Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File: datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier: o0Csz193A7MN4SXSoU8zwXjjYujy5sV05ZLLNoZx/Yc=
Subject key identifier: BD:07:62:82:7D:23:EC:20:75:1E:62:EA:FB:31:D6:6D:B9:C1:CB:40
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial: 019A239C60F2B4D09E0CEFCFE94C573E8A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number: 03DA
Signing time: Mon 27 Oct 2025 03:00:42 +0000
Manifest this update: Mon 27 Oct 2025 03:00:42 +0000
Manifest next update: Tue 28 Oct 2025 03:00:42 +0000
Files and hashes: 1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=)
2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: 3bNjK1mWUyAZO164p2osDsKfUUvfUWHCJScCbZ9e3oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:60:f2:b4:d0:9e:0c:ef:cf:e9:4c:57:3e:8a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Validity
Not Before: Oct 27 03:00:42 2025 GMT
Not After : Oct 28 03:00:42 2025 GMT
Subject: CN=bd0762827d23ec20751e62eafb31d66db9c1cb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:10:9c:1f:33:5f:12:a5:24:c1:d5:ec:e1:
8e:b1:20:d8:8d:dc:77:62:1d:81:9a:46:57:96:8b:
60:75:6c:e1:a1:91:ca:5f:62:ee:de:27:77:a5:95:
01:e5:1f:e6:13:4c:c2:d7:de:54:ab:5e:62:6a:c9:
9e:6f:da:9c:42:4f:a6:49:13:29:bc:12:c8:67:13:
25:40:d6:8b:34:39:f9:0a:9f:37:4a:a5:1c:3a:ed:
22:df:d2:1d:1d:50:8f:56:00:40:f7:f2:70:ca:6b:
5b:11:a0:95:37:6f:de:dd:79:fc:e2:85:5c:d2:f5:
1a:7a:fd:59:d0:bc:41:94:89:d7:9d:62:af:04:82:
8b:e0:15:6d:d2:56:dd:11:f4:2d:83:24:b1:b9:dd:
06:3e:60:8f:5a:11:07:aa:60:af:bd:eb:0c:df:0e:
ea:33:b4:82:77:4c:06:06:3d:87:4f:09:64:83:3e:
df:00:04:83:85:f8:36:90:a9:58:f8:25:16:32:a4:
ab:75:b1:77:10:08:49:05:e3:8b:ff:3d:98:5c:54:
e6:f0:87:5a:78:51:76:f4:29:b6:7b:64:38:a3:85:
40:ee:fe:21:b1:a6:5c:d3:e1:43:fa:ec:cf:28:e9:
11:e9:a4:7e:2c:c9:28:38:f1:14:f5:55:01:68:6f:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:07:62:82:7D:23:EC:20:75:1E:62:EA:FB:31:D6:6D:B9:C1:CB:40
X509v3 Authority Key Identifier:
keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a7:f7:ea:f8:4d:52:23:67:7e:34:26:d5:ed:ef:5c:8c:0b:
64:09:90:b3:26:3d:cb:1c:fc:bf:70:35:b9:d5:1a:a4:07:4a:
4f:f9:4e:96:b3:ef:8b:a5:98:d3:65:be:01:d9:0f:61:c6:66:
10:70:3c:23:fe:7d:e0:92:6c:9e:de:d6:44:ea:74:64:fe:a3:
61:d2:d3:06:0c:74:e9:00:96:1e:d0:dd:02:0a:0f:10:40:be:
1e:5d:f0:d1:54:24:31:27:83:1a:84:6c:03:da:af:05:20:6c:
85:43:a8:b7:e3:e5:0c:ed:a6:ec:49:4f:56:24:44:19:f0:59:
9a:59:47:a3:72:e2:d2:eb:61:96:1a:60:38:32:00:a1:67:09:
7f:09:5e:85:7e:bd:90:df:97:c8:d0:81:01:0d:5b:b2:dd:6a:
7c:92:b4:0d:2b:1f:e8:83:c6:37:a8:89:4d:da:f7:58:89:7d:
d0:4d:9d:e7:2f:12:f6:29:f6:23:7a:7c:5a:f1:d3:04:51:26:
68:e5:8f:bf:c0:56:73:34:67:25:3d:ee:4e:4f:ae:77:1a:68:
b1:4d:e4:34:72:cb:b6:a9:1d:8a:60:34:cb:e1:de:8a:ad:47:
e3:c1:7c:9f:e5:d6:bc:87:2f:1d:83:ae:98:c7:1d:d3:7a:78:
74:9a:5a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:39 2025 by rpki-client