Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: xo2mULWNTAh20e+1tnQlwV/hTYF096+8+CwNDpGwEqo=
Subject key identifier: 20:D2:20:D4:2B:6D:95:A1:53:D5:11:D6:89:25:88:74:0C:E5:BC:42
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 01976D3D3C06292C946D89084454A48AE3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 07:00:18 +0000
Manifest this update: Sat 14 Jun 2025 07:00:18 +0000
Manifest next update: Sun 15 Jun 2025 07:00:18 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: TEBaODlmDCqhNdveSNP6xcEtL-0.roa (hash: Ni+drEe1sF+jcV53LsQ0wrDEiq7Vue9pJpbJAT7gLcE=)
3: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: Q+rjtDWOAMUcALE4bD6QxA9oulYIyQkmf2TqKtvrHhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:3c:06:29:2c:94:6d:89:08:44:54:a4:8a:e3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Jun 14 07:00:18 2025 GMT
Not After : Jun 15 07:00:18 2025 GMT
Subject: CN=20d220d42b6d95a153d511d6892588740ce5bc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:e9:f6:66:c6:97:89:76:43:5d:d4:d7:68:
24:cc:58:c0:42:7e:6d:cc:fd:08:8c:63:98:4b:28:
9c:2d:26:3b:ca:5f:be:48:1e:39:04:3d:e2:37:1f:
97:87:bc:0a:3e:d6:ed:45:25:5d:57:34:6d:ba:d1:
ab:b9:84:a2:a2:09:79:1e:4d:f8:ac:97:29:13:7c:
e4:fd:98:61:8a:8b:ae:ce:6f:89:32:6d:17:50:a8:
6b:22:3c:31:e5:6c:49:65:32:94:7e:69:21:88:ea:
56:cd:3c:73:71:c6:77:ad:df:8c:0b:26:b7:70:89:
82:ce:67:e3:97:b7:4d:9d:bc:c8:4a:a3:14:77:bf:
0b:a3:06:85:69:2d:f4:1e:f9:fa:31:b5:de:0d:9d:
06:c6:e5:dc:0d:82:7b:b2:7e:7e:82:f3:5b:95:5b:
55:84:d4:28:48:c6:d7:f9:6a:c0:7e:1f:56:f1:fe:
d3:16:92:64:ac:3c:a1:05:41:8b:ef:28:c3:28:53:
96:c5:66:2e:63:5d:be:a7:5e:0a:37:3e:b9:9f:85:
e4:d9:3d:7d:8e:bd:d5:ec:be:b0:09:a5:24:11:74:
c3:8b:27:27:3d:be:9a:eb:15:64:7b:d8:be:9d:09:
4e:7f:40:af:4b:30:c5:3e:e6:10:c0:36:0b:93:93:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:20:D4:2B:6D:95:A1:53:D5:11:D6:89:25:88:74:0C:E5:BC:42
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:78:91:25:c0:0f:cf:f7:10:90:eb:c9:a2:61:3a:8d:c9:43:
d0:05:cd:42:be:ac:c9:c1:78:ae:9e:ff:18:2c:1b:ac:fd:20:
02:e8:79:27:94:0b:7d:22:60:c6:6e:47:80:f8:5f:81:a2:64:
99:75:65:1b:40:4e:4a:e2:03:c7:83:ad:07:27:fb:a7:d3:8f:
2d:4b:68:d1:17:ab:f9:44:e8:3f:e2:9f:78:00:1e:b3:34:31:
24:ab:fa:25:8d:cc:15:5f:18:83:99:19:d4:38:18:dd:f1:68:
c4:50:16:c6:85:89:7d:de:b3:d5:c4:fa:3b:5c:a5:24:8e:77:
62:e0:4d:10:d6:76:ba:c5:52:ea:ee:3d:ea:39:15:db:12:2f:
29:c9:ec:ab:46:46:d9:60:54:27:3c:8a:6b:29:2e:44:34:6d:
98:ee:09:78:b0:de:c5:3c:3f:69:c6:f9:81:90:7b:e0:20:04:
d7:d1:33:94:89:5d:c2:9e:96:a8:1c:0a:b0:95:f3:16:0f:d5:
da:85:c5:af:db:9a:b1:54:30:5d:30:ed:e5:77:65:26:ff:b7:
f4:42:20:e2:75:ff:50:1e:bd:09:00:9e:7b:1e:b8:3c:cb:4b:
d4:ca:18:84:ba:4d:93:72:71:62:ea:89:06:27:96:8e:16:cf:
55:90:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:23 2025 by rpki-client