Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: fPk3oDSRg6DygGFA3/IKh3+LWrVSVq3yNN6YbrqmHfs=
Subject key identifier: AE:F2:BC:68:4C:67:46:1B:9C:5B:71:AB:75:F3:31:31:58:96:D2:0C
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 0198D65F6C5B52FDF649E4D527B3F667429A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: TEBaODlmDCqhNdveSNP6xcEtL-0.roa (hash: Ni+drEe1sF+jcV53LsQ0wrDEiq7Vue9pJpbJAT7gLcE=)
3: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: Sml8TCUr/p2RSPLPGk8fbsN3OiD5THx/32UdTGc62t4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6c:5b:52:fd:f6:49:e4:d5:27:b3:f6:67:42:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=aef2bc684c67461b9c5b71ab75f331315896d20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:42:53:ce:f6:23:38:ba:4d:ff:fb:95:9d:
3f:6f:e9:90:98:2a:b9:93:54:4a:db:3b:57:e5:3e:
1e:fd:1d:e0:77:15:4b:5e:d1:68:20:ce:c0:14:23:
23:7e:d3:ed:7f:89:8f:b1:e7:d6:c1:b2:5e:18:d9:
b5:62:70:06:24:7b:10:a0:8a:b7:1f:96:2a:43:14:
80:d9:4b:7a:ef:31:66:4b:9c:59:9a:2e:f7:e5:4e:
e4:fd:92:24:04:6d:af:d2:93:3d:2b:78:24:7f:bd:
65:8a:21:a6:f3:98:fa:94:f2:ee:e3:fc:31:28:18:
86:e6:55:11:99:b9:85:c5:45:27:aa:a4:c6:03:c7:
ef:28:dc:e4:47:ff:e5:cb:f0:04:34:66:75:d0:27:
d4:6a:5f:ab:e6:be:81:e6:e5:a9:f0:d0:69:29:c1:
82:70:b2:d5:df:35:1e:d6:ab:34:22:e0:67:af:c4:
16:d7:85:65:2d:0e:49:e7:b1:4c:cf:69:27:d9:ca:
c6:f5:38:78:9a:b2:8f:26:80:89:81:cd:8c:a8:93:
04:f2:3f:42:ba:5b:b3:cd:60:4b:76:d5:d3:34:24:
63:77:7d:6d:52:bd:90:b6:17:23:79:1d:ee:cf:92:
a6:4c:07:6a:38:a4:65:20:76:e5:8b:53:f5:e9:7a:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F2:BC:68:4C:67:46:1B:9C:5B:71:AB:75:F3:31:31:58:96:D2:0C
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:15:5c:01:c1:d9:d8:c6:ec:5a:14:4e:c4:f3:7b:17:fa:69:
5f:a0:53:0d:f4:8a:d8:64:fa:13:5e:3a:54:82:43:e3:ab:1c:
ea:65:c8:39:99:0b:df:e2:44:a8:a4:f2:f6:a8:d3:ac:19:da:
8b:e3:e0:e7:bc:71:fb:2b:df:7b:fe:c9:66:a0:27:7d:43:0f:
68:be:a0:d1:92:cf:cd:58:76:65:cc:ba:b2:07:f9:8d:d7:ac:
48:a1:f0:d4:c3:2b:36:cf:b4:86:69:0a:34:25:78:e7:b1:b6:
56:db:0a:f8:8d:06:af:ad:62:db:c1:6d:be:00:ca:f7:43:01:
2c:7c:19:78:0a:e9:c4:93:5b:10:22:98:5b:95:a1:00:8f:4a:
d3:78:61:ca:c8:ef:1e:d0:ea:a3:53:d1:f9:f8:c4:b4:3a:60:
d4:d6:f4:f9:71:2b:01:09:a0:eb:5f:4f:d7:c6:84:7e:38:eb:
50:91:20:04:76:21:aa:c4:2c:30:25:0d:b3:ca:25:a9:aa:84:
9a:4a:26:99:dc:39:ce:bf:6c:5b:6e:c1:8f:75:53:96:6b:23:
8b:8a:67:f6:e6:8c:71:08:7f:93:9b:67:bf:5b:f4:7a:8b:01:
bc:47:04:3b:78:1f:9b:5f:26:91:ef:86:b2:47:22:36:59:c8:
cf:8c:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:25:23 2025 by rpki-client