Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: msIahTbNK/l7Q/rdhQIOPYxHMppMLavohRAk+RMRleI=
Subject key identifier: 35:2C:6E:29:CE:63:5B:70:AE:20:F2:9B:06:BD:62:D2:49:ED:40:D8
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 01988544CFB4852C84001A98D9B846B7FCF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 1640
Signing time: Thu 07 Aug 2025 16:02:15 +0000
Manifest this update: Thu 07 Aug 2025 16:02:15 +0000
Manifest next update: Fri 08 Aug 2025 16:02:15 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: N5zj-5kvAhoJCItFFzdBa1pYbH0.roa (hash: ypTV2FdvIR6mdrYiLR6I+YqYJsccCY+5Z3r1n8pA0MU=)
4: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
5: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
6: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
7: oFumiBsAWooyBU0TcSWUrXQVV0M.roa (hash: O0f3W53wpKnfJgwZpwBD1xXfrpSbNoYlbIB/lXeKPq8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: 4h+vkSovQ8MjoWB6RoRM5aihN+/aVrg+nCtWFETa/L0=)
9: zJzk_tM6gq364ozeInI309dIrxA.roa (hash: Wk+SRLeVkkf92Q0xGlI36RRywoqFOdrDHHnD94zbdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:cf:b4:85:2c:84:00:1a:98:d9:b8:46:b7:fc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Aug 7 16:02:15 2025 GMT
Not After : Aug 8 16:02:15 2025 GMT
Subject: CN=352c6e29ce635b70ae20f29b06bd62d249ed40d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:a1:54:d6:f2:f3:fe:13:26:5e:37:7b:59:
33:f1:a6:25:84:da:ab:7a:5c:82:35:eb:d5:f3:18:
59:33:7c:57:7b:69:45:a2:90:ba:86:52:d5:10:f6:
cf:9e:b5:68:29:ef:4b:29:98:9b:42:a7:e7:0e:99:
6f:bf:65:9f:ed:a3:65:3e:07:2f:6b:32:4f:c0:5e:
96:12:02:58:ca:1d:10:35:e6:13:96:a0:17:b6:de:
90:13:8b:ff:f0:dd:d5:c8:e2:d6:64:5e:56:29:d7:
67:a5:eb:99:1c:2b:85:51:40:2d:83:70:ac:48:de:
ed:fb:00:3b:08:d6:84:8e:1c:48:bc:66:da:c5:c3:
f1:ce:9b:36:ab:13:81:02:96:b3:5b:f7:bf:67:67:
33:13:a1:7f:fe:7a:f0:55:a4:7e:2b:ad:30:45:c6:
90:5f:c0:1e:a8:f7:9c:da:11:01:85:fd:0f:28:17:
c4:f1:44:41:05:81:38:d1:0c:8f:b8:9f:bb:f3:1f:
b3:61:78:ad:60:91:49:95:3d:d1:4b:83:99:a1:06:
71:99:98:65:7f:e4:d8:90:8b:1b:45:be:75:33:bc:
82:38:3b:7a:06:d6:c8:68:f8:11:6c:53:4d:16:be:
ba:b6:ba:7d:0c:a2:24:78:92:5d:4a:df:8b:64:f9:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2C:6E:29:CE:63:5B:70:AE:20:F2:9B:06:BD:62:D2:49:ED:40:D8
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ee:34:16:7d:59:c5:4e:40:85:ce:8d:0d:29:c0:87:87:b9:
e4:49:0a:fb:77:97:ba:cb:02:00:a8:45:16:44:d6:32:e6:01:
2a:1c:85:6c:8f:9d:d2:d7:e8:08:91:f2:c1:5d:7b:26:a4:ce:
48:ba:ce:45:28:c1:fc:39:86:92:85:da:f2:11:81:56:ff:14:
ad:a1:84:42:25:db:9c:af:15:76:5d:ee:fe:bf:ce:67:f7:a6:
1f:d8:1b:c0:ff:03:d1:7e:1b:fb:5f:a8:38:fa:c0:bf:11:9b:
26:19:5f:8d:0c:49:a3:66:51:cf:93:7f:9b:ad:c7:5d:91:0b:
9c:8b:54:f7:6e:6f:e8:8c:28:1d:e4:f4:39:a2:0f:02:fd:91:
8c:34:c0:4c:a2:39:b2:74:dc:8c:70:84:a5:63:7c:e5:41:4f:
d2:32:90:34:a6:09:cd:3a:ca:8f:dc:bd:32:01:e7:1f:d1:b1:
b1:a7:bd:f1:ba:a0:9c:3a:92:12:c3:ec:9b:36:51:ed:80:96:
15:5c:8c:98:f2:48:ab:57:39:05:52:03:19:5c:1d:9d:07:18:
70:95:4d:28:d6:a8:57:63:8a:c0:95:57:3c:5a:fa:55:34:32:
42:31:e0:a3:b4:01:60:b2:df:5d:70:63:a6:af:77:40:15:7a:
ff:3d:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:38:07 2025 by rpki-client