
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: FkOElYXw+AykoD/1N6rxuYqvOipH7f/UVdbOIm4IZ58=
Subject key identifier: 10:78:44:00:9A:77:6B:93:A8:A5:B4:73:21:30:63:DB:7A:EA:AC:A1
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 0198D404D5E0B953651206DDE618F4A2B068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 164A
Signing time: Fri 22 Aug 2025 23:02:23 +0000
Manifest this update: Fri 22 Aug 2025 23:02:23 +0000
Manifest next update: Sat 23 Aug 2025 23:02:23 +0000
Files and hashes: 1: 90qSTJbYoJhXhjJi4rtP_ZNlhJU.roa (hash: OSVSFtU4v1yfm+DOAOwZeidgdh2EY4LpmP/NOkKDmkg=)
2: JErXjXvKorGj9aJu1omld6wdpcs.roa (hash: kiyLNY+zTwPwB8AkdrotNIs7qiykrRwfggYUByu+C28=)
3: UscJiSEPN7-PYnIHOgT8LNjrioo.roa (hash: RVU014DpCH3z/tdVgprON9hggZk6wMumDABO2h4+Fx0=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: Gb4t87yS3SjnhjpcOO69Qt7Y84C1j5zVqzKeQV8vjwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:d5:e0:b9:53:65:12:06:dd:e6:18:f4:a2:b0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Aug 22 23:02:23 2025 GMT
Not After : Aug 23 23:02:23 2025 GMT
Subject: CN=107844009a776b93a8a5b473213063db7aeaaca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:22:fb:76:f1:5b:45:30:53:30:0b:07:6e:
aa:77:64:16:e8:d8:0f:71:e5:73:11:f5:1e:b3:57:
08:0e:75:e8:ea:f8:0b:9e:19:88:47:00:c2:91:f4:
af:40:7a:21:99:c0:7d:aa:80:30:a3:35:33:2a:a5:
81:0f:c1:a8:33:f2:12:61:28:92:e2:6b:f5:9c:aa:
98:f4:a3:50:c3:d7:64:e6:70:19:75:d9:bf:fa:e1:
9e:29:65:51:73:01:6d:f6:8e:fb:a1:95:72:7a:b4:
67:9e:0b:a0:ca:3d:05:e5:0c:05:b7:72:c1:14:06:
30:cc:1c:dd:c7:73:ae:36:99:34:e9:65:c1:30:95:
9e:4f:ca:1e:24:97:1b:8e:55:7c:97:c0:0d:4b:d6:
d7:f4:a5:38:5c:8d:0e:e4:70:fb:b6:b2:fe:2e:a5:
34:a0:85:5b:d5:11:5d:cb:b9:8e:4c:31:f6:04:21:
ac:e0:11:14:a6:23:15:f5:15:2c:2a:fa:18:68:da:
f6:c9:1e:27:6f:92:9b:e4:2f:b3:df:6f:e1:81:92:
31:b5:74:ed:85:49:5c:80:8f:95:e1:60:15:2e:c8:
0e:68:48:fe:b4:5c:55:77:5e:8e:b9:ba:23:fb:cd:
b5:c9:cf:47:f9:e0:a4:73:22:6b:a0:58:72:e8:d8:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:78:44:00:9A:77:6B:93:A8:A5:B4:73:21:30:63:DB:7A:EA:AC:A1
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:73:4b:97:46:84:8b:a5:da:3a:2a:0d:bf:e2:dd:c5:39:5b:
c8:41:7b:1e:60:91:ec:52:94:bc:58:b3:67:d8:d1:13:3d:5e:
5c:1f:af:e0:ee:ef:d3:d8:cb:68:da:81:b4:87:02:16:47:e3:
f1:c4:85:75:0f:4a:b5:60:1b:4c:df:85:13:ee:5f:04:c2:28:
2f:e1:eb:e8:ba:11:46:18:f0:5e:ef:76:22:ab:11:d0:4e:a6:
96:87:51:5f:65:32:90:61:64:c1:04:d9:83:f4:29:fb:97:27:
ad:87:20:11:92:d6:0a:e3:4c:d4:81:91:7e:b1:bf:07:72:d2:
75:14:21:9d:e3:69:b9:4d:11:10:3f:85:81:69:ff:0d:76:51:
b3:69:77:40:44:8d:c2:7d:80:80:7b:ce:96:51:79:80:a6:46:
f2:db:f8:83:3c:91:eb:9a:55:eb:4f:e3:cf:e8:3c:db:fc:c3:
8b:d6:11:39:91:83:8a:81:7e:48:51:31:9b:f8:f8:d7:e9:60:
07:dd:3e:1f:74:83:4c:3f:99:44:45:89:13:43:5e:d3:52:3b:
79:7d:d5:f1:6a:0d:b0:f5:c0:f3:e9:b2:d5:2f:d9:c8:1d:9f:
39:1f:1b:dc:89:b8:03:b4:d6:5e:41:bc:2f:16:2d:fe:bb:9e:
d2:de:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:24 2025 by rpki-client