Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: 6vpANLQAaBAOJilEWKt5KOQ+uHXX1feopWszNUSM6Q8=
Subject key identifier: FF:4D:74:19:91:94:64:3E:BC:99:A6:01:7A:44:B2:87:D9:A5:33:D5
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 0197BA7D08F8FD54BB87F4CDD72F39D6C134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 07:00:45 +0000
Manifest this update: Sun 29 Jun 2025 07:00:45 +0000
Manifest next update: Mon 30 Jun 2025 07:00:45 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: nQvxSWCVPOZdcd0s37Kp8PL11ahXYA3MSUo/6ucSs0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:08:f8:fd:54:bb:87:f4:cd:d7:2f:39:d6:c1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Jun 29 07:00:45 2025 GMT
Not After : Jun 30 07:00:45 2025 GMT
Subject: CN=ff4d74199194643ebc99a6017a44b287d9a533d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:5b:12:47:ef:20:35:89:a0:cb:20:d6:b2:
41:12:86:aa:7f:e7:1e:2e:57:60:fd:c1:53:1c:af:
e5:78:23:74:1d:cf:8d:f3:cf:59:3a:46:29:88:1d:
fb:1a:d8:25:b3:fd:b5:12:df:03:6e:46:c0:e2:ef:
55:3a:64:22:7e:3c:6a:10:67:18:09:52:36:9f:8d:
4b:c9:4c:77:13:6e:b7:5b:e8:9c:a1:a6:74:55:63:
bf:7a:29:91:62:8d:bc:f7:4c:70:d6:6a:c7:14:e7:
ab:37:3c:c6:bd:9c:0a:3d:07:3f:7e:6b:15:cf:ab:
63:f8:1d:17:e5:78:10:e3:c1:85:a7:c2:c0:4c:b7:
a8:29:02:3c:45:5f:4e:89:9d:e9:17:46:2d:06:16:
32:1c:ee:f7:f6:e6:76:2e:37:2c:c1:15:3f:0e:11:
46:31:ed:e8:1c:ac:13:15:21:f6:12:71:cd:60:db:
53:1d:d1:79:12:84:a2:42:98:b4:e8:27:71:a8:8d:
f3:63:11:36:0e:e0:cd:da:a7:36:5f:da:2d:82:cb:
37:34:3a:68:1e:19:ce:cd:f7:b3:25:70:91:0e:86:
18:9e:9f:5f:cd:d1:ea:96:fe:ff:cd:3d:cf:aa:e5:
6d:1b:28:2d:cf:d1:bf:6b:1d:b4:d8:47:fb:fc:72:
bf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4D:74:19:91:94:64:3E:BC:99:A6:01:7A:44:B2:87:D9:A5:33:D5
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:93:50:a8:bf:aa:89:bc:18:46:6a:48:09:7c:db:b8:32:e4:
83:a7:5b:ed:fd:e4:9e:77:02:89:cf:0b:1e:bf:55:1e:9a:b4:
b7:9f:92:40:07:36:39:b1:d5:ee:80:bc:26:be:00:9d:af:59:
c6:6e:8c:43:0d:c2:7e:47:1e:be:62:5b:df:d1:72:ad:1b:be:
44:de:ea:f8:72:28:cd:bb:1c:03:70:94:73:92:7a:e9:ef:66:
32:29:40:99:d0:d6:65:72:f9:6b:b4:df:7f:79:43:91:3a:64:
1b:4a:48:06:ba:c8:57:9f:f9:f3:58:15:21:e3:93:8f:db:af:
bf:a1:f3:ae:d4:86:62:08:5c:4e:c6:47:7b:32:ac:a1:2b:36:
87:10:4f:ed:7e:98:a3:3d:b7:90:f3:35:40:34:44:d8:7c:bd:
b7:22:ae:49:e7:a4:2d:90:f9:65:c6:f5:07:53:50:8f:a2:85:
08:ce:61:e8:aa:5c:5c:fc:97:54:e8:ae:37:4b:7e:40:e8:e7:
02:7f:75:d2:1f:c8:06:3c:b5:ab:5d:9f:6a:e5:21:f2:37:c0:
44:86:fc:4d:c1:a9:de:c1:d9:b3:34:2c:e4:f6:9e:7e:9e:bc:
ae:21:04:19:09:9d:fd:7a:d4:9f:5d:cd:f1:34:09:d2:5c:da:
e6:a5:dd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:46:29 2025 by rpki-client