Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: /WwAiuL0gaNNBKjH3PxXdDJKQjd7yCAeVv0zkWep7Zo=
Subject key identifier: 2E:C3:38:80:9E:10:5A:05:57:28:3F:EE:27:F5:18:45:BA:F9:BE:96
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 0198D6986ED7EE1755CA588DD9DF85E95315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: rLLCswximrikIzh4YR0PBGYcgpkAv9VPLuMMlJq3HnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6e:d7:ee:17:55:ca:58:8d:d9:df:85:e9:53:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=2ec338809e105a0557283fee27f51845baf9be96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:e2:53:a5:53:f7:93:40:c4:e1:f6:1a:d8:
dd:84:06:66:a3:f3:25:94:3d:dd:ce:66:54:9e:59:
d9:da:9d:a0:0b:c0:2b:ba:c1:fd:98:b8:0f:fe:ba:
bc:ba:70:45:54:19:7d:95:74:6d:cc:a1:09:ab:26:
e7:d5:77:2d:e2:c9:8f:82:2d:ae:74:df:bf:93:62:
a4:c6:74:1f:d0:fe:50:7e:47:64:6f:f8:80:60:cd:
6c:25:ff:63:a3:b3:3c:02:25:cf:0d:cd:60:e8:b1:
ec:fa:27:c5:23:28:9c:1c:fe:08:d0:98:38:a6:6d:
de:0f:a9:b0:35:33:0d:4a:27:71:d1:46:3b:f5:48:
32:5f:57:21:fd:6d:c3:42:f3:05:a4:3e:19:1d:9d:
61:6e:31:d0:bc:36:65:0c:30:b5:55:6d:1f:a4:11:
13:bd:ee:31:9c:4f:58:4f:13:45:1d:3a:72:2a:0b:
43:b7:38:ca:7f:b3:40:2d:8e:5a:f1:6f:13:68:ce:
35:a4:cc:e6:3f:b7:e9:b7:ab:7c:d5:c7:b4:21:a1:
2a:dd:1d:0f:1c:83:56:60:0b:88:40:99:7b:21:ef:
33:83:87:b5:79:2d:c2:6a:f9:44:24:ec:30:98:61:
fd:b5:3e:d3:b3:c2:3d:b2:f5:82:fe:b2:1d:79:5a:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C3:38:80:9E:10:5A:05:57:28:3F:EE:27:F5:18:45:BA:F9:BE:96
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b0:b2:46:aa:fb:71:ca:8d:37:59:00:0e:a5:93:3c:60:d4:
c7:4c:12:db:ad:ce:bc:b9:83:15:5a:a7:1b:4f:c0:63:74:9e:
ae:1b:95:fc:e1:29:5f:5a:14:b3:d3:76:88:7e:44:df:83:fa:
56:13:87:38:08:2e:2f:5a:fb:c4:cf:f4:6e:30:1d:00:a0:f6:
3a:9e:9f:b2:bc:9d:39:09:47:0c:5b:3a:6e:15:b3:e0:9f:46:
f2:cc:8a:93:50:e1:5f:12:5d:10:ab:1b:8b:40:bd:11:a6:d4:
99:3d:19:53:da:6d:48:28:db:e6:aa:69:fd:cd:75:81:27:5b:
22:6d:bf:54:9c:c5:ca:e1:c7:06:ff:10:05:00:ef:a9:4e:75:
66:18:b3:8a:0a:8c:f8:87:04:cd:45:08:62:a3:7a:10:52:b0:
b6:79:2c:ff:96:49:a1:36:bc:75:32:e6:9b:69:db:2e:fb:7e:
ba:56:4a:52:22:ce:c7:21:8f:23:a6:d7:9d:e9:b4:b5:d0:25:
b6:90:f4:89:a0:3d:b6:e2:a8:0d:2d:16:1c:a8:03:1e:41:e9:
72:aa:f9:9d:5a:d9:46:09:1c:27:13:27:41:4a:7e:af:74:b6:
00:80:6c:9d:2e:d5:72:ce:3a:3b:6a:f5:ea:9e:c4:59:db:06:
24:81:61:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:03 2025 by rpki-client