Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File: q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier: X0b4uPlDc7dmH9YoHfOWGe952gDqOXxrymowIz4r3X0=
Subject key identifier: 72:FD:15:7B:F7:18:EC:2C:DB:08:88:69:3B:96:1D:73:3E:D3:14:9E
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer: /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial: 0198D4E055225C082944742705324C757EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number: 04BE
Signing time: Sat 23 Aug 2025 03:02:08 +0000
Manifest this update: Sat 23 Aug 2025 03:02:08 +0000
Manifest next update: Sun 24 Aug 2025 03:02:08 +0000
Files and hashes: 1: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
2: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
3: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: Sqvg4EXOHjQBAIr4JFh5li46ArhpUiWck1LC8H+A1rA=)
4: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:55:22:5c:08:29:44:74:27:05:32:4c:75:7e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Validity
Not Before: Aug 23 03:02:08 2025 GMT
Not After : Aug 24 03:02:08 2025 GMT
Subject: CN=72fd157bf718ec2cdb0888693b961d733ed3149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ba:0d:bb:c2:70:ec:d7:71:4d:11:b2:2b:56:
97:38:3a:ff:0d:42:d2:64:05:5d:85:a7:32:f3:75:
23:d7:b1:b6:20:f1:f0:be:a3:71:c4:17:06:74:7e:
04:66:cf:4e:47:a5:9e:32:57:8f:52:61:9d:14:87:
2c:7d:60:4b:89:e0:5c:80:3d:ae:20:05:2c:65:af:
fa:1e:15:20:ff:1e:77:22:4d:74:7e:c3:46:93:f7:
2e:a3:da:41:ad:27:66:cf:64:eb:08:12:97:59:e2:
4e:9c:50:b0:84:be:ce:06:c0:e2:d6:28:94:11:33:
a0:32:f1:e1:95:e8:55:a0:13:8b:2e:b9:8b:c5:98:
39:52:99:01:ed:97:8e:d4:92:93:46:a5:c8:a8:98:
33:11:00:3a:b5:5d:f4:10:3a:e5:f3:b1:0b:a6:d2:
ce:0a:c8:23:1e:74:4c:1b:f0:4f:3d:f2:ce:77:79:
29:3f:a1:77:bd:de:e7:6d:f8:9b:87:df:4d:04:11:
4a:26:b7:2b:72:67:07:44:d9:ae:bd:be:b7:05:32:
11:4a:cb:8c:15:d6:d5:44:80:c7:28:d5:eb:d4:5c:
fd:1d:f2:01:ca:70:a1:c9:e8:18:df:8b:01:9a:5d:
ff:1b:0a:9a:bd:21:d0:e3:ae:a0:a7:06:16:ba:f7:
aa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FD:15:7B:F7:18:EC:2C:DB:08:88:69:3B:96:1D:73:3E:D3:14:9E
X509v3 Authority Key Identifier:
keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:fd:a4:96:81:e0:f3:82:b5:3a:0d:4b:03:fd:06:cd:77:b6:
4d:2a:3b:2b:7f:93:2c:21:be:bb:30:dd:ec:5f:ad:68:c8:72:
18:7f:c8:65:de:b0:3b:87:08:5e:54:1b:2d:d7:4b:32:96:35:
8c:4f:e9:1c:67:b9:a2:0a:5e:06:6b:56:95:5e:8f:6a:cd:40:
0a:d7:60:66:55:03:19:f2:a9:66:a0:19:b5:48:cd:fa:b7:e6:
b7:2b:d8:b6:38:2a:ed:0d:c0:2d:f7:83:cc:56:13:07:35:5e:
19:5a:18:9d:09:7a:ec:2e:c8:9e:8c:a3:8a:43:aa:4c:f2:2a:
ab:43:8b:fa:de:36:8c:4a:b6:c4:d1:98:b9:f4:ee:1d:64:ea:
6a:f9:52:1e:a2:11:53:ad:d9:33:1b:9a:ad:01:3c:9f:c1:80:
f1:c3:e6:c6:5a:58:08:ba:2d:e4:e7:20:eb:c7:7a:15:40:de:
e0:19:fe:56:69:47:d8:18:b2:df:f1:05:7c:98:25:49:ef:9d:
f6:84:5c:74:04:50:c6:e2:44:54:e5:58:fd:56:6d:fa:02:4a:
82:d8:0d:74:68:5d:37:e3:e1:9b:a3:c0:c3:60:09:da:51:b1:
3d:3d:ab:c5:8b:79:ec:01:f7:be:72:1c:94:50:82:cc:70:4a:
ed:87:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:11 2025 by rpki-client