Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: wJHZIaeY/E5iefb5pzg3FUxBqoYc1bCbtDPMaKOpZW4=
Subject key identifier: 9D:AC:1E:30:4D:8C:B2:EE:7E:CF:12:32:29:49:B0:D0:69:73:5D:1E
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 0198D66123DFE2172EB03AE5EC44263DEAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 166A
Signing time: Sat 23 Aug 2025 10:02:26 +0000
Manifest this update: Sat 23 Aug 2025 10:02:26 +0000
Manifest next update: Sun 24 Aug 2025 10:02:26 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: N5zj-5kvAhoJCItFFzdBa1pYbH0.roa (hash: ypTV2FdvIR6mdrYiLR6I+YqYJsccCY+5Z3r1n8pA0MU=)
4: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
5: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
6: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
7: oFumiBsAWooyBU0TcSWUrXQVV0M.roa (hash: O0f3W53wpKnfJgwZpwBD1xXfrpSbNoYlbIB/lXeKPq8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: rNUUHPCc+e+hRS/wS9Z1Yw29XaDVSWiQ1Wm7Pck+ens=)
9: zJzk_tM6gq364ozeInI309dIrxA.roa (hash: Wk+SRLeVkkf92Q0xGlI36RRywoqFOdrDHHnD94zbdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:23:df:e2:17:2e:b0:3a:e5:ec:44:26:3d:ea:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Aug 23 10:02:26 2025 GMT
Not After : Aug 24 10:02:26 2025 GMT
Subject: CN=9dac1e304d8cb2ee7ecf12322949b0d069735d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:1b:e7:7c:65:c4:ae:89:c0:4e:ba:e0:4c:
97:ea:55:89:94:64:e0:9d:8d:23:aa:10:d7:23:dc:
08:ba:72:50:bf:75:0c:23:5d:03:13:18:d8:ad:8d:
33:bc:1a:42:7e:0f:d0:dd:2e:42:ff:51:52:7b:48:
47:20:2d:50:ce:79:b3:59:da:d3:43:f1:d0:1b:2d:
c6:bb:ae:9f:6c:b3:ca:35:18:85:88:e6:70:6f:68:
a6:10:2b:02:22:bf:a4:fc:19:44:ee:a5:75:58:bf:
9f:c5:76:a3:ce:9e:01:4c:04:f1:56:5c:9b:25:2a:
36:e3:4d:88:63:09:2e:63:c9:11:d1:62:ec:8b:b7:
46:e4:b5:ea:a1:5b:a7:b1:95:8d:ca:39:02:12:92:
39:14:c8:17:f6:34:a6:34:44:96:c9:30:b7:64:6a:
41:20:47:a5:7c:4e:10:0c:76:ca:dc:33:4f:64:1f:
41:18:94:2c:1c:70:70:33:6c:36:37:51:57:e6:1d:
38:ae:38:68:95:44:64:36:0b:72:cf:70:92:6d:39:
27:c2:88:1d:f9:55:fb:78:36:7a:b7:38:3e:75:75:
19:61:9f:14:fc:47:aa:09:20:8f:31:a1:1a:b5:66:
03:da:da:b4:af:79:47:e6:77:9c:bb:8a:a6:4d:fa:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:1E:30:4D:8C:B2:EE:7E:CF:12:32:29:49:B0:D0:69:73:5D:1E
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:49:e1:70:df:fa:fe:78:94:9a:c7:2b:04:53:5f:67:7c:77:
d1:e4:fb:0b:a9:61:33:18:e1:52:35:d4:87:0c:ab:7c:68:7b:
f3:a5:2a:b7:59:0d:82:d8:c5:d3:7a:e6:ea:af:9a:63:e6:d9:
ad:83:7d:52:96:8d:8d:75:ae:71:82:6e:0c:2a:47:1f:ec:6c:
ff:cd:5d:c0:37:a8:db:15:2b:d3:68:68:78:e8:86:f4:56:3a:
4c:3b:cc:52:93:de:58:c5:82:db:7b:03:6b:64:7b:d2:9f:cb:
d3:77:f4:52:18:a0:24:08:bf:48:cc:12:a6:38:53:64:b4:0b:
71:35:cd:c4:48:57:21:75:a6:74:d5:41:e7:6d:4f:ef:32:ce:
6d:c3:57:e6:ff:e6:19:54:b6:19:dc:c4:b2:9a:e5:4c:e4:2d:
4a:32:f0:c0:f1:d3:9a:76:7c:ff:6f:d8:95:27:72:07:75:28:
75:7d:67:e9:19:a4:c7:9a:3d:53:63:e1:0b:fe:29:ca:3d:65:
36:cd:f4:21:73:19:ed:6d:ac:eb:82:51:0f:e6:39:ac:0a:71:
fe:14:c5:61:93:f1:31:94:3c:cb:4c:0c:10:74:06:50:ff:35:
df:73:56:fd:94:f5:b1:bd:25:d0:e5:e2:24:94:f6:e8:06:fd:
3d:d1:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:19 2025 by rpki-client