Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: pqlxqfUnlZ3ymw2IrGrLxMDb5+s28aMQ3sPGab9XGqU=
Subject key identifier: FB:53:4B:87:08:F3:50:63:FF:D6:F8:04:5F:5F:C7:ED:0C:5A:04:75
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 0198D998DD99B9669252DD9E7101E679B665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 164E
Signing time: Sun 24 Aug 2025 01:02:10 +0000
Manifest this update: Sun 24 Aug 2025 01:02:10 +0000
Manifest next update: Mon 25 Aug 2025 01:02:10 +0000
Files and hashes: 1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=)
2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=)
3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: AM7ST5z4o9PC6GkHQ1Obr80oQbsM/FRLRvJLkEQUMgE=)
4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:98:dd:99:b9:66:92:52:dd:9e:71:01:e6:79:b6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Aug 24 01:02:10 2025 GMT
Not After : Aug 25 01:02:10 2025 GMT
Subject: CN=fb534b8708f35063ffd6f8045f5fc7ed0c5a0475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:48:d4:d5:c1:01:f1:91:5b:43:2e:a1:a0:
94:78:a6:38:e3:97:b5:9b:72:95:38:7e:ff:ff:b0:
1f:da:fc:e8:ed:bb:7d:20:45:b4:41:66:b5:2f:dc:
92:8d:6b:4a:73:dc:cb:f9:e0:dc:f9:25:7a:ee:87:
ff:cd:f0:bb:b6:94:b4:fd:9d:47:73:ac:73:1a:42:
9a:04:50:9d:b3:0e:e1:71:72:83:36:30:02:a7:da:
6a:9d:79:5e:81:e9:d0:82:03:a7:14:11:d3:30:d1:
f1:22:c9:43:51:d4:4b:6a:e0:be:18:62:7b:fd:ce:
06:2b:e4:86:aa:9f:3d:78:1d:54:d8:fe:fe:d9:31:
91:e0:73:2e:d9:32:8b:91:24:f8:0c:63:db:97:e8:
7a:42:31:40:2b:b2:98:45:7a:9c:af:36:3f:7d:22:
8b:ed:8a:91:cf:86:93:17:eb:fd:20:98:c3:54:9f:
95:bf:8b:42:de:d6:70:40:d8:5e:f1:9e:3c:89:02:
0c:09:8e:db:bc:67:cd:0c:ce:1e:39:a0:59:ec:12:
71:2b:e7:86:8f:e3:2a:05:6f:82:ba:db:6d:80:4d:
f9:f0:2f:40:a2:7b:0f:f7:16:6a:71:d6:77:b2:ef:
f8:5d:bb:53:c7:75:a9:49:05:e8:5b:a6:4d:a4:6b:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:53:4B:87:08:F3:50:63:FF:D6:F8:04:5F:5F:C7:ED:0C:5A:04:75
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:46:6b:f9:a1:0f:e1:12:b5:ca:a4:d4:ae:52:2a:27:15:2c:
77:e3:df:f8:16:f1:f5:d2:27:3a:d0:b3:51:dc:bb:5c:17:8b:
a2:86:a9:15:80:d6:78:dd:bb:05:5b:5f:74:ca:76:af:d3:9e:
49:7d:4f:84:1d:30:46:87:47:5e:ee:cd:37:74:3a:97:7f:8a:
78:df:84:f1:74:ae:8f:6a:ff:ec:3d:d3:a3:4e:17:d0:cf:7e:
b2:10:73:26:57:0d:55:06:5d:83:63:27:6c:e9:a5:4c:07:13:
93:2e:b8:ec:04:c1:05:e5:44:b9:de:85:cd:db:a0:d2:12:6c:
67:74:1d:5c:b9:12:72:e4:9c:21:ba:a0:64:d5:7f:b7:99:47:
9f:2d:c9:99:c7:54:07:a6:de:31:9a:80:80:c3:9c:63:4f:d7:
46:ce:3d:63:98:17:eb:2b:fc:ef:90:fa:8e:6b:ef:71:b4:e1:
bc:ed:ef:53:1b:1a:69:80:27:36:f3:f6:26:44:c5:a6:78:ab:
a8:cf:59:86:5f:c5:ab:5c:6a:0d:52:b5:31:32:7a:b9:3a:a5:
36:0b:44:64:ac:a7:0d:6d:44:ab:02:f8:2c:b8:7f:f2:fb:cd:
78:17:3e:bd:5b:c6:86:ed:bc:4a:e3:15:52:85:a8:d4:7a:53:
17:c7:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:33 2025 by rpki-client