Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: 449NUdYOmFkNEQt3R505IFZDAPAmSh7GotbdHw+IRDY=
Subject key identifier: AB:01:EC:BF:16:3D:F2:13:53:2D:7D:14:32:D5:AC:E6:D0:98:0D:EA
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 0198D660DC4663006AEA374B3F321B02A9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:02:08 +0000
Manifest this update: Sat 23 Aug 2025 10:02:08 +0000
Manifest next update: Sun 24 Aug 2025 10:02:08 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: WeDs5aGUwny2TyliwH6Y30uHGB0W+8Rwrnt+HSsx0QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:dc:46:63:00:6a:ea:37:4b:3f:32:1b:02:a9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Aug 23 10:02:08 2025 GMT
Not After : Aug 24 10:02:08 2025 GMT
Subject: CN=ab01ecbf163df213532d7d1432d5ace6d0980dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:16:68:85:a7:61:51:e1:77:32:bc:7f:f8:
ba:7d:f5:05:b2:c6:84:48:87:49:4e:ce:72:3f:26:
e8:eb:20:cd:6d:64:4f:c0:cc:7f:17:d7:e8:43:7c:
b3:8c:22:58:04:c6:1f:e4:f9:0d:e9:45:d9:2f:0f:
67:99:76:62:8c:48:b1:37:e8:76:37:5f:e1:6f:0b:
1d:1c:c8:6e:a1:07:f5:6c:da:ba:f6:ac:06:a9:55:
65:27:63:8a:34:11:00:1f:7b:31:31:6d:67:85:af:
da:24:1a:6f:48:8d:40:5f:de:1d:32:c8:b4:91:91:
8a:ec:69:99:ec:33:20:7f:9a:48:f8:c5:8a:82:18:
25:f5:f3:24:4e:a8:7c:53:6a:4c:d9:83:a9:2f:8c:
60:e9:10:e5:ff:ae:b1:8f:7d:4a:e0:34:b0:cd:3c:
8c:ee:58:8c:f0:90:01:fa:4b:34:de:24:78:0a:b5:
6b:8b:ee:c4:27:65:fb:9c:44:7a:44:55:6d:1e:94:
94:0a:85:cf:3e:fc:cc:98:b2:01:21:52:91:bf:d4:
c0:14:b0:1a:28:0e:9b:ea:7b:a4:be:b3:4f:5e:55:
0c:48:7e:64:8e:2b:cc:65:6e:e2:03:7c:79:e6:eb:
d5:3f:23:b6:3e:50:ac:41:cd:7b:47:4c:21:61:00:
dd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:01:EC:BF:16:3D:F2:13:53:2D:7D:14:32:D5:AC:E6:D0:98:0D:EA
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:18:dc:63:6d:bd:49:51:d3:6b:6a:5c:8e:69:ee:ee:9e:2f:
ef:1b:09:14:b1:2c:ea:07:f7:93:aa:1f:96:79:5e:dd:1f:cb:
b4:89:94:08:3f:e0:96:b1:51:f6:89:08:c6:b7:ad:9a:1e:61:
69:4b:cc:8d:dc:80:03:b7:a3:74:e4:51:32:7a:a5:1e:b3:02:
26:52:49:c2:8f:80:46:21:14:09:e2:6a:85:9d:c6:74:62:f7:
87:68:37:00:bd:1b:ae:23:b3:96:5a:17:bd:81:17:c3:a1:36:
d0:c2:ac:c3:cf:2e:09:66:8d:14:68:a7:87:d8:ff:83:02:b2:
b8:63:96:82:43:a6:3f:1a:6b:a0:49:c2:ed:d2:98:b5:f0:59:
c6:62:93:38:88:51:d7:6c:31:c0:5b:42:e3:af:29:c6:95:0b:
05:93:9d:cf:6a:cb:b6:cf:88:f3:66:2a:6d:44:6c:13:a0:48:
ae:a6:ea:dc:31:64:cd:a4:be:04:70:6f:9f:f6:33:0c:d4:f5:
4e:48:19:41:cc:81:07:3d:ec:47:f1:d7:ad:3d:05:80:9c:a1:
7d:a7:60:73:10:d1:eb:ca:2f:3f:93:89:2c:cd:1b:e1:c7:17:
73:6a:67:7c:7a:58:cc:cf:ca:bd:b2:d6:10:de:f3:df:65:36:
b3:e2:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:48 2025 by rpki-client