Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: n6VoECQMpe1LUwJWkmyfhe56zK8fvTyckugne3uFwyg=
Subject key identifier: 06:BA:D5:98:FA:4B:F4:74:FB:79:25:16:EF:2E:88:83:5B:EA:FA:9E
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 019A2365BF3E7A423BF7E15616AED847CE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0DD7
Signing time: Mon 27 Oct 2025 02:01:01 +0000
Manifest this update: Mon 27 Oct 2025 02:01:01 +0000
Manifest next update: Tue 28 Oct 2025 02:01:01 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: ltq0mHQ+1nDOGrMUwRqP6YZ87knVXvRbqU4YQcBwCBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:bf:3e:7a:42:3b:f7:e1:56:16:ae:d8:47:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Oct 27 02:01:01 2025 GMT
Not After : Oct 28 02:01:01 2025 GMT
Subject: CN=06bad598fa4bf474fb792516ef2e88835beafa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:67:f3:50:97:27:d0:a4:d2:41:a9:ef:d3:b8:
fb:af:bc:02:d9:66:e0:68:23:f2:03:d4:62:c5:08:
3e:b9:2e:21:f6:31:dc:f4:10:2f:5c:d9:4e:0e:40:
26:0b:ae:03:2b:06:bf:ab:f1:7f:df:f3:14:37:b2:
1b:e5:d3:2a:48:a9:2d:15:b0:7f:d1:e8:61:cb:d7:
e8:c6:a0:36:59:a5:76:1c:1b:07:e3:bc:e4:53:53:
0f:a5:d4:5d:f8:f0:a0:e4:47:43:f3:e6:b9:09:b6:
5f:1b:a1:5c:46:6d:8a:35:c0:a6:91:46:c1:0a:fe:
0d:d8:47:83:21:b2:06:b9:7f:c9:84:60:43:d8:ca:
9c:d8:2b:af:d8:81:a9:cf:f5:7c:08:38:80:f1:e1:
83:22:41:cb:32:62:e8:d6:20:1b:17:1f:bd:c8:8a:
9d:22:8f:58:32:75:2f:6a:0a:17:60:a3:f9:f5:7e:
a5:17:56:92:bb:24:e9:90:96:a4:b8:cc:c2:06:c7:
46:c0:a4:ff:52:13:b2:87:40:59:04:71:73:ff:06:
af:e7:7a:d8:d4:fb:65:d3:00:a0:7e:e7:20:6f:7c:
66:ca:2f:1a:11:1c:09:ad:2a:76:f6:66:f2:aa:f4:
45:32:6b:26:05:6b:7b:a6:f2:ee:ce:a0:f7:20:94:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BA:D5:98:FA:4B:F4:74:FB:79:25:16:EF:2E:88:83:5B:EA:FA:9E
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:ff:62:aa:39:9f:75:bc:43:dc:86:76:03:7f:bf:67:25:a3:
fb:0e:49:c6:98:c7:2e:92:2c:b7:7f:2c:2c:ca:e6:cd:c5:38:
9c:db:7e:07:c4:f1:4e:89:61:f4:e9:bf:ee:d8:de:26:8c:5b:
92:43:63:b0:1c:49:76:17:17:68:bc:10:c9:d6:a0:70:0c:51:
1f:e4:25:4e:d5:a3:d2:4e:fd:c3:54:1c:78:23:b6:e9:14:31:
da:18:54:93:d1:cf:6f:98:b5:d8:58:c4:b6:cb:a7:3f:b9:73:
13:d4:55:19:03:75:bb:c7:d6:87:12:20:d8:20:78:83:e9:ff:
91:cd:bb:fb:62:7c:86:3e:6c:44:5c:01:f0:b7:6b:c3:3a:4a:
c9:34:5d:f3:e5:94:1d:68:c0:8e:44:20:a0:41:b2:e7:08:cd:
89:09:6d:c1:b2:d9:ef:df:74:5b:54:0a:19:88:ee:71:4e:8a:
f6:a8:78:01:fb:e9:d2:3a:4f:7c:05:34:64:b2:b4:6a:96:0f:
a0:20:07:42:dc:2c:45:d3:a7:ce:6a:0c:ac:8f:8f:d8:3a:d5:
86:97:8f:0f:b4:4c:59:64:88:fc:da:ba:02:35:0f:41:2c:11:
f3:a5:71:de:2b:66:bb:54:f2:3b:c7:fe:59:fd:b6:69:a6:c1:
63:53:23:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:17 2025 by rpki-client