Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
File: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft (raw, json)
Hash identifier: O6lDLeZOnFv/nIAkmI+q7IAFVWWcdkrv2qGhsX+HUoA=
Subject key identifier: 99:80:80:C1:26:6A:D5:D3:8D:1D:78:9A:B1:B7:5C:56:0F:02:7A:71
Authority key identifier: AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
Certificate issuer: /CN=abb060166d64cead0e295797e8d27c55d8898bc2
Certificate serial: 019896A5CBC4ADD991480680C8EA7180CBE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:01:44 +0000
Manifest this update: Mon 11 Aug 2025 01:01:44 +0000
Manifest next update: Tue 12 Aug 2025 01:01:44 +0000
Files and hashes: 1: ZVdKIHMCZIgZmO29HfZuK9KianY.roa (hash: 2kGDIO6FKG2t3hXhHnF2iU2nfmaxGFRQZKaQHnUSkxM=)
2: q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl (hash: A/ZgCOl7o2ZeXcxVfLNnojnP27wWyDg/2MTi+eAnc8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:cb:c4:ad:d9:91:48:06:80:c8:ea:71:80:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb060166d64cead0e295797e8d27c55d8898bc2
Validity
Not Before: Aug 11 01:01:44 2025 GMT
Not After : Aug 12 01:01:44 2025 GMT
Subject: CN=998080c1266ad5d38d1d789ab1b75c560f027a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:16:c0:43:72:2f:b6:a5:f0:6d:e5:d8:fd:78:
6f:7c:d7:1e:a0:fc:19:c6:fb:59:7e:f9:92:b4:fe:
97:50:6b:c0:06:89:1f:32:af:d7:26:dd:02:e3:85:
fd:ca:c0:b1:09:d0:02:4c:e6:79:73:fd:89:e2:5f:
9f:d6:a6:cf:0b:6f:d2:b1:73:3c:d7:0e:3d:a7:0a:
24:6e:09:e1:5c:0c:ae:53:8f:25:82:e8:0f:98:1c:
26:e3:d8:f4:b8:ea:b5:39:08:a7:fc:55:3b:64:b6:
33:e4:10:8c:4f:ae:10:21:57:5e:9f:f9:04:51:d5:
db:d1:e9:cd:32:9b:9f:7a:6c:0d:fc:d0:77:ad:16:
f8:db:8b:30:39:80:57:ad:e0:ed:52:c5:eb:dd:c8:
73:e7:e5:41:e0:24:65:62:91:01:03:f6:5e:62:27:
c4:a6:38:33:3b:ea:0a:79:74:8e:6a:a1:93:fc:1c:
08:fd:63:e7:d1:23:db:a2:d7:91:b6:32:05:f2:60:
f4:0e:71:cd:23:a9:63:d6:c0:54:d9:20:b0:6c:69:
81:73:e1:c1:c1:49:76:e4:3a:37:62:1a:e3:b1:70:
6c:ff:cc:86:78:b8:59:7d:88:77:c7:01:9e:f1:b9:
42:a6:2d:98:ad:12:b9:b4:5e:0d:7d:c6:de:8f:16:
d5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:80:80:C1:26:6A:D5:D3:8D:1D:78:9A:B1:B7:5C:56:0F:02:7A:71
X509v3 Authority Key Identifier:
keyid:AB:B0:60:16:6D:64:CE:AD:0E:29:57:97:E8:D2:7C:55:D8:89:8B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f288bd-10f5-47b3-b124-6b136494e3dc/1/q7BgFm1kzq0OKVeX6NJ8VdiJi8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:09:b4:dd:c5:a1:c0:67:c2:53:08:b6:c7:b8:b8:69:45:a0:
21:ba:53:79:14:16:7b:ae:4e:bb:0b:c4:1a:41:47:99:7b:e4:
fc:d2:1c:4b:da:3f:26:08:5f:3b:d2:a8:a3:b6:cb:b8:3c:17:
bb:19:ad:06:91:e8:44:d5:f0:b0:0b:06:7d:28:91:73:65:eb:
ae:1c:5c:26:a7:5f:b9:05:18:41:63:ef:d5:f4:3e:45:d3:4f:
a2:90:fd:80:b6:6e:34:bc:b9:dd:5f:24:55:7d:01:0f:ab:67:
81:d2:99:bc:61:63:dc:7c:c6:a4:84:36:22:27:28:43:e3:97:
dc:5b:8b:4c:e2:e0:7f:43:16:be:13:9f:9d:71:5e:ac:ff:1d:
54:4d:03:6f:88:0d:be:cb:db:b4:3b:6b:77:41:34:75:3f:04:
0b:3e:c8:4c:e6:55:e7:0d:a2:1e:dd:05:6e:72:9a:8b:f2:c6:
c7:7e:9f:cc:a5:ef:c4:bc:67:98:66:e3:ce:bf:6d:03:38:ce:
06:a3:04:5b:77:7f:92:27:60:52:c7:55:fc:83:0f:a2:52:e7:
73:cd:fb:eb:3f:77:8d:48:89:4d:57:ab:c5:1a:3b:8b:76:16:
28:fb:01:38:fd:ac:b3:0d:ce:74:1d:6b:a1:6e:f9:52:80:ad:
aa:61:17:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:24:18 2025 by rpki-client