Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File: q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier: DwxD2kuFgcjZG7r7belsMadGnsx2ZLrBBEYHvE/hp8w=
Subject key identifier: 18:1D:17:07:13:6E:2D:32:2B:DD:C9:EB:62:AA:A1:F7:62:21:F1:67
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial: 0198D4A83055C4476E0B5FAE4B3E0A35DE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 02:00:48 +0000
Manifest this update: Sat 23 Aug 2025 02:00:48 +0000
Manifest next update: Sun 24 Aug 2025 02:00:48 +0000
Files and hashes: 1: 1nJZi9GJ90J5FpzQE_nW1w9Y34A.roa (hash: GVbUZdYnFxfV/6HU/T0jmvYJT+FivYMJd3zG7OwlXB4=)
2: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: OCioDMkNaBVZT2EeBSMx+e+3DUlmcMZ5B4iiVqzfxtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:30:55:c4:47:6e:0b:5f:ae:4b:3e:0a:35:de:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Validity
Not Before: Aug 23 02:00:48 2025 GMT
Not After : Aug 24 02:00:48 2025 GMT
Subject: CN=181d1707136e2d322bddc9eb62aaa1f76221f167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:de:4b:a8:1b:dd:db:dd:b2:3e:a7:c0:a2:
52:f7:40:4f:16:10:c5:c6:f8:20:b1:fa:7c:0a:a8:
06:e9:a1:ba:8b:95:6b:a8:95:b5:3a:8c:88:d2:de:
43:4a:b6:62:8e:75:b0:0a:f5:80:df:4a:33:86:94:
5b:cf:97:6c:19:d7:d1:66:5e:e0:1d:8f:20:1e:37:
10:40:5c:65:af:a7:6a:41:14:3f:6d:aa:2c:af:84:
55:c9:3d:29:c1:8f:7d:22:bc:d4:b0:d3:11:04:19:
d5:00:8a:73:ff:65:7e:bb:40:7b:62:58:66:fb:f8:
04:24:e2:69:dc:9c:5f:58:2f:9e:18:77:a6:39:1a:
1c:5e:d4:52:26:b9:81:a6:67:82:6d:83:3e:f4:47:
21:5c:33:df:51:d3:46:a3:2d:b8:9f:0a:14:82:20:
7f:c4:0c:9a:e3:4c:7e:24:ef:f9:aa:af:b3:4e:75:
21:c6:c7:ad:b3:79:3b:bd:f1:d8:cd:a0:86:98:a2:
ac:68:59:b3:aa:5b:69:28:7a:70:fd:79:54:53:b2:
cc:47:4e:64:2a:3a:f2:fd:14:09:c0:b3:85:fd:d6:
4e:8d:25:17:fe:45:d0:56:49:12:8e:6b:91:60:24:
82:22:cb:3f:cc:14:2f:c2:ce:2e:05:65:31:7f:de:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1D:17:07:13:6E:2D:32:2B:DD:C9:EB:62:AA:A1:F7:62:21:F1:67
X509v3 Authority Key Identifier:
keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b2:f3:36:99:ce:bb:85:21:26:e8:18:0f:e6:a3:a0:95:f1:
84:0d:67:e6:19:08:5c:52:c6:8f:53:ee:ad:02:9c:d7:d8:db:
3c:01:53:b3:da:9c:33:d4:55:1f:36:44:2e:3a:71:e8:7f:9a:
9c:5b:33:ae:73:9d:80:6c:1e:99:22:10:f4:02:b0:7b:9e:41:
3f:f7:19:b8:ee:cf:73:18:c5:76:9b:bc:7b:fb:d9:13:d7:db:
3a:44:fe:96:0d:4a:f9:ba:0a:49:a5:9a:fb:82:9a:29:e3:21:
dc:1c:84:d2:54:61:ad:2a:21:5a:e7:5f:0b:e6:88:76:f8:dd:
99:d0:32:68:32:a6:df:44:6f:7c:69:35:f0:b3:b1:21:95:31:
a7:83:21:23:b0:52:b7:2f:23:19:fb:45:50:2c:4f:98:3b:0b:
0a:a4:0a:4c:b8:63:1b:73:6a:34:18:73:3c:f0:2b:9e:c4:29:
90:b9:a1:5f:20:9b:05:52:65:bf:8b:67:80:b1:5e:46:36:eb:
1f:3e:fb:34:b5:a5:25:00:2a:9b:cf:18:6a:fa:8d:69:97:17:
2c:0a:c3:62:c2:be:5a:47:a9:9d:83:24:d3:90:6c:c2:f4:9d:
c1:f2:71:50:67:49:55:46:85:08:d2:04:77:66:58:23:e5:1f:
37:5f:8c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:01 2025 by rpki-client