Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
File: q_CoT_j1BX-Ukd775q1V7q6YzAY.mft (raw, json)
Hash identifier: ZtuK/fbusBnRvBqQHTce8G6j0zWURBKoXiLcgXnnT0c=
Subject key identifier: 62:2E:C9:22:35:CB:0C:1D:42:D8:11:84:A1:DA:31:E0:6B:CD:A9:73
Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
Certificate issuer: /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Certificate serial: 0199FBEB19627E7D5AD77B12766C6098C30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
Manifest number: 10DB
Signing time: Sun 19 Oct 2025 10:01:52 +0000
Manifest this update: Sun 19 Oct 2025 10:01:52 +0000
Manifest next update: Mon 20 Oct 2025 10:01:52 +0000
Files and hashes: 1: MjzHW04MNpWP93ktfKv3g1wY_yY.roa (hash: sTUqFaDMKCqi+ntmnIAR8vXErg/0YN5V/YZHZNxvcNw=)
2: q_CoT_j1BX-Ukd775q1V7q6YzAY.crl (hash: 2kE13Gzw+P6gavPA1gfHxObS3GI056JpI1lRHQ0KdpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:19:62:7e:7d:5a:d7:7b:12:76:6c:60:98:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Validity
Not Before: Oct 19 10:01:52 2025 GMT
Not After : Oct 20 10:01:52 2025 GMT
Subject: CN=622ec92235cb0c1d42d81184a1da31e06bcda973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:de:c8:c7:d6:46:e1:01:73:93:20:f3:72:
21:63:2c:9b:5f:df:d6:dc:b6:b5:49:63:de:b2:95:
80:5c:3a:51:d6:85:3c:62:bd:d0:f2:11:12:fa:4a:
f1:cf:41:ca:5c:9e:16:28:18:96:cf:94:c9:0f:4e:
72:af:6f:96:0c:4d:e2:62:c8:5b:48:f6:69:55:5e:
69:26:02:71:c1:b6:b4:7b:0f:49:10:d3:b3:36:ff:
a3:f2:70:ab:ff:cf:12:32:9f:a6:fa:fa:69:97:d5:
f8:19:37:e1:92:5c:7b:ba:c7:ad:8b:ba:33:70:98:
7f:92:de:92:a8:1d:12:90:da:c1:fb:55:03:94:de:
0f:42:4b:b8:bd:22:89:f4:82:2d:3b:1f:7f:7f:6c:
33:af:aa:d6:1f:35:25:23:25:67:6a:8f:53:2b:b5:
e8:cd:11:c2:e3:5d:b0:85:a7:d4:c9:58:ec:11:47:
ec:ae:2a:d0:96:fc:6c:08:4f:cc:fe:41:d8:f6:60:
c2:0d:8e:67:97:f6:60:9d:9b:0f:21:51:ba:14:42:
58:c4:ea:2f:b7:a4:8e:9a:17:aa:63:f9:ea:05:ff:
3e:22:a5:02:fc:66:1c:5b:77:7a:84:df:75:b6:93:
17:96:aa:75:1d:de:d2:a5:a3:f9:95:18:34:0c:94:
58:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:C9:22:35:CB:0C:1D:42:D8:11:84:A1:DA:31:E0:6B:CD:A9:73
X509v3 Authority Key Identifier:
keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8e:57:cc:c7:a6:42:44:d4:f7:03:47:fc:5d:99:f8:c0:71:
e7:25:73:c9:ff:9f:b6:54:da:2a:20:4d:df:e7:96:ce:06:2a:
bc:23:d4:ef:03:62:3a:ad:28:be:9d:b9:d3:f0:c4:07:cb:59:
57:8e:1e:52:0c:4a:4e:92:2d:41:f1:55:e1:ee:72:38:bf:0f:
66:7b:8e:0b:31:c8:a2:dc:e6:d9:95:77:5d:d7:21:7f:52:72:
cc:1d:c1:f9:bf:63:aa:74:a6:66:34:7e:d7:8e:5f:fd:03:14:
f5:20:1f:65:eb:64:4b:f9:0f:54:c8:1e:1a:f0:91:29:fc:32:
a2:68:f6:0d:d2:97:88:d7:1d:d7:d9:77:f0:19:09:49:aa:14:
5d:1a:b1:41:2b:39:d7:05:5a:2a:33:09:c1:d3:71:41:74:e9:
fb:af:f1:22:27:85:69:f5:09:3c:65:37:8b:a0:8c:b0:71:49:
4d:2e:c2:e0:46:1d:fc:83:8b:56:17:8a:06:9f:05:84:c3:e2:
41:24:2f:a3:6f:38:8b:a5:c7:5e:de:b0:96:e6:ca:f3:32:93:
c8:ec:b7:16:5d:ce:c7:fc:11:87:30:c9:07:d7:57:03:21:c3:
86:74:5d:07:35:5e:c5:3f:8f:2d:0e:b0:ca:c2:cb:db:f0:55:
da:80:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:22 2025 by rpki-client