Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: uKS6giFrHfNWHrbUh+KeSzDyvkyJ6BmQVBbB6OHPC9A=
Subject key identifier: C3:21:00:21:F1:48:1D:F0:BD:BC:B2:5B:38:D0:60:D4:6B:89:7E:65
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 0198D65FE60557ABB4CBF232C9B4E218B6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:05 +0000
Manifest this update: Sat 23 Aug 2025 10:01:05 +0000
Manifest next update: Sun 24 Aug 2025 10:01:05 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: B/w2Yd79v/cTrnWE3NRpjpRpeNc9jLGl0Zm1bMRnmEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e6:05:57:ab:b4:cb:f2:32:c9:b4:e2:18:b6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Aug 23 10:01:05 2025 GMT
Not After : Aug 24 10:01:05 2025 GMT
Subject: CN=c3210021f1481df0bdbcb25b38d060d46b897e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:09:f5:3f:b5:09:63:98:2c:10:ee:62:4a:
6b:ba:7d:86:72:f4:d8:32:ed:aa:88:65:ab:bc:cb:
c9:ed:12:50:85:05:8b:37:38:26:ef:60:4a:d0:f6:
45:9b:ec:6b:6d:0a:96:55:83:5e:3e:64:96:a3:c1:
17:39:4b:97:af:90:87:f9:84:f0:05:ca:77:b3:6f:
79:0a:7c:e1:e3:52:8b:63:9b:a2:31:f5:06:82:65:
49:81:11:6b:87:72:c7:52:f8:9e:16:4b:6e:64:4a:
5d:5a:31:0a:7b:8c:9a:66:e0:5c:26:36:65:d3:6f:
ed:b8:70:ec:2f:07:d3:f2:85:8b:64:53:2a:4a:9e:
20:d7:46:c5:2f:d1:b1:83:49:a8:49:83:1b:51:00:
d1:5a:30:bf:b2:03:ce:b4:ab:c4:15:98:3d:54:59:
de:f1:6a:e7:92:9e:df:7f:94:56:11:2a:31:7d:05:
91:42:c6:d5:6c:a0:b7:c9:9b:71:20:3a:d3:86:a6:
ed:0f:79:94:32:2a:8f:22:d5:50:97:96:ed:fa:52:
a0:9f:0a:e7:a2:71:46:a5:a1:8e:5a:35:f9:37:ce:
c7:c8:3d:27:05:99:15:fe:db:9b:1a:59:39:7e:82:
1f:e8:29:fc:68:90:8c:90:9d:7a:b1:b0:44:c4:71:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:21:00:21:F1:48:1D:F0:BD:BC:B2:5B:38:D0:60:D4:6B:89:7E:65
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:19:8b:b5:34:38:b3:19:85:6a:87:99:75:6d:d3:61:a7:43:
d0:4d:91:16:63:bc:a7:2c:d5:ba:e2:bc:71:69:3b:e4:20:dc:
25:0f:45:20:79:d5:01:76:59:46:e0:99:2e:19:eb:94:ef:42:
9a:f9:c5:aa:12:0c:b4:d9:e0:2b:d6:11:45:76:af:89:0c:87:
cf:c4:9f:9e:9f:45:7e:01:74:2c:ed:9d:f1:03:23:3d:a9:73:
45:f2:54:f2:58:70:0d:6a:1c:44:30:b1:2f:03:bc:a4:ef:b8:
b2:6c:79:53:e4:d7:e0:a7:7f:d2:2c:f2:b9:fd:38:e7:c9:41:
35:c9:95:4c:30:05:7c:84:07:88:65:2a:11:17:3e:35:59:0f:
8c:0f:70:1b:b0:62:35:42:44:91:65:dc:9b:2e:98:28:d9:48:
8d:b8:24:e2:a7:eb:5c:1c:ca:94:94:1b:c8:3a:2b:01:4b:60:
db:fe:55:f1:2f:c0:b6:4f:24:93:08:29:b7:d0:57:ee:d7:ae:
5a:af:3c:5c:1b:80:d3:a1:d4:6e:2f:cf:cd:0e:68:1a:a9:f7:
c5:85:89:c1:0f:60:75:26:e6:6a:83:ae:cd:55:e2:d0:89:93:
2e:e6:26:6c:ac:ff:87:69:73:ba:52:30:6a:79:fa:be:41:00:
da:a6:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:43 2025 by rpki-client