Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: rnJ8s+cEQeuf+tvvd3/0kn2oNOnczZUU9itq5QAbzgc=
Subject key identifier: 6B:1B:FB:0C:E0:27:8D:7E:19:68:D6:24:DE:35:68:7C:12:D1:41:2B
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 01988A32D6E42B9D4AD7A731D595A97DF1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 04EF
Signing time: Fri 08 Aug 2025 15:00:44 +0000
Manifest this update: Fri 08 Aug 2025 15:00:44 +0000
Manifest next update: Sat 09 Aug 2025 15:00:44 +0000
Files and hashes: 1: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=)
2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: AL5bRj1+a8p1d24el0u1Z53YwNcQOJba69p2ymDnnis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:32:d6:e4:2b:9d:4a:d7:a7:31:d5:95:a9:7d:f1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Aug 8 15:00:44 2025 GMT
Not After : Aug 9 15:00:44 2025 GMT
Subject: CN=6b1bfb0ce0278d7e1968d624de35687c12d1412b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:24:56:da:d1:88:cb:02:db:77:c2:ac:b8:
50:a7:52:6e:4c:91:6f:e9:2c:3e:58:18:40:f3:0f:
db:88:da:80:ea:e7:21:67:45:4f:5d:0e:cd:1b:a1:
2b:7b:91:4d:23:89:e3:51:04:73:f3:81:d4:ce:23:
09:79:53:45:f8:3b:c4:df:59:1b:41:e8:52:4d:72:
b2:ed:22:cb:1e:48:2e:49:75:3a:c6:d1:9f:d3:bd:
fe:67:05:d0:44:60:f3:96:2d:64:c1:02:06:7a:e8:
df:7c:c8:75:99:b1:cb:0d:a0:f8:52:18:37:06:20:
7c:8c:ce:41:61:62:48:7b:ed:a2:8d:07:d4:e1:a5:
39:07:b0:67:e5:e8:1c:c4:0f:9c:ff:40:51:d8:0f:
09:b4:6a:a8:f1:1a:43:9d:43:87:a9:74:b3:4a:ab:
bb:99:e8:f0:09:fa:bb:2c:6b:13:4e:ad:06:11:19:
bf:f5:5e:ef:4a:82:a1:25:7c:a2:05:9c:f1:fe:6d:
56:9e:f5:38:dc:cb:66:66:ef:94:97:d4:f5:18:3e:
09:d0:63:47:11:62:bc:82:57:e0:4a:15:a5:67:81:
ba:03:07:4a:cd:9d:ec:1d:22:fa:06:a0:15:a4:25:
0a:c4:aa:06:55:61:95:98:42:f0:68:f9:35:81:8b:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:1B:FB:0C:E0:27:8D:7E:19:68:D6:24:DE:35:68:7C:12:D1:41:2B
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:77:0c:c7:f9:1c:03:e3:6f:b1:dc:59:70:55:5f:4e:87:24:
82:8d:54:77:05:f4:1d:9b:4a:80:e6:7b:bb:f2:37:49:80:c6:
f5:c3:e2:72:4a:b4:52:1e:ba:35:13:59:4b:b8:d8:0b:a1:1d:
7a:01:e2:b5:7a:0a:66:62:ff:78:85:f1:74:b7:0b:fd:5c:42:
53:5b:d6:82:2d:ac:0b:84:30:45:f6:db:b0:e7:da:65:ff:89:
05:35:49:5e:48:14:c3:8e:8c:2c:bc:d2:6d:93:20:0a:21:43:
bf:a5:0b:26:4e:fb:80:90:55:70:1f:54:5d:40:01:f0:5e:21:
72:41:38:8c:09:81:93:48:dd:a5:c0:45:26:05:a7:be:bd:cd:
ff:9b:76:27:1c:b1:7f:49:b8:2b:c5:a0:b5:70:b1:b3:03:a5:
ee:0a:ea:dc:03:ed:53:d2:e3:c0:10:a6:50:94:8f:6b:4b:af:
a1:f1:83:72:d4:b2:e2:dd:36:f7:6c:87:3d:59:38:bf:f7:99:
3b:b4:87:1b:23:c8:37:b7:e6:c9:13:0b:e8:40:12:eb:16:8e:
e6:68:d3:34:f4:08:5d:06:8c:62:d3:bb:a3:b8:5e:be:46:63:
ac:55:8e:39:6e:db:2e:62:ee:5b:70:ad:f1:ad:23:eb:53:19:
a3:bf:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:50:10 2025 by rpki-client