Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
File: q3qquyPNJFv6go-wJSHWRMbVtWY.mft (raw, json)
Hash identifier: PrRmQD3tJPnkxL9NPBtcmTGVWFtj9QJ/hcnQYKEl1RQ=
Subject key identifier: 0A:4D:42:FF:AE:FC:BE:5C:2B:67:7A:78:BC:C6:11:0C:90:B8:42:F9
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 01987ABFD7573BF1CB0FB2BAC5211A5E52AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
Manifest number: 1301
Signing time: Tue 05 Aug 2025 15:00:49 +0000
Manifest this update: Tue 05 Aug 2025 15:00:49 +0000
Manifest next update: Wed 06 Aug 2025 15:00:49 +0000
Files and hashes: 1: bgfztVWShrtQVnnUy79Uwf2ad-U.roa (hash: 6rNqpGYtQ5hCAICw5R79FB5nCbidIpeSHwH6YCdW27k=)
2: q3qquyPNJFv6go-wJSHWRMbVtWY.crl (hash: 6Y2hXEhkuaepxMjBqygw/9IWJb11tFWstJ5yEz5rowo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:d7:57:3b:f1:cb:0f:b2:ba:c5:21:1a:5e:52:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Aug 5 15:00:49 2025 GMT
Not After : Aug 6 15:00:49 2025 GMT
Subject: CN=0a4d42ffaefcbe5c2b677a78bcc6110c90b842f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:a3:55:ea:38:1b:15:6f:bf:49:b9:60:23:
78:61:b7:10:c4:9a:ba:c8:e9:fb:fc:96:f9:32:79:
41:66:10:c7:9c:9a:42:96:46:a1:a1:de:b9:63:a8:
9f:4e:cb:c7:44:43:5c:10:28:f9:c6:57:9c:62:73:
97:f8:30:dd:b6:ce:c5:aa:08:72:0e:81:db:2e:2e:
33:4f:85:74:17:da:b1:2d:62:a1:9d:81:0b:33:d1:
e8:30:3f:3b:7f:b3:e3:65:c8:f5:31:71:31:be:f8:
26:f5:eb:f9:f2:b7:39:bd:11:66:e1:a0:ab:b1:40:
2f:f3:62:a4:0e:02:52:08:bb:0c:73:43:eb:e1:7b:
af:95:9c:58:1f:03:89:c4:9e:31:60:d2:fd:9d:cd:
f8:e0:a3:01:c3:fd:d7:a0:67:53:b8:c1:e2:5b:44:
45:e0:2d:31:80:c7:75:a9:9c:30:a8:c4:59:96:92:
8f:57:c1:1a:8a:84:79:3a:2d:1a:4b:86:a4:d4:3d:
4f:a7:82:d4:88:67:f6:a0:26:ee:ab:98:e9:6f:a5:
86:10:19:2c:d2:08:fd:8f:ba:0b:52:e5:8d:a4:54:
b4:cf:dc:d0:64:52:06:7b:fa:c2:ab:ba:24:5f:da:
bb:4e:47:3e:55:02:44:b2:26:cf:e0:f5:5e:e3:b6:
ce:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4D:42:FF:AE:FC:BE:5C:2B:67:7A:78:BC:C6:11:0C:90:B8:42:F9
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:12:10:e3:a1:b5:57:01:06:c4:a5:15:16:d7:f6:b7:87:3b:
21:98:4d:c1:d4:27:15:4a:d5:a5:09:c1:fc:ab:b1:d7:38:73:
a9:c0:44:55:cf:54:97:0d:1c:d4:8f:ed:ab:4b:d6:40:38:68:
53:8f:88:7e:84:03:c8:21:35:36:1c:5b:8f:1a:c3:e1:bd:fa:
b9:04:fe:b1:40:e9:46:5c:bd:c9:8a:68:49:68:20:38:c8:6d:
1c:98:69:e8:96:a0:17:33:ae:c4:99:5f:3e:bc:f4:bf:c5:6a:
ee:f9:35:a6:20:bf:e7:e2:b4:87:b7:07:10:b1:0e:d3:8e:45:
b1:96:4e:bd:2e:21:e7:5b:fd:ff:73:21:93:f7:14:ea:72:45:
98:7d:12:8d:0c:bd:bc:09:90:39:ed:88:96:10:b5:1d:ac:94:
68:07:ed:54:16:67:2c:ec:b3:b1:ee:43:33:22:03:08:10:d3:
15:91:42:46:64:d3:42:b4:5f:76:4c:b6:a1:8b:be:14:73:b6:
37:5c:1d:95:25:9e:bb:19:1f:64:7f:97:c2:fa:6c:78:ab:d1:
d9:38:e3:5c:93:ef:b4:32:e3:74:f8:0d:1c:1a:b5:40:e1:34:
1e:84:8a:ac:9d:88:2c:e5:47:27:11:21:6c:3d:a8:4f:4f:4e:
8c:f5:13:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:01:45 2025 by rpki-client