Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier: 1zB7H/kV0EyjMVK25Up4rZQWhlL49zAl/w0UoMhjKaA=
Subject key identifier: 6A:42:A2:3E:4F:6F:4E:A1:D5:4A:BC:84:70:CF:A2:6B:D8:05:14:39
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 0198745092AD086D35B0C8F8E2A79E9A92BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number: 0E7F
Signing time: Mon 04 Aug 2025 09:01:34 +0000
Manifest this update: Mon 04 Aug 2025 09:01:34 +0000
Manifest next update: Tue 05 Aug 2025 09:01:34 +0000
Files and hashes: 1: evpxyC_xQr6-9_i5vhF3SSD60QY.roa (hash: F+Lkz2iLknBGekmgWZevszL+qAh6hnFUDMady9RqMNg=)
2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: d93qDPOs+Nuy5dyMIbVzgdLqDKlyGHnFX95LQMCgBNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:92:ad:08:6d:35:b0:c8:f8:e2:a7:9e:9a:92:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Aug 4 09:01:34 2025 GMT
Not After : Aug 5 09:01:34 2025 GMT
Subject: CN=6a42a23e4f6f4ea1d54abc8470cfa26bd8051439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d9:3f:ae:c8:d5:ef:ed:ba:58:68:2d:12:29:
0d:8d:00:82:96:8e:fa:07:72:2d:bc:e4:c7:af:f6:
68:a3:1c:1b:40:6e:b8:df:d8:41:8a:c2:6f:40:a7:
a2:ff:c3:de:78:da:a9:65:c1:7b:1c:ca:fb:72:17:
5c:de:29:be:d0:b3:1e:ba:b9:b9:e7:b8:47:5d:48:
b8:47:70:72:ff:18:e4:37:96:06:aa:cc:0e:0f:5a:
43:89:6a:c9:98:ca:b1:56:a3:98:82:a4:84:9e:bb:
56:a3:7f:79:16:dd:6a:c5:4e:b3:9e:9d:54:c0:b4:
ab:5f:cc:dd:6e:2d:a9:98:4e:54:a4:a0:bd:0c:a9:
43:21:22:43:ac:b3:e3:d0:78:70:2f:df:ae:17:bd:
ed:55:e8:25:1f:6a:ab:63:86:86:cb:d7:61:a9:21:
d2:ec:60:cd:e9:69:c9:3b:d1:c7:4a:04:09:46:eb:
21:b8:47:aa:36:b0:78:6c:09:67:b9:c7:d2:59:ce:
96:60:7b:46:b2:89:02:5d:e2:17:76:98:4d:12:39:
31:eb:6b:af:79:e5:d4:24:a1:9f:b6:18:05:22:a7:
b7:e5:15:48:75:ac:cf:67:b1:10:e8:79:a0:f8:8f:
e4:86:39:8f:ce:e9:05:43:09:39:d6:ff:67:ed:f4:
14:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:A2:3E:4F:6F:4E:A1:D5:4A:BC:84:70:CF:A2:6B:D8:05:14:39
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:33:24:ce:40:33:5e:ce:79:84:9a:95:cb:55:3c:41:c6:71:
31:2b:c3:58:1e:b9:30:9b:a9:e5:10:18:e9:05:a5:a1:a3:6a:
0f:fe:e3:0c:d6:85:42:ed:a9:c7:af:d9:08:50:3d:68:78:95:
70:2c:68:40:11:94:9e:7d:02:11:f3:9e:d2:67:18:35:72:b1:
67:7b:50:7d:81:9e:ad:eb:20:48:dd:71:b7:7b:1b:a0:d0:07:
79:a8:50:cb:c1:b2:83:83:51:7b:3c:7d:e4:eb:49:43:f9:dc:
3a:4d:fa:e4:b0:5f:ac:27:b8:3a:0c:83:42:7d:d0:94:76:cb:
87:14:d0:b7:c2:98:13:ac:39:20:aa:60:67:0e:cb:d4:da:39:
3b:b4:16:7e:de:92:22:b1:d3:eb:50:0b:bf:6f:5e:21:c5:37:
0d:29:ac:5f:3b:d5:87:26:88:4f:ae:7d:5b:2a:6f:97:e8:3c:
2c:e2:0e:4c:71:25:99:d0:1c:3a:53:a5:0d:29:1c:f5:db:ec:
c2:04:41:56:af:cb:ac:33:c3:cc:a9:7b:ef:3a:cb:8f:5b:2a:
fa:7d:28:72:cf:65:d3:80:05:59:c6:5a:04:53:59:9c:be:3f:
e4:e5:91:50:e4:e3:24:78:3d:98:eb:9e:c5:3a:a0:72:b9:b4:
e9:7c:3f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:36 2025 by rpki-client