Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
File: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft (raw, json)
Hash identifier: fxqtzKxskUSyEYtwUuXdLeGIvTM3fzlUsSlRROUJf4s=
Subject key identifier: 19:78:D7:01:2E:44:12:D8:BA:69:A0:79:83:6A:78:AD:F9:A1:1D:51
Authority key identifier: AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
Certificate issuer: /CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Certificate serial: 0198D5835D5035AFF3F702019F3FD9616FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
Manifest number: 09CD
Signing time: Sat 23 Aug 2025 06:00:12 +0000
Manifest this update: Sat 23 Aug 2025 06:00:12 +0000
Manifest next update: Sun 24 Aug 2025 06:00:12 +0000
Files and hashes: 1: J83vR5DpFwQeOzZ3QWcMbb8635o.roa (hash: iKjeQjYNy9qFyGrhW5tTdYxo05LYCK/XsNtUNF1Tfbg=)
2: q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl (hash: XLOdwWy60n14tNxOX/443aLaoJ1Rw7razk8hxZlBqsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:5d:50:35:af:f3:f7:02:01:9f:3f:d9:61:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf587571c0c698458c385b15d60c7f08c70b6fe
Validity
Not Before: Aug 23 06:00:12 2025 GMT
Not After : Aug 24 06:00:12 2025 GMT
Subject: CN=1978d7012e4412d8ba69a079836a78adf9a11d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5b:25:73:03:65:8c:ef:32:c0:9e:7c:3b:07:
7e:8f:60:cd:58:f2:80:45:dc:1d:85:4c:45:a5:36:
ef:6e:bc:38:7a:2e:fc:ad:b7:b4:9c:ca:a9:f9:0e:
f4:26:a9:db:9f:b5:cc:0f:70:03:98:51:51:91:8f:
73:38:7d:c3:7d:5f:bc:60:5d:1f:2a:ed:25:42:3f:
f9:89:b1:c2:ed:23:9b:e6:0d:93:df:74:3e:ca:f0:
f9:b9:16:78:c1:cf:b4:60:28:be:45:f3:ae:bf:93:
27:84:81:a8:df:f3:ed:0f:f0:86:b7:c5:c4:67:ee:
c7:da:6a:05:66:67:08:65:36:b4:69:49:38:22:75:
36:69:c1:9e:a2:9c:6f:ef:40:51:f5:32:1c:d7:f7:
8c:1b:1f:24:6d:fd:98:1d:46:75:f3:32:c0:45:b5:
f8:7d:02:8c:0c:41:b8:9a:2a:64:75:74:35:b7:09:
b5:e5:76:13:d8:e3:b6:56:c4:97:d4:22:03:71:a6:
d9:71:66:ab:69:36:af:68:c1:df:cc:e1:9c:0f:10:
bc:2e:0e:af:e4:64:aa:8d:d4:92:04:d3:08:a2:5a:
6f:a8:2b:31:38:0a:8d:8f:5e:d9:24:4e:92:55:17:
45:52:b8:9a:73:5d:19:bf:f1:10:21:81:fe:96:85:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:D7:01:2E:44:12:D8:BA:69:A0:79:83:6A:78:AD:F9:A1:1D:51
X509v3 Authority Key Identifier:
keyid:AB:F5:87:57:1C:0C:69:84:58:C3:85:B1:5D:60:C7:F0:8C:70:B6:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9d8b82-47ae-4e12-9a4d-782fe7092010/1/q_WHVxwMaYRYw4WxXWDH8Ixwtv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a2:f1:df:39:5c:48:ca:30:5e:33:ef:02:e6:eb:47:05:23:
29:82:af:cb:e3:0e:57:c5:3e:2d:f7:dc:01:5d:45:4c:a0:1e:
d4:cf:05:95:b5:b4:8e:a9:2e:4a:53:f8:7a:91:8e:01:af:a2:
68:4c:f8:02:27:2a:f8:18:21:65:bd:b9:fb:c1:14:3c:3f:af:
25:cb:23:3b:2a:9c:3d:2b:d2:69:f4:c9:32:e5:5f:13:70:08:
8a:8a:15:fb:9d:f6:b1:01:ac:be:2f:77:e1:d4:97:6b:34:ba:
41:5f:cc:19:32:6d:dc:80:f2:72:a8:55:be:dd:04:33:df:d0:
8e:05:03:c9:2f:06:1a:ec:25:ac:02:f6:2b:e3:36:a8:d4:af:
31:7c:11:55:72:aa:1a:a0:1e:f5:b1:eb:23:65:57:f4:80:b5:
17:c0:27:42:73:68:63:b8:a1:ce:7b:70:56:0e:c1:02:21:fe:
03:84:4d:95:3d:dc:c0:c1:d3:e6:8b:10:47:39:d0:b5:ae:d9:
1d:46:80:69:da:02:ee:9f:ac:06:22:af:13:fb:8d:f5:a6:16:
c7:86:ff:73:bf:43:fb:a2:6f:71:c9:56:30:2f:e6:26:c6:c4:
ee:44:ee:3b:99:19:95:8b:95:f5:c2:d3:31:fb:a4:0d:2f:a5:
47:dc:2f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:41 2025 by rpki-client