Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: JZGr5W4GO/sDkGPBNst0F6by0vleXy+P8XZyoiYHLAM=
Subject key identifier: AE:8F:F9:E6:7A:71:FA:2B:CD:11:6A:3F:02:9D:75:0F:FD:BE:29:9D
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 0199E607486CCCB9B6AF4BE7976B9C33AA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 16D8
Signing time: Wed 15 Oct 2025 04:01:00 +0000
Manifest this update: Wed 15 Oct 2025 04:01:00 +0000
Manifest next update: Thu 16 Oct 2025 04:01:00 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: cSD8XuQwyghWzp5Y5fiBZPWsQ65GqL13wqekbe1PRRM=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Oct 2025 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:07:48:6c:cc:b9:b6:af:4b:e7:97:6b:9c:33:aa:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Oct 15 04:01:00 2025 GMT
Not After : Oct 16 04:01:00 2025 GMT
Subject: CN=ae8ff9e67a71fa2bcd116a3f029d750ffdbe299d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:a8:58:d0:b3:81:83:3a:4c:81:1d:72:71:
b8:fb:3f:2b:7c:d8:30:79:8f:a3:03:90:aa:ee:ce:
dd:3c:10:1c:3c:07:c5:f4:04:8d:29:66:90:27:7e:
ba:0b:30:67:f0:c1:84:fc:10:4d:ec:a5:50:60:b7:
d8:76:be:98:bd:23:52:1a:01:10:47:07:11:43:16:
78:03:5c:b4:36:7f:30:2a:eb:70:75:5b:cc:00:59:
d3:da:ec:94:0c:96:68:a8:3c:f3:98:4c:85:04:e6:
15:8d:d0:fd:18:34:be:5c:e9:e2:64:c0:ac:11:8e:
6d:7a:77:ca:7d:5d:4c:c8:b2:e0:d9:c2:56:1f:b5:
b3:17:67:3f:b7:2b:5b:03:38:c9:c0:13:46:2e:8a:
00:97:de:ba:02:78:a5:e7:fa:4b:a5:21:d3:17:09:
ab:c2:38:e0:d8:57:aa:c6:43:5a:bd:b4:e4:92:d0:
c4:af:a0:5f:6e:35:ee:78:eb:8e:ec:8b:97:d5:bd:
f1:d9:6e:1e:d5:28:5d:58:78:8d:42:c1:97:e0:c4:
f3:82:bd:84:af:b5:5d:2c:ef:e6:e2:bf:67:b9:53:
da:f7:ee:13:b8:ea:ff:51:1c:31:1f:c0:20:ef:70:
48:f1:01:86:ec:cc:23:f1:df:65:c7:82:69:e9:e7:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:F9:E6:7A:71:FA:2B:CD:11:6A:3F:02:9D:75:0F:FD:BE:29:9D
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:07:9f:8d:e1:15:0a:3d:99:1d:61:18:8a:06:65:ea:a3:0e:
f5:bd:bc:50:52:a9:2d:39:1d:dc:70:ba:ff:f0:eb:e5:e7:88:
4e:08:57:5b:66:45:44:c2:ee:f2:4e:83:3e:0a:82:30:7b:f6:
9e:96:a9:c9:cd:16:84:8f:62:91:c8:c9:fd:42:43:52:87:47:
99:05:e4:30:8d:e1:6e:db:82:94:c9:0a:10:bd:ee:04:90:fc:
7f:d0:d5:f3:30:13:92:c0:09:05:45:3c:02:bb:c5:c0:02:84:
a5:e4:9a:05:9e:ea:cd:9a:ea:fa:61:76:3d:1c:34:3e:eb:0f:
a6:23:d6:1e:09:c8:5e:93:f0:c5:6b:8b:57:c4:ae:8f:d6:79:
a4:5b:c0:a1:8a:eb:46:1a:7d:34:1f:d8:5e:ec:83:6c:3d:d0:
83:11:2e:a5:87:64:47:3f:63:f8:49:53:46:e7:a7:70:5b:3d:
c7:4c:bb:39:a7:15:b5:61:0f:97:2d:9c:f1:52:b0:29:f0:1f:
43:1d:ee:0f:50:23:3d:a1:65:36:ff:64:8d:d3:ec:f5:bf:f4:
d6:a6:f9:35:40:a5:57:44:7c:ce:aa:e8:f1:23:8d:7f:54:1c:
2d:95:eb:c7:54:69:91:c5:73:55:96:fb:60:2c:e7:ae:11:26:
d8:66:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 05:00:07 2025 by rpki-client