Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
File: q838GnxSDPjRdykgjoXosZfErf8.mft (raw, json)
Hash identifier: 27Lk9GNoDe9eNLoz+3yt81E99ox3MlDkJxvtkvnhl3A=
Subject key identifier: B5:59:61:F1:DC:84:05:F8:79:05:07:AD:88:88:18:02:57:32:B6:DD
Authority key identifier: AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
Certificate issuer: /CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Certificate serial: 0199C3EA6C2914BB2DD23723ABECE7998EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
Manifest number: 0CF7
Signing time: Wed 08 Oct 2025 13:02:24 +0000
Manifest this update: Wed 08 Oct 2025 13:02:24 +0000
Manifest next update: Thu 09 Oct 2025 13:02:24 +0000
Files and hashes: 1: 1HhNu8sG2l0hcVfkxopBJPM0AJA.roa (hash: Qt4OCtipxtwIwXuC2KjZFTe3zgqaRe5IKbtJYrVBUxM=)
2: hJbHpAPOiNkNScuafVbq5FNZ7D4.roa (hash: /FjzkSwns/04Wx3/dyzKMt8M5RMeRjhJm2fdzZxup8w=)
3: q838GnxSDPjRdykgjoXosZfErf8.crl (hash: 8p6jToMasSdIyULzpHlQ5LEKyJm788rWoREgBnJ//wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:ea:6c:29:14:bb:2d:d2:37:23:ab:ec:e7:99:8e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abcdfc1a7c520cf8d17729208e85e8b197c4adff
Validity
Not Before: Oct 8 13:02:24 2025 GMT
Not After : Oct 9 13:02:24 2025 GMT
Subject: CN=b55961f1dc8405f8790507ad888818025732b6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4f:b4:37:19:b2:46:b4:b9:d4:ee:05:17:0d:
e9:dc:f3:4c:8d:d5:38:47:67:c9:82:e6:ba:cf:91:
78:22:47:00:32:fb:39:89:e0:94:4c:b4:9c:d6:f4:
be:43:f0:89:e5:6a:7e:25:d1:88:09:f6:93:09:70:
e1:68:ba:8f:b9:0e:bd:14:11:d1:15:73:08:30:8b:
23:46:e7:be:54:ae:9c:1f:79:9b:a3:dc:36:e5:00:
8d:7e:76:2e:bc:32:da:f2:b8:14:a1:fd:46:c1:e7:
88:d9:33:0e:a7:8f:69:8f:95:76:28:38:2e:39:96:
55:41:c2:1c:18:dc:21:ed:29:e4:ce:a6:3c:ff:cc:
bf:50:67:6b:ce:58:e4:25:57:42:a1:fc:b6:c0:c9:
c8:32:e6:e3:5a:38:61:18:db:8f:28:ac:b7:c0:4d:
22:3a:91:c0:fa:91:01:b8:84:e4:d2:f2:4c:b3:7b:
ff:4c:7d:58:b8:85:05:96:0d:c4:e3:65:44:d5:77:
f8:18:15:4f:c2:83:c2:a5:92:70:71:d1:63:db:a9:
99:e6:db:7e:35:ac:19:44:fa:cc:0d:96:58:54:ce:
e3:b9:78:8b:9c:f3:77:0a:b2:2d:bc:4d:a3:0f:7b:
60:ab:d1:b1:e0:8c:ec:a0:07:b0:11:17:9f:22:11:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:61:F1:DC:84:05:F8:79:05:07:AD:88:88:18:02:57:32:B6:DD
X509v3 Authority Key Identifier:
keyid:AB:CD:FC:1A:7C:52:0C:F8:D1:77:29:20:8E:85:E8:B1:97:C4:AD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q838GnxSDPjRdykgjoXosZfErf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e5124f-1369-4901-9f56-2bb82a837b7b/1/q838GnxSDPjRdykgjoXosZfErf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:35:57:16:0b:da:4f:d8:2b:f4:a2:56:a2:12:38:a8:11:16:
2f:4c:5f:b0:6a:9d:e9:b2:1b:93:dc:de:c9:e5:9a:0d:60:12:
f3:db:7b:ca:d4:c2:0d:a8:77:f1:3a:82:cd:95:38:6e:4a:ab:
91:94:6b:ec:d8:08:0e:10:6b:25:7d:10:ee:12:72:48:38:14:
8a:75:98:ec:c3:ff:2e:cf:70:e7:15:c7:14:37:6c:44:f9:e2:
3a:d2:69:9a:dc:3a:59:13:d6:d8:12:65:e9:39:3a:e4:68:40:
7e:14:71:2f:f6:44:77:94:c2:96:eb:04:3b:37:d3:8b:63:c8:
4b:66:66:a1:fd:53:f5:1e:49:13:6c:41:c1:28:06:d0:29:20:
64:72:16:80:95:ae:b5:00:d8:c0:26:ff:57:f4:8a:f6:bd:09:
89:7c:fc:6f:a2:48:bb:bd:15:d0:cd:1d:8d:d4:1f:4a:3d:e1:
a6:a7:06:05:82:51:fb:86:8a:b9:ac:ac:7e:67:ff:e2:1d:f8:
a5:ae:46:fd:c4:d0:65:ce:e4:b0:09:d4:d0:73:fb:a7:0b:cd:
da:ce:be:49:18:2a:f5:cc:17:7a:60:0d:0e:6a:ca:36:0c:ef:
60:9b:76:b4:b7:5d:8e:01:86:89:87:b8:24:62:b1:0d:34:2c:
62:23:46:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:21 2025 by rpki-client