Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File: datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier: lFUisNe+6WJWfNf3daGmcIVRAQ1n1OtEOMl48qSeq+s=
Subject key identifier: 01:7D:8A:2F:FC:B1:FC:2E:2D:BF:86:32:BD:84:51:F8:DB:51:11:2A
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial: 019A4E190CE1CF6C86608DD5BBD2FA2A184C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number: 03F0
Signing time: Tue 04 Nov 2025 09:00:55 +0000
Manifest this update: Tue 04 Nov 2025 09:00:55 +0000
Manifest next update: Wed 05 Nov 2025 09:00:55 +0000
Files and hashes: 1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=)
2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: k5vlujNY8PcJs49oTsrqGSW4JTlN18nDz2bEHe2I620=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:0c:e1:cf:6c:86:60:8d:d5:bb:d2:fa:2a:18:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Validity
Not Before: Nov 4 09:00:55 2025 GMT
Not After : Nov 5 09:00:55 2025 GMT
Subject: CN=017d8a2ffcb1fc2e2dbf8632bd8451f8db51112a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:76:65:56:61:32:0d:30:11:22:a8:06:14:
2b:ce:7c:9f:5d:6c:96:da:0e:9f:d5:ee:18:78:ff:
e5:cc:41:e5:33:3b:5e:29:2d:cc:61:44:64:ea:a9:
88:35:c9:ba:58:5b:da:c4:06:c0:a2:58:3c:45:f0:
3c:80:27:20:7b:6c:ea:19:26:3f:3a:be:2a:6f:10:
0a:15:56:8a:79:fa:4f:04:7f:fd:74:65:9a:94:dd:
5d:fa:72:46:32:85:19:8d:72:fe:51:dc:fb:7b:5d:
42:cf:86:2a:8b:eb:6a:99:26:d4:12:cb:7e:0b:30:
b7:31:65:9c:c2:d2:aa:70:c5:4f:00:75:a4:ad:6e:
a6:04:67:35:71:f6:a1:18:cd:fc:04:38:53:f9:f5:
f1:b3:94:c8:de:90:57:18:a2:7a:2a:a0:ae:b5:1e:
38:5e:37:51:81:55:7d:a7:47:56:b5:ae:3f:a9:83:
9e:b9:75:83:4d:56:88:41:47:86:71:73:ca:d7:dc:
0e:e6:91:5a:3b:ef:6e:fc:e3:63:61:79:c7:84:41:
7b:2d:0e:e8:7e:07:b4:ab:ab:c1:8e:65:de:b6:54:
76:ec:92:3a:e7:b6:1a:b3:cc:1d:b7:85:7c:47:92:
bf:b0:a6:5e:3a:f3:6d:0f:55:d8:0b:68:c7:e4:b0:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7D:8A:2F:FC:B1:FC:2E:2D:BF:86:32:BD:84:51:F8:DB:51:11:2A
X509v3 Authority Key Identifier:
keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:73:d0:2f:33:2a:78:0a:f3:5f:90:88:7d:b8:5d:b1:3b:a2:
35:95:b5:43:ff:23:19:65:b1:64:64:81:7f:b7:3a:c1:ff:9a:
9b:87:34:13:5b:81:ad:3d:7c:da:30:84:0a:04:d5:47:4d:06:
f0:3c:44:4a:33:98:0a:88:03:10:96:63:62:16:11:48:fd:98:
10:e0:e8:d9:6d:09:d1:64:8e:e0:0c:25:70:e6:49:1b:58:71:
05:bc:d7:2f:ad:28:f2:41:bc:c1:e8:e6:f8:2c:62:e6:8d:83:
e7:b1:5f:ab:75:66:de:41:69:92:d1:81:eb:9f:6c:fd:de:df:
c1:c0:a5:df:96:3d:5b:9d:e6:fe:26:32:5e:bd:8f:ee:c8:2e:
b3:78:4b:56:5a:d0:6c:c0:4a:a9:01:6a:cf:a5:94:e7:f9:24:
4b:b6:4a:6b:4e:57:09:2e:6b:19:e7:0b:cb:46:2a:6c:1f:6a:
b6:bc:7b:d4:7b:2f:d0:33:f3:e5:e3:6e:61:eb:d5:ce:d7:6c:
08:5c:c0:bb:a2:76:22:a7:89:39:25:ad:63:2b:18:72:6a:e9:
c7:c9:93:45:7d:e9:88:4b:21:b2:a8:0e:dd:1b:ec:db:b2:16:
7e:24:55:00:40:aa:2c:df:67:38:54:c9:08:07:29:a8:a1:42:
71:1f:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:38 2025 by rpki-client