Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
File: q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft (raw, json)
Hash identifier: yTdhkkhGpBGAIXe84jZfrVcvnQD6WE5tKIf7b+DkqZU=
Subject key identifier: E3:3B:8E:86:02:DF:D4:50:77:E5:02:38:E8:12:80:FB:76:60:D2:0B
Authority key identifier: AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
Certificate issuer: /CN=ab87734368d88315f11b329386cc5ef2bb875858
Certificate serial: 01988467D6575063FAA5958D636C20EB6663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 12:00:54 +0000
Manifest this update: Thu 07 Aug 2025 12:00:54 +0000
Manifest next update: Fri 08 Aug 2025 12:00:54 +0000
Files and hashes: 1: q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl (hash: GBjUWiJ4MlmqDoA78mSjfzMwchFutkIeDkMAgiDOvMU=)
2: sqo5PLdWdHMa-3THIwpzThX3MIQ.roa (hash: mkeWzT4DWdeQx69gMonfC3UIQ6XY4x+08EOS1mbWBlo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:67:d6:57:50:63:fa:a5:95:8d:63:6c:20:eb:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab87734368d88315f11b329386cc5ef2bb875858
Validity
Not Before: Aug 7 12:00:54 2025 GMT
Not After : Aug 8 12:00:54 2025 GMT
Subject: CN=e33b8e8602dfd45077e50238e81280fb7660d20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:64:31:f5:a7:10:93:67:a5:c1:71:e8:7f:4d:
0e:84:1f:6d:4c:1c:d6:cd:f8:6e:04:56:9d:3b:52:
3f:76:df:82:bd:a2:8c:13:39:b1:68:f3:65:db:1f:
f6:bf:2d:39:6b:b9:c5:61:e5:8a:99:71:4d:80:1a:
ca:3a:a2:07:99:16:38:bf:0a:03:8e:fb:66:c2:f0:
91:1e:cb:b4:4d:d3:0b:a1:50:21:7d:c8:df:c2:92:
c4:71:64:44:a6:3f:d3:b8:cb:68:02:f7:d3:7e:7e:
08:a9:b7:e9:9b:f5:12:5e:e4:4f:95:42:a3:43:bf:
1b:07:8c:35:10:39:12:ee:c6:82:3e:1b:4b:0f:74:
65:fd:93:7d:d3:21:85:10:9f:ae:a4:e7:71:e8:40:
fb:35:62:21:1e:44:70:27:5d:82:62:98:c5:da:36:
84:41:38:3e:fb:56:03:62:0a:03:ee:af:4e:19:ec:
0f:82:0a:9f:51:4d:eb:d6:69:b0:40:3d:b3:c9:3f:
3b:98:be:8c:02:8f:78:b3:27:43:7f:e9:8b:20:94:
d7:eb:24:c7:70:8a:e6:d7:6d:52:87:e9:50:02:ff:
a8:78:e4:cc:9e:44:13:00:89:73:91:75:26:c1:15:
49:94:45:99:39:90:29:31:ce:25:d0:5f:75:48:c9:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3B:8E:86:02:DF:D4:50:77:E5:02:38:E8:12:80:FB:76:60:D2:0B
X509v3 Authority Key Identifier:
keyid:AB:87:73:43:68:D8:83:15:F1:1B:32:93:86:CC:5E:F2:BB:87:58:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4dzQ2jYgxXxGzKThsxe8ruHWFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/562548-7b3d-40b3-9c05-18585ed94a98/1/q4dzQ2jYgxXxGzKThsxe8ruHWFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5b:5d:6d:41:0e:70:90:60:47:62:27:b8:ba:92:23:0b:23:
f4:ae:9b:57:2a:52:1c:03:1d:0e:24:0c:1c:16:fd:70:94:82:
0e:a8:95:b2:5d:17:91:c1:f4:ef:ef:62:51:5a:cd:41:02:26:
c5:f5:ec:f5:62:b1:83:30:92:da:14:9a:97:ce:b3:52:9b:62:
91:6c:87:55:b4:2c:ba:b1:89:81:fe:c1:e4:3c:6c:c7:7d:78:
99:40:51:41:50:3e:54:a6:c2:d2:31:07:91:23:9b:28:26:64:
0c:e2:70:1d:b8:19:cf:5e:2b:3a:10:2b:78:64:ee:a3:2e:23:
92:25:9b:1f:42:05:95:f6:3f:71:c6:c5:09:15:d1:7b:80:9f:
22:ee:0c:b2:00:a4:1d:24:ec:25:11:3a:05:02:39:00:81:9d:
5d:15:42:51:38:99:52:fd:45:ce:e4:92:d6:11:c7:85:c6:71:
6f:a1:82:11:9b:cf:51:d9:f3:0c:43:3b:37:86:e3:3d:37:96:
35:6b:98:91:bc:87:96:21:cf:86:ef:fc:a5:7c:14:3d:c1:ad:
c6:21:a8:54:28:55:2f:e0:d9:be:79:cc:39:81:f8:72:80:20:
d0:df:ed:15:32:71:94:d6:1f:b2:1f:ad:2f:7d:31:fa:f9:c9:
99:c7:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:43:29 2025 by rpki-client