Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: rPofextcSu1huV4yl23PVMdZLN5yPfVlhwk3rczg+14=
Subject key identifier: EF:5F:C0:35:CB:F7:FE:9C:09:F4:E0:10:A6:6C:79:9E:1D:7F:C0:C3
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 0198D58402F71C5A35E622262145252452F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 0516
Signing time: Sat 23 Aug 2025 06:00:55 +0000
Manifest this update: Sat 23 Aug 2025 06:00:55 +0000
Manifest next update: Sun 24 Aug 2025 06:00:55 +0000
Files and hashes: 1: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=)
2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: ka5aPi4gGu52vnbPNG6qoMyyXitCNgH5t5QtwdDtecY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:84:02:f7:1c:5a:35:e6:22:26:21:45:25:24:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Aug 23 06:00:55 2025 GMT
Not After : Aug 24 06:00:55 2025 GMT
Subject: CN=ef5fc035cbf7fe9c09f4e010a66c799e1d7fc0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:a5:b6:55:59:0a:de:0c:61:98:01:09:1b:
32:d8:48:26:00:68:d2:ee:17:1d:8e:75:8f:43:ff:
c5:5c:ee:1d:c1:78:fc:52:3a:14:c4:31:23:89:07:
fd:f0:25:15:87:da:a1:34:19:9b:4c:d0:63:8d:a1:
a0:eb:0c:33:b9:92:0e:bd:51:86:5e:e0:90:8f:b7:
4c:98:00:ff:5d:ec:70:14:76:d0:75:99:23:64:e8:
2b:de:97:d4:3d:e3:20:b8:66:25:19:c6:ed:5c:e0:
0e:85:5e:0e:81:a9:7f:7d:45:1c:e0:40:64:20:43:
f9:f6:8a:2c:68:1e:fc:29:97:0d:f3:24:f1:78:09:
a9:12:a5:5a:79:19:fc:07:dd:0c:03:4a:31:14:a5:
f0:09:92:0b:b4:6f:79:74:b4:b2:42:31:e9:37:75:
d5:eb:37:55:65:d3:08:09:e9:93:5c:e5:85:bd:d4:
21:7d:4c:d8:bf:09:98:e2:a2:23:ae:26:2c:7e:8f:
d7:0a:be:f8:2a:77:a1:e6:16:cc:37:7a:67:a2:d9:
18:c1:c8:7d:f2:62:b4:0b:48:6e:7c:4b:a2:ce:db:
d1:0c:a9:2c:3a:8d:17:03:f3:f9:fb:18:d1:8c:6e:
d0:ee:52:31:49:a9:9c:a7:1a:38:26:39:31:41:5a:
50:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:C0:35:CB:F7:FE:9C:09:F4:E0:10:A6:6C:79:9E:1D:7F:C0:C3
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6e:ed:9b:35:f3:0a:3e:36:f0:f7:3b:6e:eb:b0:08:92:cb:
3f:c5:0d:11:1b:3f:55:ec:6b:64:fa:06:54:24:95:70:d6:7b:
96:4b:65:d9:88:ec:dc:4c:6d:83:ca:c8:fd:e3:29:75:72:bc:
36:81:0e:bf:cb:67:44:d8:90:39:79:16:89:0b:9d:31:ed:3d:
2f:e2:f8:a2:b2:79:91:8e:9c:d3:27:64:01:a0:99:b4:08:bb:
bc:47:26:bf:e4:de:af:b6:7a:d3:2f:b8:f3:fa:78:84:3d:fd:
8b:ca:ba:3f:0b:49:57:83:9c:d4:b0:f6:1e:6b:72:8f:c1:de:
38:2a:74:47:c9:5c:2d:a5:40:5a:63:84:6d:28:49:c3:1e:7b:
34:a8:eb:a9:9d:78:71:a3:44:13:0f:4c:46:87:e5:4a:e0:19:
ef:01:de:d5:aa:96:f3:74:05:b8:2c:51:41:c1:69:38:54:a7:
78:3f:54:a0:d3:44:73:61:91:ba:a0:cf:58:59:80:ba:61:5d:
af:a4:04:bc:2e:a9:88:15:89:81:9e:21:62:14:6a:3f:25:26:
8e:7f:b2:3c:f4:1f:38:40:75:34:e2:4a:5d:8e:43:41:68:05:
74:64:3c:02:48:37:38:48:a7:11:ec:6f:ee:09:c4:81:77:1f:
1e:22:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:33 2025 by rpki-client