Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: 8cPxTD/VdcUFeo5Ve1VeJ+hEzthIviOzAWPlP60P22E=
Subject key identifier: 02:71:A3:46:00:32:EA:AF:14:33:DA:23:82:D1:9C:72:62:42:A1:55
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 019897EE7D9D5E72B3A5AF378B22377ACBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 07:00:46 +0000
Manifest this update: Mon 11 Aug 2025 07:00:46 +0000
Manifest next update: Tue 12 Aug 2025 07:00:46 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: x4JleT70Tn4U8yD+hYDVrXmWk/XnYmIDT25lsAqddzk=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:7d:9d:5e:72:b3:a5:af:37:8b:22:37:7a:cb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Aug 11 07:00:46 2025 GMT
Not After : Aug 12 07:00:46 2025 GMT
Subject: CN=0271a3460032eaaf1433da2382d19c726242a155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:7f:d7:b5:61:51:b9:dd:0a:b0:c8:79:6d:
e5:52:83:f3:0e:09:6a:ab:d2:b0:38:80:44:46:a4:
ee:f0:33:3f:4b:80:c2:e6:c9:3b:70:eb:35:87:65:
29:16:d1:c9:26:7b:5c:6f:c1:0e:e2:6f:5a:9e:37:
cd:40:44:01:54:51:fc:87:23:43:b8:27:52:7e:b5:
f7:15:c1:c0:e1:2a:62:e2:0b:29:84:31:32:10:40:
aa:10:c2:c5:fa:b1:9c:55:da:2c:f2:3a:a2:84:30:
13:fd:94:0c:91:ce:1c:d3:48:24:36:52:10:ba:a7:
56:2c:62:d4:d4:cb:f4:75:4f:2d:dd:f5:57:bb:48:
26:67:d6:7c:c0:a4:e5:0e:2c:9b:3a:ef:5e:93:60:
2b:d6:c6:b0:13:cb:b2:0a:bf:f1:70:de:b3:8d:26:
7b:cb:ac:ab:d4:0a:24:91:fb:fc:11:e9:e4:78:1b:
fe:ae:2f:97:7c:db:3a:84:60:a1:6b:7f:59:e1:e1:
b0:bd:5e:96:07:01:fd:95:d7:13:7a:9e:6a:fa:b3:
a6:c3:1e:95:c1:ee:23:4f:b2:20:58:27:23:c5:76:
c7:0d:7e:1f:f2:81:95:a6:be:8c:f7:64:dc:1c:a9:
3d:b3:22:1d:8e:99:e3:2d:16:b1:9f:30:64:9a:a0:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:A3:46:00:32:EA:AF:14:33:DA:23:82:D1:9C:72:62:42:A1:55
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:16:b3:9c:2d:00:2a:7a:46:90:2c:33:0c:2c:01:61:bc:24:
c3:18:b6:cd:3d:93:54:32:93:e2:49:27:c9:03:2a:dd:0b:99:
ff:33:24:8d:48:5a:75:bb:3f:ef:e5:c9:53:ba:f3:66:7f:eb:
d9:29:9f:67:a1:76:ad:82:75:73:a2:e6:31:a9:be:d3:36:f5:
4e:30:0b:89:22:4a:98:e2:d9:0a:76:0d:4d:01:ce:f0:6d:ca:
98:b6:18:15:40:7c:64:38:05:70:62:9c:33:5b:85:d4:e9:ed:
77:33:7e:63:fe:4c:73:0c:f1:c9:fa:c4:f0:2d:30:9c:97:4e:
db:65:a9:b3:83:60:f3:c5:fd:11:b4:7c:02:6c:36:28:c1:43:
7e:58:5d:34:e1:1c:cd:26:dc:14:a0:48:f5:2a:5a:f5:37:0f:
0b:3c:d5:02:df:f1:88:2f:3e:43:fa:59:c7:a0:43:90:66:e4:
ce:63:64:94:97:13:44:4e:2b:a5:d9:99:1a:32:5e:54:ae:22:
2a:b2:9b:5d:56:16:da:35:bc:60:69:2e:33:5a:17:3b:6c:a8:
9a:85:ca:26:72:62:96:24:1e:18:1e:58:14:69:ba:2b:a1:62:
ad:95:b0:56:ad:a0:75:0e:2a:f2:7c:2b:eb:5c:4f:d8:a6:4d:
f8:08:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:45:33 2025 by rpki-client