Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
File: q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft (raw, json)
Hash identifier: A3vJ6wyUWnvsaN6dpF2X/IqbOJxwnyu5N2XuFz3BICg=
Subject key identifier: A4:BD:27:43:AC:6A:44:DA:7F:7F:CF:E5:2A:C7:A4:F5:51:37:34:53
Authority key identifier: AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
Certificate issuer: /CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Certificate serial: 0198D515AABC05C1E3906CF28A4A3BFEB8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
Manifest number: 0AB1
Signing time: Sat 23 Aug 2025 04:00:23 +0000
Manifest this update: Sat 23 Aug 2025 04:00:23 +0000
Manifest next update: Sun 24 Aug 2025 04:00:23 +0000
Files and hashes: 1: i11QUMq5rxHIsS_Sujk7fM1Wmpc.roa (hash: 6iS4lGatjNwdjx3TWoy83KW0n9N+x6+eWhAvA99wwRM=)
2: q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl (hash: Isy0JmGMhs+t8gXUllPqvzuAe74q96jGK7GCxD4WnHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:aa:bc:05:c1:e3:90:6c:f2:8a:4a:3b:fe:b8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9aab13427ad8c0072ae08d9bb80abc19d3f984
Validity
Not Before: Aug 23 04:00:23 2025 GMT
Not After : Aug 24 04:00:23 2025 GMT
Subject: CN=a4bd2743ac6a44da7f7fcfe52ac7a4f551373453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:77:52:45:ed:44:56:6b:79:f9:43:e7:87:d9:
91:31:e4:45:e1:4d:dc:b0:25:45:a6:83:10:a5:49:
eb:b3:df:51:9a:e0:89:02:49:ea:ac:8b:22:3e:f8:
e5:54:17:3b:fa:a5:4f:05:18:e6:28:54:25:72:ab:
01:8a:5b:8c:1b:2f:c2:1b:32:fa:57:3d:07:a8:9b:
a2:7e:66:b2:f3:43:1f:01:be:14:77:db:6d:72:c5:
46:aa:4e:2a:61:00:d8:6a:dd:93:4a:ea:a1:53:c2:
66:be:1f:fb:7f:f0:ff:19:e6:0e:60:6e:cf:23:23:
52:fc:95:2a:6d:a3:fa:17:8a:15:d4:ba:9c:37:9e:
ac:3f:74:d0:06:a8:e9:de:5a:4e:76:08:df:4b:a3:
bf:e6:ac:87:ea:93:4e:6d:82:37:2c:32:cc:3a:13:
72:18:ef:47:f3:19:a1:54:f9:85:b0:7d:86:e3:c7:
ce:78:4b:95:ba:76:32:fc:49:91:53:e4:ea:10:3b:
29:81:f7:78:b4:3b:20:48:8a:f0:1e:9e:e1:57:95:
4f:2e:96:e2:24:6e:e0:5c:fd:9a:cc:31:3c:ac:00:
6d:3b:58:6d:29:3a:c9:31:ff:f5:23:ef:25:ff:4a:
9b:e4:55:cb:90:7b:f8:3d:95:03:05:31:9f:ad:c3:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:27:43:AC:6A:44:DA:7F:7F:CF:E5:2A:C7:A4:F5:51:37:34:53
X509v3 Authority Key Identifier:
keyid:AB:9A:AB:13:42:7A:D8:C0:07:2A:E0:8D:9B:B8:0A:BC:19:D3:F9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5qrE0J62MAHKuCNm7gKvBnT-YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eb9582-d275-497a-b62b-39260319c7bd/1/q5qrE0J62MAHKuCNm7gKvBnT-YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:69:ec:ce:8d:0d:b2:b5:13:a1:43:2c:36:c6:c6:ae:88:b0:
6e:07:7f:a3:d7:d3:a6:13:cb:3c:09:fb:38:43:b0:91:f6:aa:
7f:21:a9:75:bb:df:c4:25:10:38:0b:35:0b:e8:b5:23:80:01:
16:48:3c:d7:d6:96:3e:a9:e4:cd:bd:91:40:43:e9:22:7a:80:
da:97:d3:84:78:d0:d7:4b:81:3b:03:83:13:48:cc:79:7c:b9:
b0:40:c3:b0:7f:7c:72:e8:e2:92:17:fb:70:3b:5e:e6:77:8c:
78:a5:5e:65:28:e1:8d:28:24:d5:af:a5:fd:6e:02:a5:59:a7:
1e:1f:89:b0:24:ad:7c:fa:ff:a6:59:89:21:a8:12:4e:37:4b:
a8:00:1d:8f:ff:3a:07:30:2a:5f:d3:5a:c2:cd:3e:b9:36:a6:
72:99:8e:50:d3:ec:84:31:59:7d:c7:b8:a2:9f:34:b2:2a:fa:
4a:59:ec:99:53:22:fc:bc:87:46:5a:d6:2a:8c:ec:82:86:3a:
4a:c9:9d:3e:93:31:3d:8e:d5:cc:d3:93:97:7d:03:d0:a6:eb:
45:1d:0a:20:47:ec:db:1c:08:7e:99:d5:14:94:5d:49:1a:13:
dd:f8:11:54:d8:a6:94:a0:61:48:da:3c:e5:62:ef:51:9d:ec:
be:4c:a7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:05:31 2025 by rpki-client