Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier: DyuBy2YeV1TpCdzS2YbHCy5J3eNyAMBcZHJlEBqRTlA=
Subject key identifier: CA:A5:B6:9D:71:CF:86:16:4D:A4:75:C1:61:A9:8A:FB:0A:36:38:05
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 019898251E5A7074B4D79687AEB785B23662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number: 012F
Signing time: Mon 11 Aug 2025 08:00:25 +0000
Manifest this update: Mon 11 Aug 2025 08:00:25 +0000
Manifest next update: Tue 12 Aug 2025 08:00:25 +0000
Files and hashes: 1: 7abujg5YyGw-Dy5kOxbayEhXp8E.roa (hash: lOz5VIr6Vz6VAh0bdDShfDUIzKOutVJzrANsECMkN+c=)
2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: PzPJj1uJ4gmdwMvzlGkawkekvLVF64HadpJC0tpwvx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:1e:5a:70:74:b4:d7:96:87:ae:b7:85:b2:36:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: Aug 11 08:00:25 2025 GMT
Not After : Aug 12 08:00:25 2025 GMT
Subject: CN=caa5b69d71cf86164da475c161a98afb0a363805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:21:8b:32:87:0e:45:a5:32:e9:6e:7f:b3:
4d:bd:ef:15:0a:03:e5:68:45:e8:b1:7e:c4:c5:15:
68:e3:e1:ad:97:10:48:db:43:a0:90:1d:e3:85:6b:
b7:c1:b5:8a:c4:17:54:69:aa:f6:b6:68:db:6a:e4:
9e:c8:53:e6:bf:a8:0e:f6:b0:c8:1b:af:8f:af:69:
f0:59:fb:1d:66:fb:fb:8e:ef:d5:df:e2:88:d4:8a:
b9:39:a7:c0:6f:52:76:eb:f0:28:b6:b6:8a:6c:28:
6b:50:b6:21:fe:c2:e2:40:66:bd:a1:ba:c3:b8:f2:
55:45:86:37:7c:b8:8a:19:07:64:b6:79:fe:52:0b:
ee:d8:f8:2b:d0:13:da:bf:d7:ee:48:48:7a:63:8d:
26:3b:b8:87:95:bf:7b:84:d3:98:41:c3:91:68:88:
5b:7e:99:86:7e:6a:1d:90:8d:ac:05:72:57:0d:f9:
99:95:f9:93:58:23:5d:e0:fa:e7:d2:67:11:8c:12:
1e:ac:de:ea:9f:dd:11:80:09:f0:37:5e:06:42:ee:
8d:f4:07:d7:27:f5:0a:f7:b9:c5:bf:a8:1c:a1:e4:
2a:fb:0d:b7:91:cd:f8:81:2e:a8:94:ae:45:2d:93:
c8:8b:36:df:df:1f:1c:7c:7c:07:31:90:7e:15:67:
dc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A5:B6:9D:71:CF:86:16:4D:A4:75:C1:61:A9:8A:FB:0A:36:38:05
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:27:4c:c0:85:f6:83:fd:db:5e:71:d4:50:45:ab:e1:2b:ff:
9c:a6:da:f9:e6:83:d9:e1:dc:00:30:42:8f:6c:45:64:30:3b:
a6:c5:45:42:5d:2a:19:60:91:88:b3:5b:fe:20:a6:4f:cb:59:
35:c1:fd:f0:dd:08:02:99:23:15:ce:d0:33:2f:0b:b5:94:d5:
5e:46:04:88:35:0e:d0:34:9a:ba:15:42:92:a1:f1:c0:41:e6:
ab:16:12:e2:61:86:44:f3:23:54:92:e1:8b:00:3a:c2:c5:6e:
37:d8:8d:5f:4c:81:2f:25:a1:37:1a:0b:5c:05:18:a5:8a:db:
37:01:89:dd:c4:c1:58:50:05:73:cd:ca:1d:19:10:c0:9b:70:
35:ee:5b:fe:86:29:f1:93:e3:33:b8:f6:fc:74:95:c1:bb:bc:
ce:95:fd:1f:d1:e5:81:e3:49:a5:67:e0:95:ef:69:df:3e:8a:
16:f6:96:e6:20:16:1d:a6:26:e9:02:be:6e:82:49:31:fb:e5:
60:64:ac:f2:be:45:b8:e0:81:77:c9:90:a6:90:c6:e6:b7:31:
83:c5:b8:90:23:09:10:57:10:83:26:9f:0b:6a:0b:19:c4:c9:
0b:50:a6:c0:c6:a9:c8:95:e3:47:7a:80:94:bb:f0:41:41:b8:
80:61:45:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:52:23 2025 by rpki-client