Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: duKs7sYF9Z5l6DNJMljsm+dXQ94f+UY43EsdBBAJ1G4=
Subject key identifier: 36:56:E1:58:1C:C2:50:1F:EB:44:D5:CC:D7:9F:66:4C:09:7F:5F:76
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 01988B0F28DA3209895FEA280FD0379756A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 19:01:22 +0000
Manifest this update: Fri 08 Aug 2025 19:01:22 +0000
Manifest next update: Sat 09 Aug 2025 19:01:22 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: s0ymuV6z1syUd2N83607SxuiO+QiY7G3N3tewBp5Gx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:28:da:32:09:89:5f:ea:28:0f:d0:37:97:56:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Aug 8 19:01:22 2025 GMT
Not After : Aug 9 19:01:22 2025 GMT
Subject: CN=3656e1581cc2501feb44d5ccd79f664c097f5f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:89:a8:b9:17:92:78:7b:02:2a:93:a0:79:41:
a0:1c:b3:27:7b:57:e1:09:49:4a:6d:12:4f:60:9a:
3b:71:34:31:95:2a:e7:ea:a5:d9:44:43:2c:78:64:
6d:ca:61:3b:3a:6f:1a:87:00:9c:80:b2:57:78:15:
79:6a:66:e6:17:2e:d4:6a:f7:11:25:47:a1:0c:af:
57:13:1f:c5:6b:bd:37:f2:2c:0d:16:ad:48:62:f4:
62:4f:66:8a:2c:b8:c7:bd:35:a4:06:37:43:a5:68:
b1:2d:36:0f:8c:e2:22:05:bd:24:b3:a8:51:4a:c6:
9b:ac:b7:ee:26:94:70:fe:9f:f1:91:26:9c:a2:cc:
5c:cd:33:22:c7:41:6e:d0:5b:0f:f4:91:1b:09:dc:
58:79:c2:9c:a1:de:b6:aa:c6:d7:81:29:60:1c:41:
dd:5f:15:fd:e8:ff:2d:ec:eb:5a:67:79:8b:2b:12:
53:e3:f3:4d:d9:6d:54:39:a0:3d:3d:b8:b0:29:10:
0d:65:e5:87:54:ca:94:93:9e:61:a2:cd:56:15:d5:
37:84:52:c7:61:1b:7a:72:a6:0a:71:a6:d6:72:44:
81:26:ca:8e:ab:6c:5f:4c:2b:7c:09:34:4a:05:0e:
f7:72:30:b5:f1:c1:f0:b5:5a:0a:0d:4d:dc:7d:f2:
b8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:56:E1:58:1C:C2:50:1F:EB:44:D5:CC:D7:9F:66:4C:09:7F:5F:76
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:95:18:f6:1a:1c:2a:e6:77:5c:a6:d2:6b:5c:70:ca:6d:78:
14:9d:3c:c2:70:8e:73:50:67:32:9d:3d:51:a1:e8:21:4f:35:
d1:d0:9b:64:11:4e:6a:94:d8:1e:d2:ec:7e:8a:3d:6a:66:1d:
86:af:df:89:b3:43:37:a3:dc:93:be:48:90:a0:29:6c:49:ee:
f2:5b:eb:c8:7f:e2:a2:a2:cd:ed:99:8d:47:22:23:66:42:87:
84:e1:4d:b4:48:01:66:6d:e1:3a:16:9e:a1:d5:4d:3e:fb:07:
e5:70:71:3d:3d:79:fd:06:cc:fa:3e:ed:39:b1:34:00:51:c9:
8b:96:27:46:b7:42:56:8b:93:8f:ae:76:ef:45:1e:e3:2b:79:
16:ed:a0:07:06:da:49:b9:05:b9:d1:1a:b9:08:a5:20:0b:3f:
d9:44:fe:f6:fa:a4:6a:69:3a:0f:d1:f4:05:99:32:df:41:3a:
68:17:94:4f:19:25:cc:4b:34:44:c2:b2:4c:43:10:6d:20:82:
97:0d:dc:40:4c:a1:9b:12:7a:a4:30:81:b0:78:e6:84:0a:e8:
98:b7:59:3c:6b:ea:15:12:8f:1d:1e:96:d6:d0:8f:c7:72:4c:
46:15:fe:15:26:1f:10:24:35:b9:e0:04:69:ff:3e:aa:b6:e2:
f2:ff:37:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:01:06 2025 by rpki-client