Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File: q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier: +03Oau7Zws+q1TI5QcPovdeNPKZkRLqWFT+VgLr/Z2U=
Subject key identifier: 69:7C:DC:91:A4:63:A2:10:A9:96:F5:C4:58:47:9C:41:F3:DE:51:3A
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 0198D6980A7D898BBAE37CDE605E0A067D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number: 12F6
Signing time: Sat 23 Aug 2025 11:02:25 +0000
Manifest this update: Sat 23 Aug 2025 11:02:25 +0000
Manifest next update: Sun 24 Aug 2025 11:02:25 +0000
Files and hashes: 1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=)
2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: JAfN7mEnGSvcj6D7nGsQ+LZ5blunNZu6LrIFcObpS7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0a:7d:89:8b:ba:e3:7c:de:60:5e:0a:06:7d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Aug 23 11:02:25 2025 GMT
Not After : Aug 24 11:02:25 2025 GMT
Subject: CN=697cdc91a463a210a996f5c458479c41f3de513a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:8f:2e:82:20:f6:3c:1d:c8:5b:10:0c:6f:
18:1c:0f:42:e3:f0:86:6f:f0:8b:1d:1a:f2:83:f8:
c0:ed:a7:41:7f:71:bd:23:c4:28:db:95:70:ea:b5:
ba:89:e3:fa:97:21:1b:7d:23:9b:58:a0:1a:1a:19:
8b:cc:46:95:4d:ed:c6:02:c2:c6:b5:16:1a:04:df:
16:e2:b0:60:27:65:3f:ca:05:be:42:f0:38:92:c5:
1a:40:45:0a:9e:f4:91:80:61:8e:a1:c1:41:5d:b3:
c3:71:66:5f:14:ae:54:27:c1:38:7c:ad:e9:e2:8a:
8e:b1:6e:2a:1c:7e:1f:34:75:de:13:cc:0e:5d:72:
47:72:d1:a9:e5:65:a7:72:d9:aa:7c:49:5e:65:6d:
6c:b2:00:fd:3f:ad:4c:d7:5f:c2:00:da:03:97:0f:
f6:06:c8:92:43:77:d7:b8:ea:70:32:49:a9:63:56:
b5:be:0b:7e:9c:49:cf:57:51:5f:82:b9:67:2f:0e:
4c:45:14:bc:db:1b:ee:18:3a:1e:a8:2b:18:48:33:
4e:c5:cc:42:0e:75:62:89:d4:2e:72:69:1e:28:15:
c3:db:54:b4:5e:8d:2a:09:92:95:f6:66:90:61:e2:
4e:cf:31:28:c4:14:ee:02:ff:88:68:27:2e:7f:e0:
54:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7C:DC:91:A4:63:A2:10:A9:96:F5:C4:58:47:9C:41:F3:DE:51:3A
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a5:44:63:6d:a8:bf:6e:7a:0c:e8:5d:5b:32:07:e9:12:26:
22:a7:83:61:0b:1b:ea:77:60:1f:76:9a:30:8f:2e:4a:52:64:
8c:4b:6c:88:9e:fb:41:b4:ed:38:bd:ff:c4:45:7e:aa:b0:7f:
96:18:24:e2:0d:26:5f:23:ba:99:4a:c6:df:cb:a6:22:b6:de:
96:32:9a:dd:ea:aa:2c:1a:f5:db:bd:fa:cd:ba:5e:5d:ce:26:
19:f0:92:d9:b0:62:fd:d9:dc:6e:b3:e9:cd:ae:ad:19:5a:e4:
80:89:37:9b:fa:f5:db:b6:4d:9d:c8:23:33:23:90:db:18:73:
59:7d:22:45:5e:5f:89:d3:27:bf:5e:0c:e0:47:9a:28:4c:65:
76:a5:30:21:3f:34:89:05:f0:78:62:bf:39:f9:72:3e:b5:f9:
53:9c:60:c9:8d:e7:39:33:a1:63:71:c1:7c:25:2d:ff:74:bc:
84:88:64:c6:9b:1e:28:7d:bf:08:ef:3c:ad:52:39:c7:37:73:
95:2b:66:fa:b3:19:bf:b2:f1:49:53:63:d3:38:11:15:64:d8:
20:04:09:30:ba:29:bf:7d:c6:9d:b2:b1:3f:28:d0:38:a5:fd:
40:d8:1b:d8:64:40:d3:c6:1c:31:f0:c5:b6:ee:7e:64:8d:f8:
b0:fb:25:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:19 2025 by rpki-client