b:34:19:c8:4a:6b:94:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9E:AB:85:96:99:7C:C7:8D:AF:46:9F:3B:0C:96:FA:34:B3:96:7C
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8f:f0:d5:2b:64:03:be:3d:d4:32:ac:29:38:45:e4:3b:66:
ca:fe:44:73:ee:64:79:3b:a4:2d:b9:68:3a:2a:22:bd:a7:96:
06:c2:e8:07:fc:e7:74:66:1e:cb:24:16:66:bd:41:36:ff:36:
fd:69:38:a6:bc:bc:09:b6:59:61:b5:0b:a0:9f:2d:74:88:59:
32:9f:0d:91:94:5b:2e:3b:c4:a0:22:b8:85:4f:a8:71:4c:be:
76:4b:2d:41:d4:ad:c5:90:af:bf:f3:fa:fc:38:5c:65:1e:0d:
3a:84:16:60:57:9c:fa:ad:df:b1:4b:d5:6e:3e:57:13:93:85:
4e:0b:d7:63:a5:b4:ce:4f:46:a3:11:99:c1:91:ec:e0:0e:b2:
fe:fe:63:2f:6c:cf:42:3d:6c:b4:29:5b:ad:9e:e5:e1:92:11:
f0:18:b6:24:9b:ca:cd:a5:42:dc:32:4e:4b:a1:f9:38:cd:dc:
95:17:e9:c1:33:e7:05:75:2d:38:b3:09:b9:81:d3:bc:40:8d:
59:53:14:a7:18:af:7f:04:f8:d5:de:9f:f4:1a:0d:80:35:27:
d4:68:30:2a:c6:fe:c7:46:00:a0:4f:88:f7:d1:b4:8a:16:26:
ba:9f:7c:8a:fd:a0:b2:c7:0f:64:ad:e7:5a:5a:33:c4:84:0b:
07:a0:54:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:09 2025 by rpki-client