Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
File: q9lqrojvmbTVDknsrpyuSPN4gfc.mft (raw, json)
Hash identifier: 3TsyWj3563115ELSie8NIDJEgb1vBM3W5pbFVyub/nM=
Subject key identifier: 6B:CB:46:5F:7E:2A:B9:79:79:08:2A:12:D3:9D:52:DA:AC:8A:D8:B7
Authority key identifier: AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
Certificate issuer: /CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Certificate serial: 0198D7E145314AE05F61FC93D5A3208E7239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
Manifest number: 0299
Signing time: Sat 23 Aug 2025 17:02:01 +0000
Manifest this update: Sat 23 Aug 2025 17:02:01 +0000
Manifest next update: Sun 24 Aug 2025 17:02:01 +0000
Files and hashes: 1: jOBsmTZZQR2oFpHPynuOSfcKlhQ.roa (hash: HS2UqrHXUPTUg04Ke/uHXIU8tldEPiGgxWt1zu5k5H0=)
2: q9lqrojvmbTVDknsrpyuSPN4gfc.crl (hash: EtQXUFDiG4+wmfWtq6q4R1UFZLdj07BVW/vgCpDdnCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:45:31:4a:e0:5f:61:fc:93:d5:a3:20:8e:72:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd96aae88ef99b4d50e49ecae9cae48f37881f7
Validity
Not Before: Aug 23 17:02:01 2025 GMT
Not After : Aug 24 17:02:01 2025 GMT
Subject: CN=6bcb465f7e2ab97979082a12d39d52daac8ad8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:c6:e9:08:c4:ad:14:97:a0:6c:3c:25:f3:
7d:ab:01:cd:40:c0:2c:12:ca:d2:be:d9:40:97:7a:
47:b2:67:60:0e:e5:52:b8:2d:a7:7f:de:0d:73:6f:
71:3f:98:3f:40:d5:c9:d6:ed:a0:2f:d5:60:c2:57:
be:a5:2e:8c:85:d3:e5:2e:37:60:db:80:76:71:97:
75:49:d1:eb:e4:2d:58:e4:cb:be:5e:fb:6e:f2:53:
9c:ff:21:40:c1:63:5b:9a:dc:8f:75:b3:25:24:23:
a3:30:b3:86:04:a8:5a:ca:3d:01:a7:90:e4:70:ea:
88:26:1e:af:c8:d0:aa:4b:11:69:cb:12:57:5b:c4:
3d:98:89:4c:08:c2:e6:5a:ac:0a:61:5b:41:7d:05:
fe:8a:a8:69:7d:f1:fe:00:57:19:55:f0:df:91:1b:
12:d8:09:b6:e0:f5:83:b2:7e:00:93:af:4e:e1:5a:
f6:8c:f8:56:f5:db:69:15:9b:95:06:c0:4c:90:1d:
06:71:9f:81:5d:ec:9b:e4:eb:83:a6:73:35:6e:33:
36:1d:75:c1:c8:dd:ec:7d:1c:87:84:42:72:91:49:
58:58:13:fb:78:80:38:cc:b3:32:18:f7:c5:3f:74:
6f:52:2f:e6:bc:28:e5:7d:19:65:5b:f4:ab:a2:e1:
20:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CB:46:5F:7E:2A:B9:79:79:08:2A:12:D3:9D:52:DA:AC:8A:D8:B7
X509v3 Authority Key Identifier:
keyid:AB:D9:6A:AE:88:EF:99:B4:D5:0E:49:EC:AE:9C:AE:48:F3:78:81:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9lqrojvmbTVDknsrpyuSPN4gfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3f9619-4bd0-4aba-90e2-7c3f8c40c510/1/q9lqrojvmbTVDknsrpyuSPN4gfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:36:71:7c:08:e6:b7:d1:e4:66:bd:16:f6:c6:f7:4b:cb:d7:
6a:a1:db:3e:c2:9d:27:cf:f0:a6:93:83:50:1b:58:c2:83:ac:
5a:2b:c0:e3:61:3b:33:0a:3a:43:60:ab:9f:82:37:48:cd:56:
56:31:52:a0:c1:2b:64:94:32:e2:5b:9f:28:7b:90:20:0d:72:
c1:bd:34:34:4d:23:c2:65:80:0b:4c:84:2d:c5:17:42:b1:3c:
3f:55:63:f5:ba:d6:75:5f:59:7f:5a:ec:f2:6c:9c:e5:82:73:
ee:a9:78:53:94:d0:8b:3c:17:be:7c:e2:a1:4a:70:73:8e:61:
a3:4b:65:0b:56:6b:6b:74:86:1d:3b:0f:df:a9:d5:99:e9:36:
bb:89:8a:3d:21:61:a6:64:17:51:e8:90:f8:7d:bf:ab:e3:f0:
43:53:21:9c:2a:6b:06:5d:66:22:ab:e2:98:9b:66:e9:7f:5e:
44:60:12:4c:47:cb:92:1f:7c:f1:11:63:1d:6e:8a:b8:13:ba:
ed:2b:41:a6:20:0f:fd:5d:3a:4b:3c:2a:98:8d:d0:47:d5:8e:
ae:96:a9:40:00:a1:0d:74:d1:f3:25:ce:be:93:2d:53:7b:3f:
3d:7c:b2:50:1e:64:ae:17:9f:f1:cb:0a:cb:e7:0c:72:6e:0c:
12:b8:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:47 2025 by rpki-client