Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: pPbwxL8e3Bh71/giUbFxwtoTVFktu0cZJNbYxn/Elxg=
Subject key identifier: 02:67:6A:ED:92:FD:49:FB:78:BA:B2:E9:EA:79:C2:7D:CC:7F:84:66
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 0198D54E5C9CE7C38B8A82ED96462DE84259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=)
2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=)
3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=)
4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: f5Av8qOfjIle4+R9956xYO5pi2jPK/044nEuBVs+4bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5c:9c:e7:c3:8b:8a:82:ed:96:46:2d:e8:42:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=02676aed92fd49fb78bab2e9ea79c27dcc7f8466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:81:02:d4:2e:86:f8:af:97:7f:53:42:b7:
a6:ec:ca:1a:38:b5:3c:8d:69:48:a1:10:c8:a7:e6:
60:72:a1:87:79:0c:9e:8c:de:2c:89:ad:53:1c:b5:
22:a5:04:97:00:05:d3:38:81:31:22:ea:0a:c5:d8:
1c:c7:5a:93:50:19:58:56:81:07:aa:86:39:07:0f:
f4:33:78:80:77:18:ca:ed:43:f8:f3:0b:b5:c1:88:
1b:db:8c:3b:90:1a:db:04:8f:b9:ba:89:3c:3a:ba:
e1:e3:d8:ec:ee:da:08:c8:b4:5c:06:91:52:4c:68:
24:bf:20:3d:69:2b:2d:75:06:be:5f:f6:02:1f:bb:
ad:54:b6:25:88:34:48:5b:1f:6d:ed:99:d4:63:6c:
d5:4b:51:f5:6b:db:4d:aa:ae:34:b2:d0:88:bf:4b:
1b:c1:85:6e:7c:ef:c4:fd:e2:53:8f:21:8f:a7:3a:
10:74:6c:d4:c8:56:d3:13:8b:e2:2d:c9:24:ce:9f:
f3:94:ec:5e:61:8e:02:44:05:73:59:4b:7a:e3:89:
94:d7:28:57:32:0b:73:59:f9:68:49:98:99:a9:da:
99:bc:f4:44:a3:a2:f3:cf:8a:8e:7e:06:98:c1:77:
00:9a:d9:f9:9a:4b:20:3f:bd:0a:cf:10:20:ec:67:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:67:6A:ED:92:FD:49:FB:78:BA:B2:E9:EA:79:C2:7D:CC:7F:84:66
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:54:97:d5:82:fd:05:aa:f5:2a:eb:39:1b:4d:c2:ac:d6:8c:
aa:20:db:b4:ff:84:f5:67:fb:4c:ef:49:3f:ef:e1:73:44:af:
ac:d6:2d:05:23:56:0f:41:14:a7:c3:b4:f5:2f:72:57:c7:ed:
21:5f:36:8f:19:58:06:76:f1:34:00:32:37:9f:94:a2:a7:44:
76:d2:72:b7:0e:61:f2:68:8c:03:ce:72:2b:6c:ee:22:7e:33:
71:b2:d5:f7:5e:81:19:56:90:ae:01:e7:b6:15:66:4c:d2:f3:
50:ed:d7:58:4f:92:61:85:6c:88:82:b5:04:0d:a0:68:63:b3:
64:12:39:ef:db:c0:92:71:70:27:80:8c:92:9a:3b:69:f6:93:
e4:9c:3b:4a:59:be:6a:f6:8d:4a:9b:59:18:9e:34:d7:6a:06:
9a:ca:c6:4d:b1:ec:89:54:5d:1e:7f:65:ad:d0:96:24:af:23:
3d:1d:a2:8a:63:6f:b6:52:7f:b5:b4:b1:c3:d9:f7:51:2b:48:
e7:fc:0c:92:13:49:97:46:11:11:9e:62:ff:ce:a6:2e:13:df:
34:2f:ee:b4:67:9b:dd:0b:dd:bb:25:fe:25:cd:ba:d3:93:d0:
6b:4a:8a:d0:f9:54:47:37:3d:1d:d5:41:f5:0c:46:41:a6:29:
59:19:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:11 2025 by rpki-client