Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: /tBXgJ06Hox/uCn4e8ILz8lWVrSChquE9proo2H6Elo=
Subject key identifier: 0A:32:D6:09:1F:BD:25:12:51:A5:BE:3B:A3:23:C6:DD:DA:35:AF:C9
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 01987DF86BD20D5804861E1A3C6AA7438063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 06:01:29 +0000
Manifest this update: Wed 06 Aug 2025 06:01:29 +0000
Manifest next update: Thu 07 Aug 2025 06:01:29 +0000
Files and hashes: 1: XtZEW_Ge-fj7ts452exDji_sEMc.roa (hash: Z3qqH40xAjBbJprbXnVydXKDBxTyDTfpQSqRlWz/dFs=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: QLVuAKovgz9ONdnKTjOjQTZM0FnRn80viV00TlnZ/iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:6b:d2:0d:58:04:86:1e:1a:3c:6a:a7:43:80:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Aug 6 06:01:29 2025 GMT
Not After : Aug 7 06:01:29 2025 GMT
Subject: CN=0a32d6091fbd251251a5be3ba323c6ddda35afc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:5b:16:d3:1e:c6:93:86:71:9c:96:8c:34:
9c:bd:82:e7:f2:c9:04:04:32:21:ed:09:78:08:de:
0d:e6:2c:e1:bc:e0:38:71:9b:5e:b7:cf:00:d6:3e:
54:c7:f2:4a:df:e9:69:ff:c5:d5:1c:41:09:39:75:
de:1a:12:38:a2:7e:95:f5:d7:9f:fe:61:27:04:f8:
7d:d1:2b:61:b8:43:ac:05:d1:57:b1:12:a6:42:b6:
4f:91:71:69:41:7f:e2:f0:19:00:61:f9:62:08:80:
c5:a4:82:b1:dd:46:89:ee:1b:50:09:df:b9:66:88:
82:0f:6b:54:01:e7:7f:df:7e:39:cd:9f:bd:da:34:
c1:e2:26:0e:93:90:1e:50:57:4f:22:70:04:76:e8:
71:bd:2a:ad:a7:49:45:c4:e3:96:71:6b:ec:20:cd:
d3:a3:93:75:34:91:5e:21:80:5e:ef:bf:d2:1e:db:
55:f3:6d:16:82:07:84:87:c7:f1:92:d1:7a:9f:6f:
e2:7a:9f:3c:d8:d4:de:35:fa:c8:83:af:3b:85:a7:
55:77:e1:3a:89:4d:c4:94:f3:87:a5:63:4c:7e:9a:
30:a5:24:1c:93:0d:4a:62:cb:e8:1e:d4:59:e2:8e:
dd:71:9d:fd:0a:ba:9e:b5:a0:8e:03:46:54:74:8d:
4d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:32:D6:09:1F:BD:25:12:51:A5:BE:3B:A3:23:C6:DD:DA:35:AF:C9
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f6:2e:fc:04:0f:ed:47:4b:ff:69:ca:80:93:2b:94:76:ab:
73:3e:00:a2:b9:e2:e5:3b:6d:34:53:65:b1:50:43:05:92:41:
35:f2:cc:d7:ed:41:98:e3:23:c3:c0:53:05:06:dd:b0:7a:d6:
74:d6:34:3f:a4:d4:e4:d5:65:bb:b3:3c:17:00:c9:42:ee:49:
03:47:2e:6d:cc:0b:1c:6c:9c:78:89:c3:68:54:44:2c:dc:1e:
42:1e:92:d6:66:f6:1f:bb:18:8a:ae:54:c3:82:ea:94:8d:97:
44:da:05:f4:ac:09:2d:29:4d:93:e4:49:de:1a:0b:b8:07:08:
2d:a9:10:df:80:c4:c8:a9:0c:1b:7e:88:c1:5c:7f:d0:f4:70:
44:c7:dc:1c:79:28:46:5b:65:b8:3d:f8:0e:bc:fa:42:e0:f8:
64:4f:a6:60:e7:83:62:54:33:f2:da:aa:b1:36:6d:ce:b2:71:
1b:96:23:d1:d3:1b:a4:6b:fc:c9:bf:4c:65:77:56:16:3c:69:
a7:d9:84:d9:8d:c0:a2:32:b0:c8:ad:36:14:84:52:0d:32:73:
0c:26:cd:f3:32:7e:d3:73:df:e0:24:27:37:0d:57:06:2f:fb:
c0:86:50:cd:26:cd:f7:21:fb:bb:bf:1c:ff:6b:cc:ad:a1:e5:
85:af:a2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:39 2025 by rpki-client