Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
File: q6-0Li5v0JBX_KIbmQhNrDt68tA.mft (raw, json)
Hash identifier: 8ccjmrcLQNtmGC1d6+iZllq8gBeWn5bs5LJZNRn9ALw=
Subject key identifier: 9A:3B:FF:09:FE:DC:8C:F0:D6:08:32:5B:1D:B9:C8:48:B7:3F:2A:A6
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Certificate issuer: /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial: 01989780E88D4780905D11C21B89E32AAE04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 05:01:04 +0000
Manifest this update: Mon 11 Aug 2025 05:01:04 +0000
Manifest next update: Tue 12 Aug 2025 05:01:04 +0000
Files and hashes: 1: m33s4sgep6-q8UmRmhXl2lkYj9Y.roa (hash: SAyf+MEL6W5SBqvzjsdQj/Xgc4QN6O97LJUm4XtKLGM=)
2: q6-0Li5v0JBX_KIbmQhNrDt68tA.crl (hash: C17V4u6+L5pjt50W4C9iiobQUhufiw9shVPoleeB+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:e8:8d:47:80:90:5d:11:c2:1b:89:e3:2a:ae:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Validity
Not Before: Aug 11 05:01:04 2025 GMT
Not After : Aug 12 05:01:04 2025 GMT
Subject: CN=9a3bff09fedc8cf0d608325b1db9c848b73f2aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:2d:55:40:53:66:1c:9f:62:0f:9f:86:1d:
d5:4e:59:80:52:97:75:da:d4:19:c8:ba:04:aa:43:
d3:e7:45:70:ea:f1:5b:bd:c9:8d:08:d2:96:74:13:
18:51:f5:08:45:f8:2b:e5:3e:47:be:0f:2b:ce:63:
3c:0b:ef:7e:84:f8:b4:76:c4:d2:b0:6d:5c:2e:a8:
ab:02:cf:c0:e9:68:5d:5e:1d:ee:6c:9f:3e:2c:38:
c0:11:af:12:b0:0d:69:a1:f9:63:60:8b:ce:38:51:
93:fe:55:79:98:57:ae:d2:59:4e:d4:67:c4:0c:14:
fc:63:8b:eb:2c:bd:5d:4c:d7:b2:c3:ea:e8:19:37:
de:e0:08:ea:ae:0a:80:8e:de:f0:33:cb:cc:9d:36:
fe:e6:23:68:7d:45:3c:fc:6d:22:48:75:33:a2:70:
3e:33:55:64:9b:c1:f4:c6:c1:19:86:84:f0:e0:4f:
75:82:35:83:83:0e:da:91:94:cf:3b:d5:76:ea:10:
a7:df:da:a1:5a:14:d6:5b:cf:96:8b:f9:ba:32:99:
3f:9e:f8:a5:ed:86:ea:7a:18:64:1a:32:89:6f:ea:
f5:e0:c7:16:e9:b3:9c:65:46:c2:b4:b1:00:48:60:
68:c5:78:07:af:db:1b:de:a1:e7:4e:20:71:65:84:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:FF:09:FE:DC:8C:F0:D6:08:32:5B:1D:B9:C8:48:B7:3F:2A:A6
X509v3 Authority Key Identifier:
keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:72:bb:8b:8e:e5:0f:ce:88:19:97:6a:ed:11:48:d8:1e:b7:
ca:92:f8:94:75:90:8d:1e:7f:6d:3c:ab:0f:c2:fa:0c:47:ec:
f5:e5:b3:70:4a:3c:80:2a:dc:24:12:dc:44:33:ec:df:30:87:
46:b4:1c:42:7b:45:61:b3:28:e6:30:d9:c1:36:b9:bb:86:08:
08:00:57:9e:bc:a1:86:d2:14:ec:cc:0f:61:2d:5e:b9:cf:67:
b6:a1:67:56:95:cf:ad:ef:50:7a:fd:28:4a:e1:c8:4a:1f:6c:
bf:c8:b2:d4:fa:76:87:25:6f:3e:b7:d5:4b:a0:ef:55:71:0c:
ea:4f:8c:d6:62:17:fe:49:64:56:36:a0:da:21:58:ea:27:58:
91:59:6f:63:3c:c0:ab:e9:01:4f:fb:03:24:ea:fe:19:1f:65:
7c:17:41:2a:47:50:b3:6e:98:2c:4c:a9:d6:7a:7d:96:30:e5:
ba:8c:e1:ca:a6:1e:c4:88:30:ba:66:42:8e:f8:c5:33:0d:fb:
1c:6a:de:4a:da:63:5f:15:df:74:45:64:76:f2:0a:79:52:dc:
f1:e9:af:45:40:75:fc:c5:8f:47:3d:3b:af:09:95:a0:40:c7:
23:2e:32:0b:db:f0:7d:0b:4f:4f:29:af:b3:db:bd:de:4f:60:
ef:31:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:09 2025 by rpki-client