Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: FIim8u3YbEN8eG5gUj5EQWFv8YxMCZn7OmIUEUkGsQ4=
Subject key identifier: 07:DD:B6:E5:B8:DC:C9:2A:FA:B4:CC:3D:21:0E:AF:C7:75:A3:2A:D3
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 0198819DDD17AD35ADBE18C9433EBA71676A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 15F9
Signing time: Wed 06 Aug 2025 23:01:03 +0000
Manifest this update: Wed 06 Aug 2025 23:01:03 +0000
Manifest next update: Thu 07 Aug 2025 23:01:03 +0000
Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: IIKU0DluJuAd0gAyw1eY0GQmVq9Z0A4qqUfXFPKfR7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:dd:17:ad:35:ad:be:18:c9:43:3e:ba:71:67:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Aug 6 23:01:03 2025 GMT
Not After : Aug 7 23:01:03 2025 GMT
Subject: CN=07ddb6e5b8dcc92afab4cc3d210eafc775a32ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:5d:2b:96:a4:b1:ab:b6:5f:f0:b7:a4:61:
ed:3a:8f:b4:94:9d:c4:b4:19:b1:f2:38:43:8e:db:
4c:22:55:0b:8e:bb:8b:63:fb:c5:21:31:fc:54:18:
08:67:87:18:b0:9b:75:f7:3d:45:ea:f9:02:cd:71:
8d:8b:f6:bf:98:52:af:4f:50:6b:30:b2:05:ce:03:
08:1f:25:80:ad:d2:b8:f5:15:74:15:c7:ea:c7:dd:
24:f5:1c:dd:a1:3b:09:b9:f8:e2:60:57:46:8a:96:
d4:56:46:6a:ae:82:73:17:23:35:30:38:45:2d:e4:
a9:91:9f:0a:8f:04:77:01:22:91:7e:0f:c4:5d:1f:
7c:e0:ed:8f:30:95:94:1b:fc:0b:44:6e:55:ef:8d:
86:c8:e0:d9:0d:3c:41:c8:31:8c:aa:fe:33:29:18:
dd:ba:42:f6:95:27:4f:f7:30:22:41:aa:e5:b1:f4:
94:8f:89:23:54:0a:8a:16:34:5d:08:cf:ca:44:a0:
9f:a0:e9:65:46:3e:5f:c5:50:2f:39:79:70:83:be:
3a:2a:0f:87:72:35:46:01:30:0a:02:0b:c6:59:f0:
74:b6:44:ce:b3:ec:7c:13:3c:21:3b:0e:13:1d:f2:
e7:13:e1:a0:45:71:3d:e6:bd:a8:1b:f5:44:a3:83:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:B6:E5:B8:DC:C9:2A:FA:B4:CC:3D:21:0E:AF:C7:75:A3:2A:D3
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1a:85:46:a1:4e:64:49:15:cb:27:7f:dd:ad:78:12:36:fc:
9d:40:23:13:60:67:c7:7c:23:b6:e9:f0:f8:63:a0:85:14:ac:
ab:47:a0:1c:be:b5:55:4b:88:a2:03:d6:6b:b7:46:39:e4:3c:
ac:9f:35:e3:1f:7f:d9:1a:94:94:c1:25:df:ed:e0:f9:e4:75:
4d:34:2d:f9:f0:58:2f:df:90:25:e2:a5:94:e6:6c:5e:94:b9:
f1:81:1f:23:b0:f1:d4:d4:94:d5:7c:51:3b:2b:3f:11:f9:68:
87:c4:a6:67:85:1b:53:34:73:8a:76:27:57:79:16:1f:18:8c:
3c:b9:9f:7f:29:c3:fe:13:db:66:48:53:a8:ca:54:46:0d:7e:
5a:ce:cc:58:af:6e:4f:af:12:0f:79:a2:80:13:fe:33:4f:c1:
6d:6e:e0:38:ba:95:9c:13:25:47:b6:87:30:36:36:36:7c:2a:
62:9f:31:8b:4a:d3:f7:75:d6:39:94:2e:db:37:36:2f:bc:1e:
c7:f2:4c:26:a9:0b:f2:f3:f9:d3:e2:c9:56:bc:aa:7d:fe:51:
5e:c7:b8:e8:a6:30:b4:57:11:23:9d:0e:d9:cc:40:3b:8e:9e:
c1:41:10:27:9f:69:17:01:52:89:ba:24:7f:0c:ed:90:2a:69:
fe:6c:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:39 2025 by rpki-client