Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: dh1/2xPUPHhpwNAVwgE32PJHPj1Kg7sGTMcyIu9JUi4=
Subject key identifier: 88:96:DA:D8:FB:4A:65:D9:AC:D7:87:39:4D:95:92:F6:74:DB:93:0D
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 019873E1D7A46EF5E8C73ABB0A174FCF708A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 07:00:37 +0000
Manifest this update: Mon 04 Aug 2025 07:00:37 +0000
Manifest next update: Tue 05 Aug 2025 07:00:37 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: sjno52Tm01a16zluFuzOrNieOtN3a40TYhfN6vvjTnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d7:a4:6e:f5:e8:c7:3a:bb:0a:17:4f:cf:70:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Aug 4 07:00:37 2025 GMT
Not After : Aug 5 07:00:37 2025 GMT
Subject: CN=8896dad8fb4a65d9acd787394d9592f674db930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:9c:89:6e:da:c0:4a:2b:ba:5d:e1:ea:be:
05:7a:a5:f7:60:60:9b:35:b1:1f:e9:d0:d6:99:dd:
cf:ba:e9:9e:65:97:4b:bd:4a:5d:8a:e0:33:53:f8:
d8:40:c2:0d:ee:ae:6a:77:a7:14:29:fb:ec:7b:ac:
b3:01:85:40:00:8a:e9:c3:e7:2b:5a:0e:b5:df:d6:
23:89:69:7c:06:38:ca:21:a1:ae:62:1a:de:71:0e:
58:a6:aa:52:2a:33:65:a2:76:be:41:6c:95:74:fd:
c5:35:b5:b0:47:ea:54:b3:ee:f7:33:5f:2d:26:e4:
8f:03:3a:f1:4a:a4:ca:85:df:21:6e:8c:28:2f:8a:
94:d6:f5:b9:b0:ac:60:af:2e:fe:9a:a9:e0:ab:9f:
8f:8d:07:b1:76:fd:5b:92:0f:d7:c7:65:38:81:88:
34:25:7c:a0:fd:ae:c9:c3:dc:b5:ea:80:61:88:ad:
af:65:53:ea:bf:d3:68:1e:17:6d:d9:56:29:fe:d5:
e3:69:35:cf:58:91:b6:32:72:cd:83:34:89:c2:66:
fd:ad:19:fc:1d:da:d2:3c:00:9f:2b:5d:2b:88:2e:
fd:d7:34:c2:d4:c8:47:bf:bf:75:d6:92:59:89:cc:
1a:b1:23:fd:b2:70:ff:2b:a8:81:32:c7:c2:d4:0c:
f0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:96:DA:D8:FB:4A:65:D9:AC:D7:87:39:4D:95:92:F6:74:DB:93:0D
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:29:af:07:eb:87:54:32:94:fe:b1:95:2a:0b:b5:71:97:f6:
b3:3c:ef:f9:c0:a5:5d:88:b5:4e:37:c5:26:c6:08:d0:43:e2:
f6:19:f7:f5:61:ca:70:1c:b6:54:4a:b7:33:fd:9e:47:01:29:
59:02:f1:4d:97:ec:25:eb:ee:8e:bc:13:fb:b9:52:1b:56:a0:
1e:03:24:97:1a:0e:d4:43:3e:56:27:f4:13:9f:b1:33:69:1d:
30:87:7a:e4:4c:ab:5d:97:b2:d8:31:0d:9a:36:83:69:80:8d:
de:23:cf:16:e3:02:df:fb:7e:fa:ad:ec:34:2b:c2:1c:74:05:
f6:63:8b:37:7c:ee:7c:3c:6d:3f:5d:92:31:23:a7:c0:a8:61:
79:b2:42:c1:60:a0:99:3c:cb:d5:ad:a4:7c:34:6a:10:0c:07:
3a:91:92:4e:77:7d:d9:e1:e6:5c:05:62:a2:53:16:f6:5e:6f:
6f:ff:bf:5d:88:98:5d:b3:8d:68:8a:a8:0b:94:73:ea:c5:0e:
46:d9:a5:87:e4:e5:a2:2f:12:74:0e:09:73:b3:66:e0:02:20:
f8:8e:73:cc:f7:62:91:ad:dd:f7:18:10:6a:6a:81:9d:86:8a:
62:ef:50:e3:01:25:18:07:49:d2:84:2a:ad:3c:fa:76:f1:71:
ae:d8:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:02 2025 by rpki-client