Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json)
Hash identifier: FNGnRo2IVF3p7aOpafBKlD2NGMTmnoJUXu28Bj6apvQ=
Subject key identifier: 86:AD:62:8C:1A:EA:8B:86:5B:39:F6:A8:CE:7B:DF:6E:73:F6:0C:2E
Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Certificate serial: 0198887BD426B77377B321AFDCC0C1A4A2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 07:01:13 +0000
Manifest this update: Fri 08 Aug 2025 07:01:13 +0000
Manifest next update: Sat 09 Aug 2025 07:01:13 +0000
Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=)
2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: rwO47xhTdlHGM9OEDiZa8krFGxGpcGJTWSvjoJvoiGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:d4:26:b7:73:77:b3:21:af:dc:c0:c1:a4:a2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88
Validity
Not Before: Aug 8 07:01:13 2025 GMT
Not After : Aug 9 07:01:13 2025 GMT
Subject: CN=86ad628c1aea8b865b39f6a8ce7bdf6e73f60c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:07:d6:48:85:1d:8b:23:a9:ab:80:4d:2c:a3:
f8:86:6d:38:dc:ba:98:b6:a4:c2:b9:32:7d:87:be:
58:2b:94:ef:07:08:6a:6a:e5:d8:6c:03:37:8c:c5:
1f:dd:6d:38:9e:67:14:05:1a:1d:c3:f6:60:ee:8a:
2b:11:24:c0:e3:34:9e:16:dc:d3:9d:aa:7c:dc:37:
14:f8:31:36:c4:f1:01:1e:bf:dc:6a:e1:48:f5:d1:
ff:01:27:83:6f:d7:a6:8e:a0:b3:8e:09:6f:7d:f2:
c2:29:1b:d9:19:e8:0d:9a:d0:0f:d9:9e:0c:f5:06:
d9:46:e9:50:e7:47:c4:69:75:66:72:42:b0:b7:a5:
86:81:14:43:69:01:c9:7d:ff:87:03:fa:9f:27:b7:
6a:32:89:10:ca:fe:95:89:4a:9b:ed:55:32:c3:6d:
e0:02:d9:02:dc:57:e6:2a:34:35:69:2f:a6:58:6d:
85:b8:cd:22:13:92:59:5f:e6:07:cc:49:42:84:c8:
ed:69:dc:79:42:db:99:39:6d:bf:10:4a:de:65:63:
08:ba:d1:13:ad:03:a0:c6:da:e9:5b:d6:1d:8e:8f:
9f:23:61:42:7a:9b:de:d9:38:df:2d:2b:d0:23:57:
c0:e9:33:72:91:56:1c:42:98:4f:ac:0d:d2:2c:b1:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:62:8C:1A:EA:8B:86:5B:39:F6:A8:CE:7B:DF:6E:73:F6:0C:2E
X509v3 Authority Key Identifier:
keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:34:bd:e1:31:8d:e9:e3:fc:70:93:fc:c4:b1:67:c6:90:e0:
05:62:a5:c1:98:02:27:54:ae:35:c7:d2:d3:0c:9d:1b:97:92:
9a:34:ab:d0:45:6b:2c:b2:5f:17:58:3c:a7:c8:c1:7d:e0:ed:
9e:0c:9e:42:e7:4e:fc:08:d3:47:07:e4:d4:51:ee:f4:56:d4:
99:fc:e4:49:95:6f:1f:45:60:96:5b:fd:a6:b6:3a:fe:d4:15:
74:92:b5:04:0b:21:bc:a0:80:39:08:03:b8:81:95:a8:cb:63:
2e:66:56:bc:3c:e5:74:0e:8c:2b:50:a3:1d:24:08:08:85:d6:
93:69:2b:54:6e:b5:cb:8c:89:80:44:4f:81:8b:32:43:8d:20:
d7:1f:f1:ce:ac:3b:5d:d2:2e:99:a0:59:47:12:68:a3:4f:17:
4a:87:17:c2:bf:0e:05:d8:28:ab:d6:e0:da:61:a3:83:7f:79:
2a:4f:c1:57:07:1b:9b:d2:73:23:12:1f:e4:8a:7b:58:af:17:
23:d5:40:0a:5e:0b:bc:5d:f0:c5:db:e3:e0:8f:b7:d1:99:07:
b4:2a:eb:da:f4:f3:05:6b:e7:09:3b:42:3f:07:15:db:d0:3c:
d8:eb:b9:e5:51:31:30:de:6c:d2:92:16:4a:44:02:44:84:f9:
cf:70:ac:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:03 2025 by rpki-client