Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
File: q67fL4Eo9I64ETv69NZ9kBBJCTo.mft (raw, json)
Hash identifier: QGh6jq+OVeTVWzel/lI0cKZ93PpeVePTvhPhi9TUVbc=
Subject key identifier: BB:14:BA:EC:72:2E:9D:D9:E4:F8:8A:6E:C7:92:EC:C4:BF:22:F9:B2
Authority key identifier: AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
Certificate issuer: /CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Certificate serial: 01988CFE21F049A10E570ED5858FD5ACD41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
Manifest number: 076F
Signing time: Sat 09 Aug 2025 04:02:01 +0000
Manifest this update: Sat 09 Aug 2025 04:02:01 +0000
Manifest next update: Sun 10 Aug 2025 04:02:01 +0000
Files and hashes: 1: 0Q9DyYJq4YbBL7IBZhMWf3HhzbA.roa (hash: 4213R6OjAd56bVYP7rVqWPE8P8Ej5z/x2DZxc07Sx3o=)
2: q67fL4Eo9I64ETv69NZ9kBBJCTo.crl (hash: X77+ZXHjPNV2grOXn3tflWL9G5tK6UPbyX39RKNslPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:21:f0:49:a1:0e:57:0e:d5:85:8f:d5:ac:d4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abaedf2f8128f48eb8113bfaf4d67d901049093a
Validity
Not Before: Aug 9 04:02:01 2025 GMT
Not After : Aug 10 04:02:01 2025 GMT
Subject: CN=bb14baec722e9dd9e4f88a6ec792ecc4bf22f9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:4b:24:99:5d:0d:00:9d:4d:84:6c:48:d4:
41:f9:d8:50:c1:12:ab:f9:e8:a6:07:db:2c:03:8b:
b8:4c:0c:f1:88:d1:04:dd:07:dc:85:7c:8f:bf:a0:
94:47:60:ac:4a:11:52:19:eb:31:b0:5b:06:bf:72:
2b:e6:2d:15:bb:a5:3a:f9:3b:a0:df:01:48:0a:83:
2f:03:d7:06:43:8c:e8:e2:43:5d:e7:e3:0d:28:ea:
6e:b7:8e:4a:de:54:31:84:ef:4e:ba:2d:15:0b:00:
36:3a:2c:f3:64:53:03:09:00:f4:19:19:54:5a:69:
b1:5a:1c:47:7a:f6:ff:c2:ef:c8:4b:0b:1b:1b:d1:
39:dc:e7:be:00:1b:5d:1b:7e:08:72:b2:73:28:43:
a2:bd:7c:e3:0b:71:ad:71:14:09:7e:f3:2b:54:d1:
43:b7:f3:fa:d2:ca:1b:eb:66:e9:8d:e6:c9:a7:2e:
17:1f:51:f3:9e:4a:98:a4:5f:30:ea:07:63:e6:f0:
3c:72:65:da:69:a1:f5:c7:65:4d:ba:f7:11:ba:3c:
2e:66:5c:9d:36:22:07:1d:15:41:e0:84:11:bd:c7:
02:51:9c:a9:a7:19:b0:af:0f:26:11:4d:c0:cb:9b:
aa:8b:7e:69:27:d5:64:c2:5d:21:d0:cd:a8:f1:90:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:BA:EC:72:2E:9D:D9:E4:F8:8A:6E:C7:92:EC:C4:BF:22:F9:B2
X509v3 Authority Key Identifier:
keyid:AB:AE:DF:2F:81:28:F4:8E:B8:11:3B:FA:F4:D6:7D:90:10:49:09:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q67fL4Eo9I64ETv69NZ9kBBJCTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/dd41f5-bc06-4c97-9ed8-fc460ff98e31/1/q67fL4Eo9I64ETv69NZ9kBBJCTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d1:da:6f:8d:ee:95:98:5f:1d:de:f0:9e:41:89:53:7d:9e:
96:7c:89:0a:d5:b8:1c:e3:a8:47:44:6a:d5:4e:29:c7:9d:3a:
e0:5a:68:09:45:19:20:e3:a6:ed:a9:b1:e1:3c:ef:f0:76:3d:
a5:dd:c1:44:71:6d:c4:95:c1:9b:9a:07:a1:c8:ab:de:fa:9c:
54:41:a1:f0:4f:eb:9e:5c:ab:94:93:2f:e3:27:32:78:2f:ed:
fa:99:0f:6b:42:f3:85:11:5e:1f:63:7a:ba:1e:49:0c:81:91:
15:aa:45:b1:62:28:50:ac:e1:60:c1:40:2b:56:3b:e8:c2:9e:
10:53:0b:cc:bc:6c:4f:ea:11:e4:26:1d:3c:32:89:ef:66:4d:
f9:f1:61:37:28:a3:27:62:8f:a5:be:ff:5a:b7:e3:7e:8a:18:
e2:31:33:7f:26:6f:31:72:35:2c:ca:da:a5:13:81:f8:a0:c2:
29:34:b7:8f:60:df:2f:15:69:68:eb:8c:7c:21:1d:a5:f5:69:
1f:8e:e9:41:fa:df:0a:0a:96:12:89:1a:ce:22:ef:0a:85:e0:
58:76:8e:d4:ae:04:3d:a6:03:27:be:be:2a:4c:0f:1d:e6:80:
5c:00:d2:d9:c8:c5:e6:66:98:84:69:36:dc:8f:e4:17:c2:92:
95:51:1d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:42 2025 by rpki-client