Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: os+wPJu/lKAqUSEdJ47rPA+iY51slNzWc7oC01hKqbo=
Subject key identifier: 0D:E0:76:F6:F0:FF:04:B3:35:3F:7F:60:DB:D6:6B:6C:98:8D:49:3D
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 01987C77903DE172D8067B49E2D72D07D2BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 23:01:07 +0000
Manifest this update: Tue 05 Aug 2025 23:01:07 +0000
Manifest next update: Wed 06 Aug 2025 23:01:07 +0000
Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: sT4OCmz+m18xboR90kYoRQrmbIfD8L5kPC/2yFKNb64=)
2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:90:3d:e1:72:d8:06:7b:49:e2:d7:2d:07:d2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Aug 5 23:01:07 2025 GMT
Not After : Aug 6 23:01:07 2025 GMT
Subject: CN=0de076f6f0ff04b3353f7f60dbd66b6c988d493d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1a:49:0d:26:35:10:12:6b:9e:d1:5a:e8:08:
f8:17:76:70:97:8a:0b:d1:1b:59:3a:91:ba:42:8b:
5b:6d:4a:60:a7:5f:fc:b7:84:87:46:ca:b1:bc:62:
e2:9f:24:0a:cd:ab:f3:9f:a7:29:e8:16:d6:01:44:
35:01:30:fd:f2:6a:3e:60:1c:21:04:4c:ed:2c:91:
70:71:47:b9:63:c6:54:7e:56:1f:3f:5d:4f:c7:93:
61:5a:b4:91:12:46:b9:6c:56:ae:ce:eb:42:29:75:
6c:d3:6a:b9:04:39:f2:be:6a:80:a2:e4:ae:38:5f:
53:ee:16:7d:66:2a:fb:76:39:0e:19:5e:b1:49:23:
4c:49:60:a7:5a:c7:95:c9:dd:41:d7:94:6f:e1:af:
3e:1c:fd:ea:8e:1d:25:c7:25:53:86:bb:3f:2a:ec:
bb:59:d1:49:8e:e3:44:b7:54:26:69:20:42:6a:d0:
1a:ad:ed:5e:22:62:a4:09:d7:a7:7a:89:1f:c8:76:
45:e1:ce:52:2f:09:c4:df:b7:b8:72:e5:65:bf:f2:
d0:f4:4c:da:45:f2:05:b6:6b:0f:21:87:24:d7:2d:
d6:da:ce:4c:28:2e:b5:c5:e8:30:b8:ef:e2:d3:3f:
6c:54:b3:4a:db:31:15:07:47:2a:ff:da:82:18:9b:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:76:F6:F0:FF:04:B3:35:3F:7F:60:DB:D6:6B:6C:98:8D:49:3D
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e9:dc:c1:36:d0:b2:85:c3:65:1e:ba:a8:97:5e:05:40:e8:
4e:3b:bb:ac:6e:5f:74:8d:61:7c:56:02:5d:ef:49:c4:08:c2:
0b:1f:4d:b3:f0:27:bc:a8:21:01:82:04:55:0d:ec:3a:dd:fb:
dc:2e:ca:f9:9e:f3:91:98:62:e4:78:a5:40:57:a3:ad:69:f3:
52:20:7d:e8:68:2f:13:f4:15:08:69:a4:c6:df:e0:f8:bd:42:
72:47:66:a4:47:ca:e8:a7:12:69:f6:5c:b7:db:32:67:14:a5:
8e:58:1c:14:a7:b0:c4:3b:0d:aa:f4:4e:b1:1a:5b:12:98:3c:
27:af:fe:7c:a0:24:f3:2e:1e:c4:4f:10:64:ea:7c:89:db:88:
77:46:cc:87:03:4e:7c:39:6b:89:45:b4:9f:e4:65:00:10:50:
56:fe:15:5c:32:75:0b:8d:53:0c:85:b1:87:a5:03:f7:93:ab:
dd:8e:a8:fe:21:a1:db:4b:e8:00:23:a8:e5:78:63:a6:ec:55:
48:a5:d0:8c:5e:5a:9f:46:55:6e:39:f2:d9:be:85:69:04:80:
a8:90:c0:2b:ad:f4:36:e0:4a:da:2f:a2:12:ec:18:53:0b:7d:
6b:d8:39:63:41:86:61:55:c5:3b:e5:16:b6:8f:4d:3a:e6:f7:
7d:74:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:57 2025 by rpki-client