Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
File: q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft (raw, json)
Hash identifier: AyUtAwDZ3zpM6gAr0OspExEPjBvAkgMFGDw0CR/prlg=
Subject key identifier: 39:D7:12:C3:87:2E:ED:1A:B5:A2:49:C7:81:7C:01:6B:EA:6C:2C:CC
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 01987BD2BF0F5CC431D224777A7F0DB79843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
Manifest number: 12C7
Signing time: Tue 05 Aug 2025 20:01:05 +0000
Manifest this update: Tue 05 Aug 2025 20:01:05 +0000
Manifest next update: Wed 06 Aug 2025 20:01:05 +0000
Files and hashes: 1: OQ-BUjiM-4ZYICksoUde6ONei7U.roa (hash: nuZwAEc9XGaRcjHMhQRLcOzGazeKsZ0/3EUvFc3DPLU=)
2: q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl (hash: M0tCujbM/BEtstjbzyLuhoVMhwUrnIEgRhxhfI5+G7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:bf:0f:5c:c4:31:d2:24:77:7a:7f:0d:b7:98:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Aug 5 20:01:05 2025 GMT
Not After : Aug 6 20:01:05 2025 GMT
Subject: CN=39d712c3872eed1ab5a249c7817c016bea6c2ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:2d:dd:53:54:61:5d:c8:af:86:fb:ea:33:
9c:60:ab:aa:cc:b9:00:50:af:ec:84:68:9a:69:6d:
c0:63:6d:fa:e7:c2:db:a5:42:f6:96:7e:76:4f:53:
4c:99:20:dc:d2:50:36:49:43:c4:40:dc:b4:d5:4f:
e5:fe:3f:06:a9:92:1d:08:92:2f:b8:c7:62:62:7c:
7d:a6:7e:49:b6:c6:cc:3e:76:12:db:c6:30:98:8c:
ef:cf:91:01:38:af:10:60:c9:23:e3:3a:68:68:ed:
f5:9d:42:02:5a:14:f7:19:94:5c:27:10:f5:8b:99:
65:75:36:37:9d:b3:80:43:4b:57:2a:4d:b4:57:24:
52:ff:be:41:a6:ba:99:8a:03:82:da:a5:4b:8b:d8:
24:cf:9e:66:f1:14:5e:59:e3:e6:8d:9b:38:b0:cb:
2f:06:8f:18:64:62:4b:83:84:15:a5:41:b7:56:8f:
d1:cf:fa:45:17:d6:62:89:0b:05:1e:f5:5c:1b:a1:
a1:ec:f8:dc:ab:dc:32:94:88:c3:14:d6:30:1c:cc:
65:42:e5:a0:30:ee:1d:3f:a6:65:52:f0:ba:a2:a5:
7a:aa:f6:59:16:f8:4a:5a:48:d4:26:e7:22:92:9c:
73:36:57:f1:d4:6c:6d:c1:7a:56:37:25:ac:68:3e:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D7:12:C3:87:2E:ED:1A:B5:A2:49:C7:81:7C:01:6B:EA:6C:2C:CC
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c5:9c:69:0e:a3:ab:44:b0:96:4d:83:63:2e:af:25:65:79:
47:4f:18:43:0d:5e:64:35:b5:05:e7:b2:0b:b0:47:b3:38:7c:
65:29:97:8e:4c:e3:c2:32:c4:59:3b:7f:bc:02:87:0f:c1:56:
b1:90:51:e1:85:e6:25:52:04:6c:a9:fe:82:c6:1e:35:33:a3:
36:b0:db:5f:ac:ac:ea:b2:0d:a4:15:20:e4:53:ca:45:32:8a:
6b:81:d1:f2:35:d8:4b:e8:64:30:fe:b2:a9:d7:92:7f:e6:2a:
18:01:dc:37:94:02:0e:1b:61:c4:20:fc:c9:24:83:93:d3:07:
64:2e:e9:75:11:66:07:e1:d0:a0:05:06:31:92:8d:a9:11:9d:
50:6a:b5:c4:a7:17:b3:9a:08:3c:a7:56:cd:02:ff:b1:37:88:
4b:23:24:b0:c1:d5:af:79:b8:1c:1a:12:01:6c:cd:af:a3:94:
56:b0:7d:7d:70:25:e5:8b:08:a9:7e:11:8f:2b:bd:0a:59:d1:
94:4c:1a:03:99:49:85:18:46:78:2e:76:eb:34:ea:4f:d5:65:
42:b9:a7:73:17:f0:42:84:90:5e:00:e2:e1:eb:34:17:26:3b:
22:03:f6:0f:a7:98:f2:00:98:da:99:03:62:f0:a5:1f:00:c9:
30:69:a3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:07 2025 by rpki-client