Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
File: q0U2TkncOhW-_yacOjKzwFQci2Y.mft (raw, json)
Hash identifier: Q6hASgifNvWjeKd3Q48XtAvbEIWsxPb5zKPwOo3j6Fw=
Subject key identifier: 93:51:FB:B0:DD:81:A3:F2:49:83:D0:E3:30:CC:76:90:54:24:32:73
Authority key identifier: AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
Certificate issuer: /CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Certificate serial: 019891108AEBAFA30B09F228BBC50B7632C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 23:00:37 +0000
Manifest this update: Sat 09 Aug 2025 23:00:37 +0000
Manifest next update: Sun 10 Aug 2025 23:00:37 +0000
Files and hashes: 1: Diq6O5ga68_B8MEC7x3IDqn6lbc.roa (hash: r+Ep1MU6KZ691K575NCgrIa7fSiICzMjhV/0OlU71vU=)
2: q0U2TkncOhW-_yacOjKzwFQci2Y.crl (hash: TLClENrEYPV/4lNFl64wRtXjsXcPEjC3mJFuwUuGm9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:10:8a:eb:af:a3:0b:09:f2:28:bb:c5:0b:76:32:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab45364e49dc3a15beff269c3a32b3c0541c8b66
Validity
Not Before: Aug 9 23:00:37 2025 GMT
Not After : Aug 10 23:00:37 2025 GMT
Subject: CN=9351fbb0dd81a3f24983d0e330cc769054243273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:a4:3d:f3:6a:89:1e:64:6d:5b:92:2d:7e:
f2:dc:3e:c7:2d:61:ef:a9:d5:62:79:f8:9c:0d:d3:
57:f1:51:32:f8:f1:a6:e3:79:83:c5:b7:89:31:fe:
bb:21:65:db:b8:96:9f:d2:83:f9:0a:16:07:f7:92:
02:d9:18:3b:0e:4a:fa:cc:66:50:14:03:b5:c1:73:
79:92:72:d2:1e:cb:de:e9:1c:b2:8a:28:4a:31:d4:
a6:94:c9:94:ac:0f:b2:69:56:c0:f6:ae:98:4f:b6:
8d:ed:a0:31:a3:e2:45:41:65:0b:2b:1d:6b:5d:93:
27:64:12:7f:1c:6b:44:2a:89:50:0b:c0:bf:82:3b:
e7:3b:44:c3:59:43:cd:7c:cd:a6:39:d9:5a:a5:02:
97:0f:18:8a:4c:2f:04:76:99:2e:52:f6:b3:6e:8b:
2e:bf:4e:8a:a1:fa:fd:49:60:da:d3:a8:0d:a9:82:
20:d0:6d:04:40:d1:5c:8d:d4:79:58:fa:4f:1f:33:
3c:16:b0:e3:95:ff:14:a0:fb:79:73:67:8a:8a:3b:
0b:e3:f8:0d:d9:95:d5:1e:27:fa:bd:f6:0a:b1:82:
f5:17:ff:89:95:ff:a9:ed:d7:62:53:35:93:fa:94:
b5:d8:a2:ca:48:d0:c5:97:67:25:f9:31:8c:d1:39:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:FB:B0:DD:81:A3:F2:49:83:D0:E3:30:CC:76:90:54:24:32:73
X509v3 Authority Key Identifier:
keyid:AB:45:36:4E:49:DC:3A:15:BE:FF:26:9C:3A:32:B3:C0:54:1C:8B:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0U2TkncOhW-_yacOjKzwFQci2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5aaf25-9748-4592-a497-f8bd250454eb/1/q0U2TkncOhW-_yacOjKzwFQci2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:23:f5:59:45:04:42:4d:ab:ac:8c:19:74:88:63:b7:35:60:
0c:92:4c:3a:12:92:cd:b4:18:8f:cf:39:78:4b:52:54:8b:93:
fe:32:13:93:29:36:dd:d6:31:01:40:76:8b:d5:dc:3b:1d:42:
76:88:ed:4b:69:a3:11:2c:d3:4e:6a:96:ac:57:69:49:e0:f2:
d2:8e:2f:c9:61:9d:6e:16:a2:b2:1d:4f:97:1a:55:f5:c5:36:
88:32:05:b8:16:00:9f:88:3d:c2:6f:ed:7a:18:9b:f3:d5:c8:
a5:34:af:87:97:4c:da:8d:f9:ef:e5:e7:f9:e9:4e:fa:98:8b:
e0:ef:88:76:26:70:05:a7:b1:4a:e2:1c:ea:7b:d0:f6:af:0e:
0e:7a:0e:5d:9e:00:78:b8:3c:d3:c6:f6:a8:ce:fa:bf:ad:c2:
1c:02:34:8b:32:91:cd:74:92:df:c6:a2:19:00:ed:c9:1d:88:
a1:e7:6c:64:b5:35:5c:19:ef:bf:1c:34:0c:5f:2f:50:8d:ab:
8f:a4:70:62:96:26:40:ed:3b:48:75:75:77:39:5c:89:1c:20:
67:5d:5e:b6:b1:94:21:5b:1e:a2:19:f9:e1:e3:f4:2e:52:6a:
28:af:87:1d:bf:8e:ce:32:67:f0:fd:f8:d6:8a:a7:a5:92:9f:
8f:bf:2e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:17:47 2025 by rpki-client