Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
File: qCoCPr2xLpceeocp2Cankkz36DI.mft (raw, json)
Hash identifier: o/LGP10t9llKOm2JadZzGodv4SsNp7Z6dCDZnrHogOw=
Subject key identifier: 13:26:B3:F7:68:AA:D3:B8:08:4C:CE:AD:14:13:A5:EA:C8:5F:07:40
Authority key identifier: A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
Certificate issuer: /CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Certificate serial: 019A251CD12F412B3B20E8971F025AEC2AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
Manifest number: 0C14
Signing time: Mon 27 Oct 2025 10:00:36 +0000
Manifest this update: Mon 27 Oct 2025 10:00:36 +0000
Manifest next update: Tue 28 Oct 2025 10:00:36 +0000
Files and hashes: 1: 0mOwovSQfaOTpOjMePlA1vJyx3o.roa (hash: UKn/uBWWad1ow9KJDqJ57gBdSqtGNkm8IvDuZQii3FA=)
2: Rb-9REf4Ku4-CgLC6REjl5LjwmQ.roa (hash: cTHupzsbPAMMKa56v6BN9R2pDgzgt3AMXO4LKaMqhQw=)
3: qCoCPr2xLpceeocp2Cankkz36DI.crl (hash: KA6Yl0MTtVcjEo1pvPeqMa8o3g1Tqet3sx7oCW68uHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:d1:2f:41:2b:3b:20:e8:97:1f:02:5a:ec:2a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a023ebdb12e971e7a8729d826a7924cf7e832
Validity
Not Before: Oct 27 10:00:36 2025 GMT
Not After : Oct 28 10:00:36 2025 GMT
Subject: CN=1326b3f768aad3b8084ccead1413a5eac85f0740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3d:a1:67:6b:fc:01:77:53:ff:37:be:2e:96:
65:f0:96:bd:f6:38:5e:b7:20:80:91:6d:70:0b:74:
73:17:36:a1:be:c0:a9:40:91:c2:44:69:63:ed:b2:
83:ff:c1:c3:b2:4a:cd:3e:ef:b3:9d:a9:18:1a:11:
2d:8b:be:e1:0a:4e:8b:e4:57:34:0d:00:cc:a5:07:
c0:f4:88:98:2a:99:d2:7e:3f:ca:02:78:98:b5:32:
b3:57:b4:40:4b:3e:e4:c0:f5:c6:86:80:16:25:fa:
6f:5b:bf:7b:21:74:77:5b:ce:e7:3d:c7:f7:9e:73:
8b:47:42:ee:ce:9b:c6:73:ad:e7:4c:b7:e5:45:56:
f6:24:e5:ae:15:7e:da:bb:f6:c1:9c:bc:97:12:6c:
b6:fe:7b:4a:24:ea:c8:09:a3:ad:20:2b:5f:e6:30:
c1:7f:94:7b:8d:f3:da:7c:17:36:2d:40:48:83:e8:
f9:46:06:74:51:1b:08:75:28:90:43:b9:22:c4:05:
8d:ce:a8:ab:19:d2:7a:61:5b:ed:9e:a3:ec:ec:26:
0a:84:f9:86:7f:15:e8:e1:e8:46:83:65:cc:87:9a:
ae:63:20:01:72:35:6b:d7:b3:af:2e:2d:27:d5:6b:
e0:4b:28:7e:33:d2:5b:c5:8a:ae:71:2a:ca:d4:19:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:26:B3:F7:68:AA:D3:B8:08:4C:CE:AD:14:13:A5:EA:C8:5F:07:40
X509v3 Authority Key Identifier:
keyid:A8:2A:02:3E:BD:B1:2E:97:1E:7A:87:29:D8:26:A7:92:4C:F7:E8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoCPr2xLpceeocp2Cankkz36DI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/317ddd-687d-458a-9ff5-22fc588bc66f/1/qCoCPr2xLpceeocp2Cankkz36DI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5a:ee:2b:6f:d8:33:7f:0c:86:4c:f8:f0:80:cb:eb:63:3f:
5e:0e:b7:af:2c:da:27:32:8b:36:63:2f:57:be:b5:6c:57:5e:
13:0f:5d:1b:58:67:80:aa:f3:e4:49:ee:2c:57:35:bf:cf:fe:
10:d7:87:42:91:d9:b4:ce:1c:c2:95:9c:e1:ae:de:10:d4:cf:
a4:e6:4d:7d:c3:70:08:69:2c:4e:c0:29:d0:a8:91:26:29:b5:
db:1c:c2:f4:36:ec:f5:ab:da:1d:f1:57:af:c5:e9:8a:51:85:
59:5b:48:81:29:1a:7c:63:1b:3f:72:f7:a7:27:4a:3c:02:de:
1b:48:eb:1c:46:50:64:9e:19:15:a0:20:de:78:2c:ea:51:41:
78:52:e5:fd:d6:1d:07:bd:9e:e2:d5:f7:9f:29:41:e3:43:6c:
17:64:35:96:54:d5:23:32:5c:e8:ba:80:b2:04:45:a3:91:91:
7e:4a:7e:b4:79:51:be:4b:22:50:c7:9b:3b:48:da:67:46:6d:
c0:fe:21:81:ca:80:c9:97:d9:49:33:cd:1e:b1:38:7f:dd:fc:
77:fe:5d:bb:ef:d7:9e:b2:69:9f:05:e0:39:49:38:03:d3:fd:
88:d6:25:1c:f2:89:eb:ad:c1:c3:34:37:9c:64:94:5e:56:78:
83:82:55:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:26 2025 by rpki-client