Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
File: q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json)
Hash identifier: 8s7li0R3HxCbH9V8Nf8eWcR/9haANIU5pa1fw/afzAQ=
Subject key identifier: 8D:85:77:4E:33:49:D6:26:E5:E1:77:D6:82:5B:84:6B:93:76:76:E7
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Certificate issuer: /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial: 0198D65FFE571DEF4A9D601AB75268BD7801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
Manifest number: 0795
Signing time: Sat 23 Aug 2025 10:01:11 +0000
Manifest this update: Sat 23 Aug 2025 10:01:11 +0000
Manifest next update: Sun 24 Aug 2025 10:01:11 +0000
Files and hashes: 1: 0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa (hash: 4213R6OjAd56bVYP7rVqWPE8P8Ej5z/x2DZxc07Sx3o=)
2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: /pV3mxdIQHurLgbL5WvdA28GXmWQjgqUqTeT4QCm5cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:fe:57:1d:ef:4a:9d:60:1a:b7:52:68:bd:78:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Validity
Not Before: Aug 23 10:01:11 2025 GMT
Not After : Aug 24 10:01:11 2025 GMT
Subject: CN=8d85774e3349d626e5e177d6825b846b937676e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:d2:c0:13:d9:08:1c:a1:f6:7b:33:17:c4:
16:41:c6:4b:e8:6c:1f:d5:4d:6e:15:ce:80:15:82:
b1:ee:7c:85:7d:6b:52:c3:62:c9:fe:68:de:ea:50:
37:99:09:48:56:63:c2:f7:3e:39:1b:3e:fe:01:30:
99:2f:ce:be:9e:e4:54:a1:f6:e5:87:15:43:72:a4:
17:72:2a:bc:fe:39:4d:7d:14:4c:3b:59:15:32:d0:
53:22:bd:6e:ea:a5:50:82:3b:be:38:cf:c5:d5:59:
92:dc:31:62:ea:7d:63:ca:77:42:fa:9c:89:66:14:
6f:b0:76:b5:33:09:16:0e:95:a7:95:56:66:11:d5:
d6:dc:9e:55:ed:ea:ae:d3:89:99:52:ba:b7:6a:b4:
a6:1a:09:27:a5:34:4e:c5:f3:93:97:db:46:81:ae:
31:aa:be:7c:e4:06:ec:b7:a1:5f:06:8d:38:48:84:
50:55:4c:7e:6b:3d:4f:2d:0f:8d:9d:b8:5e:c6:a8:
0a:f2:1b:9e:f7:12:9f:70:fb:45:96:1f:90:99:b6:
4f:c7:ee:f6:2a:2d:3b:69:67:19:ed:51:d8:d4:25:
22:8b:54:ed:ce:f0:ba:e7:73:9c:69:88:79:ba:59:
a0:3f:dd:c5:52:78:f2:a7:c5:99:9e:8f:62:be:f3:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:85:77:4E:33:49:D6:26:E5:E1:77:D6:82:5B:84:6B:93:76:76:E7
X509v3 Authority Key Identifier:
keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d7:4a:e4:de:bd:0d:78:79:a7:8e:22:7a:02:d7:fb:7d:c9:
80:cf:6f:ef:9d:0b:70:0d:9d:f8:63:59:80:34:8e:60:54:9b:
5b:7e:44:16:27:7e:aa:3d:1a:37:05:7e:03:7e:27:e4:f6:e7:
24:2f:79:cc:91:3f:af:41:84:a4:a5:64:c5:bd:01:a3:49:30:
fb:14:dd:9a:c8:8a:eb:3f:12:17:3d:b4:e4:c1:e0:a9:3a:21:
1b:9e:12:00:5f:8c:36:58:13:e4:54:97:2f:4b:72:76:5c:80:
35:59:2d:75:7a:b5:94:ee:21:31:85:58:c5:d2:8f:16:28:a6:
ca:aa:89:a4:cc:ab:3d:03:56:4e:b7:72:3a:bd:aa:50:d8:d7:
88:0d:7c:6c:68:c6:65:d8:bb:05:a3:df:ae:69:b2:50:89:62:
82:87:4b:c2:2b:3b:8b:4b:ba:53:0d:7b:65:d5:73:79:61:4d:
08:47:1c:16:3d:3d:8c:9e:d9:5c:a2:64:06:af:2d:52:8a:89:
ee:ea:78:a2:7f:d6:57:ad:d9:75:ee:3e:1a:37:9d:49:0f:64:
cb:7a:56:4b:b4:f4:6f:63:66:03:a3:49:05:0c:de:53:37:34:
c9:84:50:de:27:27:6a:3b:46:79:86:2a:9f:1f:ff:86:41:0d:
04:1a:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:17 2025 by rpki-client