Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
File: q5ddtDeN_KfClTuG07GNyLIY7Gs.mft (raw, json)
Hash identifier: pbQRhW5ZTRnhH7eL1MJYkfuBuoD/ZqQHNbGu28ORHn4=
Subject key identifier: B3:CD:38:80:A5:15:2C:A4:43:44:CD:B7:67:82:1C:BE:24:85:35:CE
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 0198880D7318B7CD50F09E09ACC649417D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
Manifest number: 0DA6
Signing time: Fri 08 Aug 2025 05:00:39 +0000
Manifest this update: Fri 08 Aug 2025 05:00:39 +0000
Manifest next update: Sat 09 Aug 2025 05:00:39 +0000
Files and hashes: 1: RbouPlrvjxMByw-unVzRP4nNXJw.roa (hash: XJEjUdWYmJvOBDOP+ovs4X9aLXbBgk9gR+EZ+bBT2d8=)
2: f1kmm1viP1JpShChN2T-8khwmCE.roa (hash: oA16peDdFaNYYVYRr7l06EBaQutaxn0Ux8cCt1MZLyc=)
3: q5ddtDeN_KfClTuG07GNyLIY7Gs.crl (hash: OBkjhCQKPOI+HfEN2IAZjriT3npyfqIu5tcitj8yo7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:73:18:b7:cd:50:f0:9e:09:ac:c6:49:41:7d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Aug 8 05:00:39 2025 GMT
Not After : Aug 9 05:00:39 2025 GMT
Subject: CN=b3cd3880a5152ca44344cdb767821cbe248535ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:3b:cf:b4:27:c3:b2:c5:f9:c5:4a:d0:df:
be:b3:67:3d:f5:6e:12:07:27:c5:64:f5:32:bf:64:
ce:9e:ab:a3:41:55:94:65:90:8f:29:77:f0:c9:6c:
8f:50:f9:4e:71:85:65:5c:45:b5:6c:da:17:eb:75:
48:3b:b9:0e:76:cb:40:d6:20:23:5c:1a:6f:78:a8:
e5:0e:6b:fc:e2:37:5f:69:9f:06:46:67:a1:fa:d8:
bb:7e:a7:eb:52:41:4c:0d:c4:4d:aa:e8:62:e3:2d:
32:19:b6:5e:c1:ee:51:64:6a:cc:f6:e0:1c:96:ea:
3d:5a:cb:3d:fb:17:7f:07:3e:e1:16:da:ee:d7:73:
68:d6:0e:fe:56:da:ef:91:d1:96:e8:47:22:6c:66:
47:d1:01:71:26:c2:6b:89:cf:48:d2:81:5f:30:17:
dc:88:b1:cd:19:6f:00:63:c9:55:3b:2e:df:a2:76:
ea:6d:e0:46:87:8e:68:f4:6b:c5:0e:a5:27:03:13:
b1:38:4f:2a:d5:b3:ef:87:2e:10:af:45:2f:73:80:
48:79:b5:fa:03:ef:f9:dd:2a:d6:c6:c8:44:6a:d9:
ec:01:30:22:63:f6:15:5c:07:a3:d0:35:99:b0:1a:
bd:58:a1:d7:19:77:d7:8c:0f:93:84:fa:f0:dd:e7:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CD:38:80:A5:15:2C:A4:43:44:CD:B7:67:82:1C:BE:24:85:35:CE
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:e4:23:74:90:88:7b:ca:3e:e1:b0:ae:aa:ad:00:f9:9b:18:
e5:e8:8c:bd:53:7b:17:8e:d6:45:ea:c7:55:cc:b7:dd:ed:09:
47:fd:33:46:41:4d:62:48:d0:da:17:c1:f0:b9:33:80:c1:dd:
f8:98:bd:6f:10:a8:5a:74:d5:e8:4e:cc:38:97:97:e5:23:c0:
7a:30:34:d6:e1:a7:0b:55:8b:7b:f9:f2:70:8b:68:f9:84:a5:
f7:ec:a9:db:4d:22:d8:69:56:dc:16:81:c8:75:f2:7e:40:2c:
93:c5:b3:bb:69:83:9f:ec:e2:cd:6b:27:46:e2:a9:2c:6e:bf:
11:e5:92:e9:c5:1d:ab:ee:61:d3:15:57:19:34:19:26:63:07:
ff:69:7b:a4:fd:75:15:81:34:7d:29:79:be:7d:fa:97:53:0b:
4b:bc:22:7f:48:fb:19:ff:ac:9b:d8:bf:a7:5f:2c:a4:9b:85:
ce:73:c5:e0:63:7c:8f:6d:55:ec:72:99:57:8c:d4:fa:2c:94:
c6:b8:e4:11:3c:0f:91:a0:f1:8b:a3:c1:29:55:15:19:8b:06:
8e:70:13:21:0a:14:3f:f5:ae:69:d0:06:f3:ad:8e:e9:c0:16:
6d:74:f8:47:6a:a6:30:06:dc:2b:9e:5c:45:fb:44:7a:00:cf:
6a:ee:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:40 2025 by rpki-client