Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
File: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json)
Hash identifier: LrUkMArBiEl/EXDS45st6xR7DDWHJPlqHsZIflLjuYA=
Subject key identifier: 9D:C5:2B:38:42:24:B3:70:3A:42:71:2E:FD:2E:E3:F3:79:2D:87:FD
Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Certificate serial: 0199FCC608C671854C50067268253FCE12C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:00 +0000
Manifest this update: Sun 19 Oct 2025 14:01:00 +0000
Manifest next update: Mon 20 Oct 2025 14:01:00 +0000
Files and hashes: 1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=)
2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: hhNTjhfRV7atrFn5/2a1gqCzFR/vS4vOk7FE3vybh6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:08:c6:71:85:4c:50:06:72:68:25:3f:ce:12:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be
Validity
Not Before: Oct 19 14:01:00 2025 GMT
Not After : Oct 20 14:01:00 2025 GMT
Subject: CN=9dc52b384224b3703a42712efd2ee3f3792d87fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f4:b8:f7:5b:62:e1:9c:11:e5:36:83:a1:96:
a7:e8:59:f4:1b:33:0a:bc:b4:f0:80:3a:f1:23:23:
d8:ec:cd:76:d2:e9:e5:28:1f:fd:c6:f4:d6:94:c1:
5e:18:09:95:9b:fc:98:73:b9:2c:aa:b0:ec:a3:e0:
b5:f1:2a:d6:93:77:a6:91:6e:65:53:b1:61:a8:97:
90:49:13:81:60:e6:ec:51:71:b3:7d:5e:ba:d7:7f:
8d:33:2f:9c:69:40:fd:22:f0:44:76:4d:5f:2e:e7:
44:49:d9:0d:bf:98:51:58:b5:3b:1f:23:8d:0c:48:
98:ec:77:ef:e9:ba:e2:fe:18:1a:2d:b2:3b:0d:7b:
fc:49:59:5a:54:f3:5e:81:0f:76:52:98:4a:67:a2:
42:8c:66:03:e0:81:55:17:08:b3:08:d9:ac:b9:bd:
a8:f1:fc:66:86:31:d8:a8:a7:98:04:94:83:00:06:
db:35:00:c7:5f:b9:2a:aa:ec:ce:2e:d4:1e:de:8d:
c3:b0:3c:0c:b6:09:52:80:03:f3:cb:d9:0f:77:c7:
26:a6:2c:e2:3e:ac:d9:42:dd:f4:d3:65:df:5f:a6:
9d:23:1b:cb:da:36:79:e9:62:57:21:47:0d:01:17:
2b:d3:0f:52:f9:86:53:67:67:45:3a:b3:6e:16:91:
85:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C5:2B:38:42:24:B3:70:3A:42:71:2E:FD:2E:E3:F3:79:2D:87:FD
X509v3 Authority Key Identifier:
keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b0:7d:79:2a:72:82:a3:c9:c8:21:22:1f:c2:9c:cf:01:ca:
0b:91:ba:f6:57:4e:a5:b2:5c:22:70:7c:de:44:c6:2f:49:9e:
5f:5b:69:d4:f3:c4:cf:3a:14:b8:87:21:f7:75:ee:72:a4:36:
0e:8e:ba:32:88:86:b1:2a:ff:f9:38:3d:e7:76:95:df:88:99:
d4:54:e7:a3:ef:9e:a8:40:98:b2:bd:29:3a:01:dc:70:c5:09:
c9:d3:37:b6:40:9d:82:ad:e1:b9:ac:cc:bf:00:fd:28:e8:01:
6e:f6:62:0a:9b:b5:a8:f8:b0:16:86:cc:df:67:5e:c7:6c:8b:
99:d9:11:4a:02:b5:87:4d:27:0f:45:06:85:93:9b:82:57:12:
f7:fe:f4:eb:43:5b:b8:fa:30:4e:62:66:68:66:9a:c3:8b:6b:
48:fc:34:64:4b:b7:e5:a5:44:6c:3c:e2:fa:f1:64:5c:51:60:
91:77:44:3a:df:5a:e0:9e:83:ac:d2:84:3c:1b:cd:bc:0c:1e:
42:73:0f:2e:7e:11:1d:90:65:78:f0:b4:cb:13:f4:0b:c5:ba:
aa:a5:96:f3:78:de:c3:f8:d4:5f:3b:e7:4a:f8:af:9f:c1:80:
a6:95:41:7f:9d:b2:c9:88:2c:13:18:c3:b6:08:f0:6e:3b:df:
31:3b:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:27 2025 by rpki-client