Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
File: q2TJrlviZApf1pRYanBMo0wgh78.mft (raw, json)
Hash identifier: +aNTC+t5BQr4X/k+XeAPH0Oe3dRNWcfJ+DIRLH8WfN4=
Subject key identifier: 5E:80:0B:DC:19:DE:FD:1C:03:9C:FF:F7:E6:1A:FC:BC:EF:46:02:F5
Authority key identifier: AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
Certificate issuer: /CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Certificate serial: 0198D660B961C34D5BD64A28A7F2D9B12418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:59 +0000
Manifest this update: Sat 23 Aug 2025 10:01:59 +0000
Manifest next update: Sun 24 Aug 2025 10:01:59 +0000
Files and hashes: 1: JLsWf4ypDqy3C3Vznf4c_jhkWzQ.roa (hash: W+Y7OMJT6eANPHdTBze3RK40F6OnPRrXmssah9nRki0=)
2: q2TJrlviZApf1pRYanBMo0wgh78.crl (hash: bxLvHmXkvIQl+oY6fg0MSvotFwwRfZXNe9pOEa6s7pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b9:61:c3:4d:5b:d6:4a:28:a7:f2:d9:b1:24:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab64c9ae5be2640a5fd694586a704ca34c2087bf
Validity
Not Before: Aug 23 10:01:59 2025 GMT
Not After : Aug 24 10:01:59 2025 GMT
Subject: CN=5e800bdc19defd1c039cfff7e61afcbcef4602f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:6e:7b:62:f2:60:5e:80:68:a7:6c:f1:ca:
da:98:31:f1:75:aa:d4:88:2d:fc:b0:f8:f4:53:09:
3a:45:57:50:f8:50:b9:c1:b5:e6:c8:57:a0:03:f4:
d0:81:bb:9e:ce:0b:27:58:79:9d:83:1b:98:06:69:
86:08:27:61:a4:d7:be:d8:03:7d:38:eb:97:ce:ff:
cf:a7:30:5b:8e:d7:74:88:0a:8d:83:05:a7:9f:f6:
d8:86:0a:4c:ff:a0:1a:e3:9b:cb:50:eb:0b:50:b9:
f4:b7:56:70:c1:43:03:e8:3c:4a:d1:38:63:4c:fc:
63:59:c1:df:bd:f1:68:e8:a7:e5:18:9e:89:7f:0b:
06:71:4a:d1:d8:b5:d8:4b:b3:01:09:c9:a4:7f:76:
b8:12:07:46:ad:87:86:9b:32:c5:6d:f5:0d:88:97:
8b:ae:4f:20:d9:08:53:7a:86:0f:4e:44:1c:78:6c:
f7:f8:0b:55:47:a1:ed:55:85:60:6f:e4:63:19:78:
df:37:0f:81:1e:04:cc:c7:69:bd:94:9f:61:53:4f:
5a:d6:8c:8c:a7:08:d8:cc:55:31:39:f6:1f:48:4c:
73:9e:b1:97:2f:15:19:3b:a4:0f:e1:81:76:ca:01:
10:98:ec:36:58:cd:34:5f:08:76:2d:40:d9:61:1b:
45:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:0B:DC:19:DE:FD:1C:03:9C:FF:F7:E6:1A:FC:BC:EF:46:02:F5
X509v3 Authority Key Identifier:
keyid:AB:64:C9:AE:5B:E2:64:0A:5F:D6:94:58:6A:70:4C:A3:4C:20:87:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2TJrlviZApf1pRYanBMo0wgh78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c55cbc-e43d-40cb-844f-31c5137ec38a/1/q2TJrlviZApf1pRYanBMo0wgh78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4e:e8:b5:e5:f9:43:ad:ec:f2:18:5e:50:83:fb:48:d6:6a:
9d:d7:e0:78:0b:65:2d:f7:c1:2a:b2:7d:8a:25:ef:10:39:69:
80:7b:02:0e:e1:a2:da:f8:1e:8f:14:f2:f4:d3:86:ce:1f:f0:
eb:a0:56:e9:38:ac:a2:2f:54:25:b7:73:78:10:66:4f:ed:c7:
29:aa:7c:1c:d8:a2:78:72:56:6f:b9:bf:e2:d3:8e:18:a4:6f:
0d:2f:1a:fd:56:85:65:c5:3a:d4:39:f8:46:a1:40:38:c6:ab:
a0:7f:9e:ff:6d:72:c5:da:62:59:4e:8c:ec:78:0c:e8:de:5d:
13:9a:c9:ca:f6:cb:0e:45:a7:d1:e1:e3:58:92:a8:d5:17:8b:
19:e0:ec:13:73:01:ce:66:53:00:e9:2f:a5:00:32:b9:95:94:
3c:64:63:74:8c:7c:1d:de:69:d9:44:be:52:d0:b3:4e:4a:c3:
1c:de:c8:98:a5:60:56:05:76:d7:7d:60:63:79:a8:6b:cc:ee:
5d:02:5b:76:d4:36:09:9f:c4:75:6f:d3:02:bc:25:9a:6a:60:
e9:e9:c3:12:48:82:a2:4b:b0:2e:40:ab:68:0d:fd:67:b2:e5:
83:2d:8c:70:9b:73:02:50:74:48:a1:c1:0f:c7:57:51:9f:f0:
de:80:45:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:21 2025 by rpki-client