Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: g4s8NevfKv3srr3L3WO/Fv/+4Wbwrnewfb1WaKLTldU=
Subject key identifier: C8:43:CB:94:A2:08:92:BC:97:C0:84:E2:4B:7C:3C:35:07:19:A7:80
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 019847ADAA477EE594CB7FC71391C5463736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 17:00:20 +0000
Manifest this update: Sat 26 Jul 2025 17:00:20 +0000
Manifest next update: Sun 27 Jul 2025 17:00:20 +0000
Files and hashes: 1: 30dF88R9p_cbRx6VSnFVxrOujdw.roa (hash: lDDyLH/2DtUX7Hay39PUf67OI+BeERX0NuLI6ZnhTnY=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: ezMunLQxC+hMnkovP6ybBV3ohLIspaPgQQkeHAiq1Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:aa:47:7e:e5:94:cb:7f:c7:13:91:c5:46:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Jul 26 17:00:20 2025 GMT
Not After : Jul 27 17:00:20 2025 GMT
Subject: CN=c843cb94a20892bc97c084e24b7c3c350719a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:31:59:6f:a5:f2:78:f1:c8:9c:a1:7a:10:
66:73:4d:09:ef:4b:13:a9:41:35:0a:ff:8f:ee:a8:
86:1c:31:97:2c:dc:16:74:e8:0f:8b:e4:91:14:0a:
8d:ca:86:63:de:86:82:77:99:ca:47:95:04:82:8b:
74:25:69:14:21:f4:f7:48:71:f6:92:5c:52:e5:dc:
a3:4f:bb:fc:e9:8f:b5:35:47:02:f0:67:41:4b:c1:
97:14:c7:d6:2c:c1:8a:12:84:83:e9:19:d1:f2:0e:
91:19:fd:e7:b1:9f:e3:11:46:14:d9:1b:dd:8b:0f:
80:c8:27:4e:f6:da:6e:d8:0d:e4:54:65:0d:4a:e6:
74:43:11:6e:ce:d8:65:f3:84:d3:3c:ea:b7:8e:5a:
17:c2:4d:97:09:cb:15:77:24:37:ed:c3:c4:e6:33:
8e:cc:16:6b:41:d3:17:9a:f9:66:da:0f:b1:c3:7d:
2e:b6:07:3f:7b:33:17:b8:69:1e:ad:07:4a:ce:b9:
08:d0:42:ab:26:4b:16:d5:bb:a0:75:76:fb:a8:3d:
5d:46:89:25:b0:9c:23:e0:32:b0:d0:2f:af:3b:c7:
0f:62:4a:49:73:6e:33:0c:71:11:fb:7e:85:bd:b2:
7e:b4:8e:e1:59:b4:2c:58:40:61:c3:90:da:bb:ff:
ad:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:43:CB:94:A2:08:92:BC:97:C0:84:E2:4B:7C:3C:35:07:19:A7:80
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:36:e5:cd:d9:e4:96:cc:d6:a8:cd:3f:8f:12:56:97:eb:49:
6b:4d:21:7e:1c:08:0c:15:d2:ea:f6:8c:f2:4d:38:04:aa:a1:
43:9a:d2:68:9e:85:7a:39:25:a2:1f:88:dd:05:6b:9d:0a:bb:
3b:99:32:8b:b8:8a:11:43:ce:66:7f:be:b2:97:d9:fc:65:ba:
79:11:bb:8b:74:13:ac:d3:09:97:c4:90:71:e2:8b:a1:93:ba:
f4:fc:81:c9:13:43:1e:5c:26:3c:7f:98:c5:64:bb:ed:ef:c7:
ce:c2:6c:7b:5a:83:d9:18:09:c2:b9:2d:65:37:d8:69:2d:be:
f8:e3:d4:69:9c:d8:f7:08:92:e5:51:6a:77:74:91:18:1c:3e:
a4:19:e9:49:b9:99:aa:23:bc:25:98:7d:18:c2:c7:cb:76:95:
17:cd:dc:ec:08:85:08:54:88:ca:37:a4:fa:27:71:08:d7:ea:
56:44:9c:34:c3:85:b8:bf:3f:84:0e:54:e1:d9:da:83:c7:d0:
77:17:04:3b:a2:3b:d1:f6:99:c7:48:5a:06:39:8d:dc:4d:ec:
eb:d9:17:dd:12:82:97:f4:56:4d:ff:e1:89:0b:d2:0c:80:a2:
88:76:dd:b1:ae:51:20:43:7e:f1:2a:e9:82:af:51:86:61:60:
11:7e:b2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:52:10 2025 by rpki-client