Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: pK+ZtN21VtE91y5vgQ/IVlPp9vkfTuRGlGShaTMV/Zo=
Subject key identifier: 05:88:55:7B:E7:32:1C:22:C4:65:ED:6F:C5:B1:A1:B1:A6:C2:E4:6A
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 0198D5F161267C2A6ED5BDDFB9B8E716A9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 08:00:22 +0000
Manifest this update: Sat 23 Aug 2025 08:00:22 +0000
Manifest next update: Sun 24 Aug 2025 08:00:22 +0000
Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: kRscpsMMllsk0FCe7J+8E4dXEG9tdXI6onRqoeHheUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:61:26:7c:2a:6e:d5:bd:df:b9:b8:e7:16:a9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Aug 23 08:00:22 2025 GMT
Not After : Aug 24 08:00:22 2025 GMT
Subject: CN=0588557be7321c22c465ed6fc5b1a1b1a6c2e46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:f6:49:da:1e:4c:30:7d:0b:76:da:b8:e0:
82:2b:3d:1b:ef:35:1e:f6:5a:d4:40:e3:fa:ea:a7:
2c:b1:93:c3:d5:68:cc:f2:a5:8a:34:c0:c6:97:3e:
e9:8b:72:b9:4a:de:34:8a:db:b5:e5:19:bf:a5:a7:
59:55:64:12:d6:7e:40:fd:71:43:6e:db:0d:2f:fa:
a4:12:5a:ff:19:08:d4:37:3a:49:a9:27:61:2e:b4:
0c:ec:95:54:fc:c1:d0:c8:cb:34:23:c4:45:84:e2:
82:dc:ae:42:c8:6a:3d:ad:47:ea:91:96:24:d7:86:
f0:b8:1d:f9:5a:9b:66:3a:d5:3f:bf:f5:2d:13:bc:
e6:02:1f:f1:92:79:cc:ce:ef:d0:36:bf:75:3c:74:
b4:e4:72:9c:eb:6d:b5:ac:80:73:09:c3:3b:b8:e4:
73:6d:65:5c:19:45:bd:3b:9b:c9:77:a8:88:92:68:
6e:03:df:bc:24:fe:9c:57:fa:15:cf:8f:bc:a1:24:
96:d8:c3:3d:80:e1:b0:96:d9:b9:9c:75:a7:d1:23:
53:0b:1f:e6:34:c2:0d:f8:e5:fb:65:77:00:46:78:
88:8a:d7:04:0e:00:25:11:47:08:77:3b:eb:65:05:
d6:d1:d6:ee:a3:58:db:38:82:2d:0a:74:f8:95:de:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:88:55:7B:E7:32:1C:22:C4:65:ED:6F:C5:B1:A1:B1:A6:C2:E4:6A
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d2:3e:a2:d8:dc:7f:62:73:34:78:86:89:21:b3:e2:31:55:
4f:35:ed:39:00:c4:c8:96:90:19:9a:97:df:6c:54:18:67:2e:
51:fb:00:c5:88:9d:6d:12:e3:5f:de:04:6a:f0:e0:c4:c4:b6:
60:eb:ad:44:e2:6f:47:ab:23:af:cd:01:c0:49:0e:cb:d0:78:
3a:57:bf:6d:4c:57:5e:2f:a6:05:f1:51:ec:50:69:40:9d:75:
cc:40:b1:31:76:2d:a7:8d:74:56:2d:99:7d:33:d8:93:34:32:
c3:aa:d8:b6:fe:20:b1:bc:f0:4e:13:6e:ae:25:b4:88:13:da:
c0:56:46:fc:e3:f0:af:bd:03:4e:b3:03:d1:4d:91:a1:a6:26:
71:2d:64:c5:d9:a0:0b:d5:39:f3:4b:ab:7b:20:36:b4:ec:fe:
53:ad:01:a8:3e:a3:04:78:84:da:48:6f:12:7f:18:5e:18:8c:
fd:32:f6:d2:2c:52:22:8d:8b:13:d5:fe:2c:f4:cd:d5:f2:8a:
eb:aa:7f:7b:04:95:94:bc:14:8a:48:b5:f3:2c:ca:47:a7:2f:
d7:88:83:57:21:a0:82:07:cd:8a:a0:e1:af:dc:9c:2a:67:48:
ec:a9:9f:bf:52:8f:9f:53:70:45:69:e7:a2:bd:81:17:14:dd:
b7:29:56:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:42 2025 by rpki-client