Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: N2TZ4ssZWzDJt9cBNTcWqqS53GmDdE2nRmewja8TewM=
Subject key identifier: C5:85:09:67:F9:C4:5E:33:98:67:32:68:52:FC:91:74:A1:4C:BA:52
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 019A22C0441BE3C6297B001199302AD8792F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 16D1
Signing time: Sun 26 Oct 2025 23:00:16 +0000
Manifest this update: Sun 26 Oct 2025 23:00:16 +0000
Manifest next update: Mon 27 Oct 2025 23:00:16 +0000
Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: vHlL+DMj9iC5oF9Wh3AekJ9CVcOBW8GnJWkhWJSLgwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:44:1b:e3:c6:29:7b:00:11:99:30:2a:d8:79:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Oct 26 23:00:16 2025 GMT
Not After : Oct 27 23:00:16 2025 GMT
Subject: CN=c5850967f9c45e339867326852fc9174a14cba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:23:33:5d:16:3f:c7:76:66:49:03:b9:06:71:
2f:5a:d0:f9:52:27:57:8e:11:8d:81:35:fc:ea:df:
06:58:f4:3b:03:f7:3d:e1:d8:8d:26:37:56:c0:5a:
aa:cc:9a:2a:b3:e2:36:31:06:ee:ce:85:54:03:88:
a9:90:2c:0e:0b:8f:ae:cc:ee:c6:c1:c1:54:ec:a8:
a5:f9:d0:aa:e9:37:fb:eb:27:ee:7c:70:2f:e3:8b:
8f:86:66:72:ef:97:69:59:a5:db:66:ee:f0:b1:f2:
84:7e:df:3c:21:a5:5c:1f:2b:ed:e9:78:9a:98:31:
e2:c3:b0:cf:dc:a8:b2:76:d9:59:0c:77:c0:b5:10:
2e:19:ad:88:cf:fe:ef:71:f6:80:28:eb:97:89:5b:
0f:26:44:26:48:cc:3e:ff:15:6b:13:ef:82:a6:5d:
d3:85:d5:73:1a:d9:b8:b5:ba:2a:9d:81:82:2b:c9:
6c:73:03:9f:ed:84:96:c7:5b:7c:79:20:e0:1d:b2:
56:ea:98:62:e9:81:5f:24:58:e2:9b:9b:ab:9e:f3:
5a:b7:ce:2d:00:3d:37:ea:aa:61:96:05:a7:32:d9:
07:18:10:03:15:fd:44:d4:72:df:1b:6f:86:5a:4b:
f2:14:8d:3c:70:be:ac:85:03:fa:a3:c0:45:db:5a:
94:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:85:09:67:F9:C4:5E:33:98:67:32:68:52:FC:91:74:A1:4C:BA:52
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:88:65:25:3f:97:0f:f9:45:21:c4:3a:0e:66:c0:31:63:b2:
f9:e4:c0:f3:3a:4a:e4:19:91:23:d9:31:7e:5f:ac:e8:fe:6e:
5e:ac:0f:52:1f:64:6d:a7:4d:f2:71:ef:00:b5:33:0d:16:6d:
35:48:ed:6b:f7:6c:93:12:61:51:fd:1d:d7:0d:28:56:24:ae:
94:83:22:2a:bf:c7:98:c2:a8:d4:bd:bc:a0:59:c7:67:5a:31:
84:42:a6:88:55:39:47:a5:71:e3:6c:6f:e7:5b:c1:e8:07:4e:
79:be:0a:95:29:01:c4:4c:8c:6b:e1:74:c3:e2:5b:e6:83:05:
08:09:4e:5c:ec:29:e8:92:32:b8:db:a3:ca:62:48:6b:cf:16:
8f:32:6e:17:a9:31:76:77:00:1d:69:35:fd:21:58:f2:b6:81:
6f:20:67:8a:d4:5b:1c:d7:ce:a6:6a:29:9f:fa:a5:9f:57:22:
64:06:75:d6:33:d5:de:76:91:0f:4c:b5:5a:e8:14:4d:b9:43:
bd:b7:8d:ca:18:f6:ae:3b:ac:0e:4e:29:b7:3d:47:74:2a:57:
e5:40:5c:86:ea:9d:70:3c:38:f1:9d:de:fe:84:86:88:47:51:
76:48:e5:c4:92:f4:45:d9:1a:bd:c5:d8:80:30:6f:f0:13:ec:
0c:d3:d7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:19 2025 by rpki-client