Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
File: Q4T2-m3sztVXioWlHgvWVwHqNOw.mft (raw, json)
Hash identifier: 2FB9N/g6lyeQAe9o4ePN2bnfrO0i28llq6uC8gzY2tE=
Subject key identifier: 87:17:71:5A:9F:21:46:EE:ED:14:3A:70:E1:75:48:6B:76:48:50:F6
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 0199CEDA6C9815607F4DFDDBFB0ED53F4601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
Manifest number: 16DE
Signing time: Fri 10 Oct 2025 16:00:45 +0000
Manifest this update: Fri 10 Oct 2025 16:00:45 +0000
Manifest next update: Sat 11 Oct 2025 16:00:45 +0000
Files and hashes: 1: 29wssqErvKQtR_9f6uK-OYzddNM.roa (hash: Bh05SYc8VBmf4zaIv99zE5UZHb6fBJqOGBDvempbpVM=)
2: 6ydkCTIO-cNnh8Hv2Ok88IlcHaI.roa (hash: wLv2JoucZBkU56L2p9pXvAWsrjbYGSWjGCERyhVvXsw=)
3: AN-DGU807Zi1GLozE0Ye6tyK7Ic.roa (hash: +/Pg+LZh0oTnlaPXWDZsXPiFa0OXAsSR/g5vgnMvqME=)
4: N0dUKPrjFoc0y8MW0LZVdnxSnBI.roa (hash: GOCzo5+8biESJ82NDr0uRyIZsN+18Kfk+tP9JYURZW4=)
5: Q4T2-m3sztVXioWlHgvWVwHqNOw.crl (hash: F6N99l88faYxuLxRRqMQNCnH73VQu03ciHcrgV6pXR0=)
6: akr2zEciBp0bAf10VTnQBF8A5hE.roa (hash: SJfaT9rqeoFgX5bxM6d8wxAKVaMpQ7a7c0aJKadx3yo=)
7: maXcZQ7N2y2_afrzV1oMNjT4O7g.roa (hash: D+pc8oR4WM9Y/chv55U8MqOsuEcIXejdvRWZ+f3Pszg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:da:6c:98:15:60:7f:4d:fd:db:fb:0e:d5:3f:46:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: Oct 10 16:00:45 2025 GMT
Not After : Oct 11 16:00:45 2025 GMT
Subject: CN=8717715a9f2146eeed143a70e175486b764850f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:99:7e:51:52:b0:a9:51:7d:85:31:88:51:
a9:ae:d3:59:df:a5:79:d1:f9:be:bc:8c:f4:4a:bf:
ac:23:b5:a6:4d:29:3a:a2:ca:f3:1a:32:56:7f:e3:
81:ed:13:5d:18:e5:14:15:78:94:dd:6f:86:62:36:
2e:3b:cf:3f:cb:59:95:d8:20:21:d8:fa:2f:2d:5f:
8d:d9:9f:58:81:00:8e:4c:45:cc:75:12:04:20:53:
7b:12:5a:f7:37:81:07:c6:db:db:b0:49:80:56:0b:
23:b3:b9:40:31:6f:54:15:e6:7f:17:e3:d5:35:bc:
c8:7f:09:bb:d0:e0:e2:4c:ad:f2:ce:d5:d1:ac:aa:
b2:25:72:d6:c9:1e:bb:cc:c1:19:21:66:7a:60:84:
82:de:48:1e:d4:6f:e7:00:c4:9f:2e:0e:fe:f8:9c:
66:eb:ae:cb:0c:c8:f5:18:b6:4d:0f:80:73:38:77:
9c:68:32:e8:e2:da:9a:ee:42:5e:fd:50:d1:f5:de:
a4:03:7b:01:61:e8:42:e9:b2:f7:be:00:ed:97:23:
c1:28:ea:3c:d6:18:6f:cd:e8:a1:79:df:f3:96:6d:
41:be:1f:5a:db:46:86:e8:83:18:98:34:3b:7f:17:
23:80:ba:ad:3c:da:88:f4:7c:91:53:d7:24:ea:3f:
7e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:17:71:5A:9F:21:46:EE:ED:14:3A:70:E1:75:48:6B:76:48:50:F6
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:fd:7a:6c:05:c8:7e:43:76:cb:af:87:6d:c6:8d:7b:80:d9:
4b:54:5e:89:39:3e:11:cf:e2:35:7c:cf:c8:b7:6b:4e:ee:fa:
9f:9a:6d:bc:48:eb:be:8a:c6:cd:3f:ff:57:74:21:65:ee:10:
f1:4a:77:e7:a2:45:86:3e:60:c6:50:3b:89:20:f5:e2:a8:1d:
eb:7b:5f:85:6b:41:3f:88:b0:6f:e5:fc:09:4c:73:36:ef:c1:
7f:d6:15:47:fe:7e:c5:5e:3b:37:aa:62:be:34:ff:3d:5b:73:
b4:c6:d5:58:67:bd:d7:a3:7d:7d:c2:a4:85:06:02:2f:7a:e8:
cc:ca:6b:68:96:60:fd:f5:0f:80:3b:5d:54:a4:f9:81:04:e9:
28:f9:ee:ae:c9:d2:2e:44:20:9f:12:5f:b2:4f:b8:26:1f:b6:
2f:97:e1:d8:cb:df:4d:42:a7:15:78:2d:b0:f6:27:b0:11:a6:
2f:d3:f4:28:9e:de:7b:5e:e8:e5:8b:f9:1b:88:ab:5d:20:93:
a8:c7:55:25:ca:b3:e0:a7:a5:3c:3f:e9:8f:a8:b8:09:5d:0a:
c5:5f:d3:5e:bc:15:c7:64:b4:d5:7e:17:f6:23:0c:29:bc:17:
60:32:bb:f4:73:60:d6:0d:ff:38:a0:32:2a:03:46:7a:d3:28:
97:20:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:33:05 2025 by rpki-client