Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier: p/H4VNvCd5ntRJBWSsgE8jkRbD/wNNXGiQipbVybLJw=
Subject key identifier: 30:1C:C1:81:38:37:E5:3F:6E:9D:E9:ED:46:2B:40:AC:D5:21:72:BB
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 019A28C2359922E51051822C40B1745E7BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number: 056E
Signing time: Tue 28 Oct 2025 03:00:07 +0000
Manifest this update: Tue 28 Oct 2025 03:00:07 +0000
Manifest next update: Wed 29 Oct 2025 03:00:07 +0000
Files and hashes: 1: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
2: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
3: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: tpBH9tFpJk3/zYCQRXffT03TMM0RD4My3fBahlijbEY=)
4: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:35:99:22:e5:10:51:82:2c:40:b1:74:5e:7b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Oct 28 03:00:07 2025 GMT
Not After : Oct 29 03:00:07 2025 GMT
Subject: CN=301cc1813837e53f6e9de9ed462b40acd52172bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:73:2c:c5:79:5b:30:97:61:a6:b0:36:26:
d7:fd:65:fb:30:92:82:9d:f6:a2:03:d8:b9:46:47:
db:0a:af:6f:a0:6f:4e:45:6c:c4:9f:98:2d:cf:a5:
05:4d:aa:40:71:b1:8a:43:44:58:25:2f:06:28:6f:
4c:44:b4:e5:e1:5b:53:e3:82:7e:99:2e:86:e9:16:
86:d0:ba:23:cf:79:1b:5e:ec:44:0a:94:6b:b9:cb:
9a:18:f7:76:6c:01:94:2c:90:f8:4a:4f:f7:f4:7d:
10:99:d5:82:1b:10:df:4a:bb:34:69:8c:b8:20:69:
3d:1e:0f:8a:92:ed:21:e3:9e:80:a3:3f:9d:36:95:
48:df:87:cc:8d:64:e4:07:94:e2:60:4c:00:01:fc:
0a:d8:3c:f1:ea:0e:2b:56:4a:79:c8:a5:5d:e3:bc:
d6:49:b3:43:39:b8:95:5e:3d:c2:81:46:79:6e:94:
93:03:bf:9b:f5:27:ed:d4:88:e1:c6:87:f7:bf:9d:
7c:11:39:c1:b6:a6:c0:c0:d5:26:fc:12:54:de:b6:
2f:93:c4:72:80:d2:aa:e6:aa:cc:cf:67:a2:60:11:
56:4d:2f:81:a3:be:52:0a:df:06:c1:83:10:3f:b2:
6b:69:5b:0e:21:5c:c3:4e:01:9e:38:b4:c1:b2:3b:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:C1:81:38:37:E5:3F:6E:9D:E9:ED:46:2B:40:AC:D5:21:72:BB
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6a:db:a0:10:e3:ac:d4:a9:9f:39:60:c4:ee:61:8b:05:e5:
37:eb:f7:37:1a:9a:9c:a6:c2:f5:70:7a:96:69:23:94:5c:54:
10:4b:dc:ce:fa:64:12:53:d3:0d:83:35:e8:e0:3b:b0:ae:a5:
47:a5:97:76:52:f9:09:30:5b:62:8f:20:f5:ef:81:fd:93:a5:
48:3d:64:19:b9:75:77:9f:f6:18:21:87:96:3b:90:64:d1:0b:
73:79:73:58:b3:73:6c:47:98:eb:2b:a0:e9:04:ff:fd:ac:3e:
34:28:c2:29:d1:24:0b:13:e7:25:a4:61:13:41:f1:82:e7:4e:
38:6f:d8:eb:12:65:f5:6d:5d:52:0d:79:d4:fe:ef:8c:d1:5e:
a2:c2:75:e9:38:69:05:ea:54:a6:d8:0e:68:bf:9c:7f:ff:5a:
7b:87:b6:0d:05:76:af:9c:5f:ed:66:67:74:7c:c7:f3:9a:de:
26:5f:a7:30:c3:32:4c:bf:db:3d:95:64:43:13:8c:4a:bb:58:
e9:d1:fb:0b:ef:c5:20:4b:b3:32:9b:bd:29:e9:b8:83:f9:a3:
7d:40:07:e4:45:f1:01:78:cb:74:20:5e:6c:2d:55:48:2b:61:
0b:11:2b:57:fd:ad:81:5a:23:b3:93:50:05:ad:46:20:4b:d0:
9d:59:d1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:59:06 2025 by rpki-client