Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: pXZQ19K3hTv6cxM5YdCDFdXhlNhg1Ds7jDZSG+j57Cw=
Subject key identifier: DA:01:03:66:20:F4:39:20:04:0D:5A:D9:CD:EC:71:73:B3:D0:AC:60
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 019A71EE61C21266BA71A63A69497E759C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: 1nJZi9GJ90J5FpzQE_nW1w9Y34A.roa (hash: GVbUZdYnFxfV/6HU/T0jmvYJT+FivYMJd3zG7OwlXB4=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: KXOmXhLiV6d1kkt5rIWlYROgyWCTJkyxgkfB0LiQR3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:61:c2:12:66:ba:71:a6:3a:69:49:7e:75:9c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=da01036620f43920040d5ad9cdec7173b3d0ac60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5f:e1:0c:5d:0a:f3:ea:03:f3:7d:3c:a1:c3:
e2:aa:5b:99:4a:91:75:67:d5:56:2e:a1:49:f0:ec:
ec:aa:2d:9b:9d:95:7f:9a:6e:0e:50:d9:84:8d:a5:
b5:df:29:ef:4e:9e:03:1b:4f:aa:a5:a5:e2:3a:65:
63:cf:62:70:16:86:12:5f:45:6f:81:fa:60:b1:f0:
cb:67:28:a1:6d:34:66:3b:fb:73:c1:b2:34:c5:61:
a8:8c:4a:09:3c:bb:ef:f8:05:79:00:d9:2a:aa:5d:
17:69:5b:02:a6:73:51:d5:c4:2e:1f:0b:ff:4b:62:
4e:2e:1a:ab:ce:a2:cb:85:39:b8:8d:dd:57:93:65:
50:d5:c3:ce:f7:bd:e9:2b:58:0a:75:88:f1:ef:e3:
6c:ae:02:d3:62:1b:1e:cd:5b:14:f8:eb:d5:d8:1f:
00:22:e0:0a:86:ae:e0:6f:5a:ef:cd:a4:13:6a:97:
eb:fa:b2:5e:fb:72:a0:09:6d:7a:dc:32:be:f2:1e:
6e:52:93:9a:b5:1d:32:9f:79:6d:86:bb:ca:01:c5:
78:af:ab:84:2d:aa:0a:2f:44:50:7a:32:0e:87:89:
15:2c:07:e4:03:04:4a:88:64:4d:b8:72:a6:f3:ae:
c3:c9:fb:3a:91:cb:05:53:8b:9c:96:3b:50:9e:4c:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:01:03:66:20:F4:39:20:04:0D:5A:D9:CD:EC:71:73:B3:D0:AC:60
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:51:67:61:8e:13:40:d5:dc:55:0e:4f:72:b2:38:a4:30:d0:
d6:53:a6:a1:c7:dd:68:ea:d3:8f:64:4f:73:69:d4:3e:5d:4b:
ca:a6:6c:b4:a6:70:30:88:ca:42:78:10:c7:80:cb:e7:e5:22:
73:10:ee:ef:03:e4:87:eb:9e:3e:02:ab:04:1a:86:64:ab:74:
5b:6a:eb:0f:7f:40:2e:da:9e:34:63:3c:80:d2:ef:0a:d3:49:
df:c6:f5:9d:00:6a:c1:2b:88:35:03:2d:c3:20:c5:96:e5:04:
98:7d:bf:0a:c0:cd:51:29:39:4e:5f:92:53:7b:2b:b1:e1:d4:
c4:d1:cb:dc:20:c4:f9:ea:da:24:ae:87:a3:a0:06:22:14:36:
be:ed:ed:d5:94:8b:9e:1a:11:13:fd:45:cb:a0:d1:c8:2b:57:
c2:c3:48:d9:0d:5c:ee:6a:9e:06:94:b5:51:dc:c5:24:15:f1:
6a:9e:1c:9c:9b:5a:21:a4:e4:fa:87:a9:18:d2:e6:89:22:b4:
bd:3f:08:eb:b9:cf:bc:91:72:e7:56:6b:12:1b:25:cc:2d:64:
e8:5b:80:2f:c0:98:64:eb:54:ec:fd:78:4e:df:0c:df:df:bf:
67:27:1b:54:d0:cd:fc:b5:13:e9:4f:12:69:fd:68:71:d1:74:
ec:c5:3b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:33 2025 by rpki-client