Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: aWjqB0ArOxGvXBz6juty1IHBIb4EAfWckawz80grn10=
Subject key identifier: 4F:A8:A6:B6:22:CF:08:5D:26:D0:BD:64:59:2D:EC:43:74:6F:E8:7A
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 0198D7A95D8109CB9323657C83622B9015CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 16:00:57 +0000
Manifest this update: Sat 23 Aug 2025 16:00:57 +0000
Manifest next update: Sun 24 Aug 2025 16:00:57 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: gqF8EWvmXuZQZHI0HMZUjqtWK1/FLV2gNpsxkhpjk7A=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:5d:81:09:cb:93:23:65:7c:83:62:2b:90:15:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Aug 23 16:00:57 2025 GMT
Not After : Aug 24 16:00:57 2025 GMT
Subject: CN=4fa8a6b622cf085d26d0bd64592dec43746fe87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:4e:9c:1a:3e:4a:3e:43:40:b4:53:0d:98:
e9:80:80:8b:e5:1a:d2:0d:ae:38:23:49:eb:18:e3:
eb:e2:f6:a6:a0:df:16:00:57:bb:a5:c8:76:63:ce:
bb:3a:de:9e:6c:f3:e8:96:f2:5e:03:38:0d:69:64:
69:dd:c8:3f:df:02:9e:99:68:d1:8e:ff:1b:c3:48:
25:fa:6f:cb:02:bf:de:e7:97:2f:d3:3b:34:f9:4d:
20:f4:30:14:59:1d:9e:c3:df:52:dc:f0:77:05:93:
d2:98:80:bc:11:39:35:ba:65:d4:fc:e3:80:2a:63:
31:f4:72:61:39:1d:f1:b3:2a:19:ce:a6:5f:2d:eb:
ed:0f:e5:bf:f6:85:8b:d1:df:71:77:75:97:05:bb:
36:75:a1:7b:b1:9c:06:56:40:24:e2:36:a4:ab:51:
6d:95:bc:31:78:be:9e:a6:76:8c:2d:ab:e9:d2:d5:
5c:98:a0:a4:e6:de:36:cb:de:e3:49:6e:4a:cb:f3:
a7:d8:7b:65:cc:24:0d:5e:fb:e3:54:b9:d7:d2:99:
23:d6:44:85:b6:36:5a:8c:ca:3c:54:4e:ce:a3:47:
a6:3d:bd:4d:c5:81:ca:5c:57:a0:9b:e4:48:83:f0:
01:be:7d:9a:b3:19:5d:75:27:4b:63:90:e6:83:cd:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:A6:B6:22:CF:08:5D:26:D0:BD:64:59:2D:EC:43:74:6F:E8:7A
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9e:ee:01:ef:7b:80:fc:ea:67:16:85:bd:06:7c:58:f4:20:
84:19:a1:12:27:eb:9f:30:7f:1e:80:57:13:eb:4e:f7:5b:3d:
c4:21:3f:47:b0:2a:e1:55:1a:2c:e1:50:c3:f3:5d:4e:83:eb:
6c:f9:0f:b9:4a:66:76:05:27:b5:a3:ba:da:0e:33:f6:61:d3:
e2:a7:64:0d:e6:42:e3:63:2a:14:a6:21:6c:56:24:8d:9d:51:
71:93:7d:9c:6f:bc:f4:47:59:8b:04:4e:00:d1:12:15:d0:8f:
a5:78:39:bf:a8:f1:bc:11:23:19:aa:6b:f0:2d:61:b4:d0:34:
1d:16:a9:4c:cd:5c:d0:44:da:d5:b5:79:49:35:cc:12:df:e4:
7a:92:dc:d0:fc:8f:03:d8:cf:ee:41:18:1b:d4:d6:d5:ef:ed:
ec:9f:dc:f2:4a:87:91:07:df:74:de:71:70:a9:e1:5f:34:81:
2e:9e:9d:f9:e8:e2:34:6a:2c:ca:33:db:a9:36:ac:3b:66:66:
0b:44:77:13:27:4c:f7:81:e7:9b:98:7d:d2:28:d6:ad:1d:5f:
8e:f8:cf:5b:cb:95:54:d8:a3:a4:5d:49:29:f5:02:33:1b:a6:
4d:82:5f:ba:2a:b4:c0:e3:1f:d2:a1:14:ef:34:fc:9a:1a:d3:
e6:fd:e1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:33:53 2025 by rpki-client