Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier: fMzxJVonZqiHcjcn6JbwMfnG49pIkUXe7RObiZDS/S0=
Subject key identifier: A3:4C:D1:73:43:C7:FE:09:FF:99:53:89:B5:DF:BF:4E:08:40:A6:9A
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 0199FC8F4F3DF1941D34A5D089AFF7B95435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: SJKAv5gNDVq+wlBsHN2uFtXktHPFtgAHYRUX8FdoGOI=)
2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=)
3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=)
4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4f:3d:f1:94:1d:34:a5:d0:89:af:f7:b9:54:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=a34cd17343c7fe09ff995389b5dfbf4e0840a69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:bf:ea:4b:45:b2:fe:8e:ac:f9:82:1b:06:
ae:d0:2d:d1:fa:2b:0c:d9:e0:36:52:90:03:f3:67:
37:9a:9e:33:8e:f6:e3:fe:67:54:95:50:e7:1a:67:
f9:d7:33:bd:dd:3e:fa:5f:cc:06:85:99:4c:f3:03:
86:ff:eb:d6:cd:5c:8c:26:82:8b:55:89:a8:83:06:
13:be:d7:6e:de:c7:08:3a:25:a3:7a:dd:50:ff:4c:
08:b4:5b:91:bf:b8:86:d6:ed:76:58:c2:11:23:c6:
9b:81:f4:c9:de:80:5f:38:3a:30:02:0e:a4:dd:28:
32:d8:d5:ff:52:45:e9:c8:ba:a8:a2:b7:b0:2e:85:
99:04:1e:6c:62:09:69:46:84:38:55:e7:54:19:b3:
50:6d:c5:8d:5b:c7:4c:56:13:d3:61:20:d2:9d:1a:
94:9c:b2:33:ab:a5:51:8e:95:0b:fb:0a:84:ee:d9:
8f:6c:4f:1d:4b:9f:a7:37:38:0d:12:3b:c9:2a:2e:
9b:0e:49:33:a0:68:18:e2:d4:52:24:db:18:0b:bf:
53:5b:21:cd:d4:91:03:6f:0e:17:ee:fb:6a:e7:af:
62:e2:d5:df:9e:50:91:97:a6:af:34:79:59:05:6a:
dc:2e:e4:e0:57:95:c7:7a:ff:8a:c3:24:60:6b:04:
bd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4C:D1:73:43:C7:FE:09:FF:99:53:89:B5:DF:BF:4E:08:40:A6:9A
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5b:26:01:a7:cb:94:7b:18:5a:35:29:4a:92:08:24:d9:16:
24:ed:46:b9:d0:92:31:91:1f:0b:4d:b1:87:6c:64:f2:14:77:
4a:0b:7b:b5:61:ad:c7:c8:b0:0a:f3:f5:89:5c:98:45:56:a8:
7d:ee:af:b0:78:4c:23:c1:0f:de:9a:75:fb:d5:ce:fe:66:de:
28:9c:c2:7c:c4:e6:99:70:ee:10:23:0a:71:34:b6:c1:0b:0a:
9b:e7:78:fa:f8:db:c1:82:89:14:e0:d3:77:3f:0d:6f:cd:12:
91:c5:9e:fc:fb:86:b6:9c:4d:85:30:b2:6e:35:bf:64:bc:f1:
fd:ae:0d:5a:6c:80:f3:8b:8e:5a:b1:64:27:81:59:c1:f3:d9:
09:2d:02:71:5a:87:3a:fd:6b:06:c7:e5:98:e7:75:0c:b2:83:
2f:fc:61:80:2e:ca:71:a4:1b:27:c1:a0:d2:ad:e1:9d:d3:2c:
b4:65:52:e8:b5:2a:e7:c7:99:f8:9f:e1:de:a4:1a:82:0e:d6:
32:31:49:7c:14:4a:7a:6a:26:72:96:ed:57:24:e4:14:14:05:
19:a9:93:63:b7:a6:58:05:ff:53:3a:ca:c4:db:62:12:c8:04:
6d:87:6d:bc:da:da:50:eb:fa:04:bc:1b:df:f6:72:4f:e6:c9:
96:6b:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:06 2025 by rpki-client