Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: trdvRe7VfkQwkNh5k0FdSOIJBd/U04894hDDJBVZ8TE=
Subject key identifier: CB:3B:D8:02:16:57:E5:A0:C3:72:F5:AB:E7:18:D7:6C:6C:92:C7:20
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 0198D54EBD648A952D850DCCABA29FCD7B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: dA92ZyIL8kHkPEUtpuLOryU16mfGCbEbulGW7h+DY7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:bd:64:8a:95:2d:85:0d:cc:ab:a2:9f:cd:7b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=cb3bd8021657e5a0c372f5abe718d76c6c92c720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:29:c5:9a:d2:c1:d9:9d:ea:ff:7e:7d:d2:
02:76:eb:12:2d:6a:32:3a:0d:80:60:ee:9d:f8:82:
e3:8a:8c:e9:05:36:00:ac:62:98:2d:e6:b0:c2:c1:
0e:df:d1:31:ad:9c:e6:fe:75:bc:a5:96:a7:9a:30:
c8:6e:b6:4c:82:ab:37:01:fa:e9:b2:46:ed:14:31:
72:64:2a:17:21:71:0e:58:a5:b0:78:07:05:96:7b:
74:42:61:63:b1:21:63:68:dc:ba:0c:ae:49:d1:0f:
ce:27:19:64:39:f5:f6:68:68:a3:56:ce:8d:0d:a1:
04:a3:75:8d:ff:f8:3f:6e:5f:c0:8c:a9:1f:40:b0:
cd:99:8a:fa:d5:a5:ae:44:1f:4a:f6:11:63:9d:65:
64:6c:ff:9a:31:40:44:21:7d:12:75:fd:06:54:ef:
a7:52:ae:90:26:bc:39:0a:9a:73:ab:a6:9c:75:f1:
bf:5d:0c:bd:55:06:3a:4f:55:91:6e:cf:05:8e:f9:
88:5f:af:77:ec:73:cf:39:75:48:2d:eb:fd:bb:bd:
ed:ed:f0:cf:54:50:85:6a:5d:73:e8:1f:91:70:14:
8a:6f:7e:e0:a0:23:2b:de:65:79:c4:c1:ee:62:ed:
d7:9e:91:b8:1d:cb:93:b8:9b:05:bf:0a:7e:a3:00:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3B:D8:02:16:57:E5:A0:C3:72:F5:AB:E7:18:D7:6C:6C:92:C7:20
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:61:69:3e:04:e4:0d:2c:c0:27:1d:b6:ac:54:eb:df:1d:7b:
6b:5b:57:3b:75:11:1c:f1:2e:c8:e6:38:c4:25:a7:54:3d:a8:
18:0c:2e:8e:e4:4d:07:ba:f0:87:34:11:2c:24:32:b5:01:28:
6b:1b:db:21:19:f4:65:60:9c:34:77:d1:c5:74:6a:e0:71:af:
96:06:2a:ee:ca:76:b5:25:1a:c5:0c:78:0e:15:d4:92:a0:9e:
b8:23:90:1e:da:a0:ba:3e:38:8b:ac:f8:d7:f4:5b:a9:b1:62:
83:b3:88:d0:cf:da:9c:84:11:9e:ba:56:56:22:88:07:02:6d:
05:74:41:ad:46:f9:be:17:cf:e8:af:26:08:82:61:62:17:0b:
82:0b:6d:15:12:83:1f:51:0e:5e:42:d0:5c:34:7c:9b:25:fb:
e5:cd:9a:4c:53:ba:b0:e2:6c:3a:5f:28:98:ab:ff:99:f6:04:
eb:e8:47:21:ca:5d:35:88:53:e9:a1:40:e7:53:a6:96:64:66:
1b:89:4c:33:4a:9e:8c:0c:4b:80:84:d6:52:f0:13:ca:4a:66:
04:3d:0b:70:b4:3d:d9:e8:f4:ba:ec:78:bf:d5:f2:e8:21:1f:
f4:0d:e8:70:2f:0f:17:6b:90:7d:bf:aa:a7:47:3e:03:b4:b1:
d4:00:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:55 2025 by rpki-client