Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: 9obhb0Qyu76VUptC2SE5UOA6KY4GQ2SNfVwddIo0cZM=
Subject key identifier: DB:BA:B9:E2:F5:B9:7B:E0:7D:F9:85:91:44:C7:89:A5:CF:1E:47:B6
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 019A0B5C980E61D048A837A38F9B93EDFC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0C52
Signing time: Wed 22 Oct 2025 10:00:08 +0000
Manifest this update: Wed 22 Oct 2025 10:00:08 +0000
Manifest next update: Thu 23 Oct 2025 10:00:08 +0000
Files and hashes: 1: 7d46OTwbNs5KuUyqdxKYkS8NBJI.roa (hash: 4Rn+6tq432h7x4Ge16LfuM8y8RGTaZzgBXirAxsJ5MM=)
2: W2NhW2V8Iexgd4nWoDLptnalys8.roa (hash: qN2oaoKEpYxm1heQ0tQCx/vfqwegOgZk4tzwgcNVmWg=)
3: XB2P8pqeFQE5V_wiPLEy8Uw8TL4.roa (hash: eEOspJ3pbx3Bzx3yuT7YUHqNvJo2s+nrBm58kVOY9b8=)
4: e70_76D8VUKzyOllsP-C6ko3aJ4.roa (hash: YSc6a0NAXpNIVXvLTAs9uQ9JjUM2SpjCK+qzw0/wRpY=)
5: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: 1WLS11WVLvu1lc58bsrjM8s5hXg8/AVQLtDNE4igEJQ=)
6: r9AECsFfSl2im_ZX-xTBrlxOfD8.roa (hash: ULicRE/3nxP/zcRYRZJBN8ZiMjtTPhQz8NjZ7TncWXU=)
7: tsLbqC6GleedJxC9I3GCKnE32tM.roa (hash: q8OgS2zQAxO3r6wIDM4lb25MYLPFfkq3kdggEkr0ENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5c:98:0e:61:d0:48:a8:37:a3:8f:9b:93:ed:fc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Oct 22 10:00:08 2025 GMT
Not After : Oct 23 10:00:08 2025 GMT
Subject: CN=dbbab9e2f5b97be07df9859144c789a5cf1e47b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:95:36:e6:77:10:38:11:c5:42:e6:16:23:
2b:d9:7b:1c:d1:2a:48:09:66:fe:f8:c2:07:e8:e1:
eb:b9:ca:ad:cd:d7:e4:62:7a:10:b2:11:3a:91:4a:
90:cb:09:2b:31:65:79:5e:19:48:7e:c9:38:b4:44:
3d:12:0f:04:10:6e:75:01:b9:ee:66:4d:b6:37:b1:
c4:45:ae:09:81:78:99:15:d3:2c:98:eb:0e:03:8c:
90:08:fd:81:4b:ea:a0:e8:bf:86:75:9b:f4:b3:bd:
7e:f9:c5:69:53:80:1a:5a:4e:a4:ba:0b:86:13:a2:
98:ef:ed:e3:dc:9b:ce:3d:7f:5b:cb:c8:94:9a:54:
82:d0:4a:46:c3:96:9e:1b:02:f1:c0:84:96:89:eb:
f6:d2:6c:9b:40:20:ed:6e:c9:98:97:23:3e:d3:18:
90:5a:0e:8b:7b:19:be:05:59:51:c1:8b:40:2f:e4:
6b:1e:0b:17:4c:2a:93:6c:e2:e0:02:fe:c5:0d:7d:
16:c3:1e:2b:c1:46:26:3e:de:de:76:dd:42:5b:cf:
52:f4:5f:bf:b3:c2:44:86:58:12:c8:2c:0a:dc:63:
dc:b3:b0:4a:1f:41:2b:5e:d4:24:54:d2:6b:78:44:
90:04:bc:76:0b:89:22:86:4c:6b:31:87:55:e5:58:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:B9:E2:F5:B9:7B:E0:7D:F9:85:91:44:C7:89:A5:CF:1E:47:B6
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:75:db:79:27:c0:3a:b8:a3:66:62:22:d8:92:81:75:7c:ec:
48:54:b2:5b:79:20:52:0e:3c:39:aa:1f:5b:3c:04:83:24:6e:
aa:11:00:be:12:71:3e:85:de:8f:77:e6:a0:2c:c7:b2:fd:86:
d5:bf:94:17:5f:4f:73:76:4f:55:42:92:c2:df:ba:69:37:ba:
27:5e:c8:a1:4e:6e:a2:20:cb:32:58:ac:a4:3c:5f:7d:85:c5:
ff:8d:ad:67:44:a7:b3:7a:b3:b5:8d:1b:c4:72:d3:bf:cf:3e:
dd:30:3d:a5:4d:cc:17:6e:50:28:93:36:2b:03:c2:e2:1e:47:
60:a1:2b:3a:ab:d8:e9:43:60:97:73:ba:b9:8b:d5:8a:4b:23:
e9:0b:4a:2a:98:98:19:e6:8d:b8:09:dc:a0:dd:f9:8d:63:7f:
b0:a4:60:0c:1f:16:38:28:dc:35:24:9d:c8:cf:69:f2:5c:b9:
bb:ed:5b:f6:09:a9:a2:27:e8:18:32:d6:4d:34:79:cc:f6:37:
ca:37:7a:55:99:9e:88:23:69:a7:95:3f:b7:2e:87:a6:d9:b6:
0d:85:b2:7d:43:f0:de:83:f9:51:e4:7d:7e:f3:2e:0b:75:d6:
c9:2c:0d:35:56:82:2a:98:a2:41:d1:a6:3b:f7:48:bc:bb:0e:
02:f5:3b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:31:45 2025 by rpki-client