Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
File: q3ukNXZmdmStbymmZicOM1eDbxo.mft (raw, json)
Hash identifier: N7QxY0IvR+el+t34vZURjhJEEjjPNreBZOWVEOloTcA=
Subject key identifier: AD:B4:73:34:B8:8E:0B:BE:10:14:07:DE:34:FC:4F:A8:9A:9A:28:39
Authority key identifier: AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
Certificate issuer: /CN=ab7ba43576667664ad6f29a666270e3357836f1a
Certificate serial: 01984C2F8310BC03996FC9C8A41DA749BF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 14:00:38 +0000
Manifest this update: Sun 27 Jul 2025 14:00:38 +0000
Manifest next update: Mon 28 Jul 2025 14:00:38 +0000
Files and hashes: 1: q3ukNXZmdmStbymmZicOM1eDbxo.crl (hash: 3QJS5qibwgiRUxJB/x3cVaMQCI+93JLmPK6BssBAl4Q=)
2: rFtQ52vnm-Gf2JN4L6yb0DTiUgw.roa (hash: U6PLdhl9fIkfcENijAv37MSFDTY2VRfS2bCNJb0dRIc=)
3: z4h6VOta7nlktuKCkK1-Zw-1S8Q.roa (hash: XA8aL+R7cIm6KIZ8pt2+mp6cPL138KkhjyZFmjM+7SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:83:10:bc:03:99:6f:c9:c8:a4:1d:a7:49:bf:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7ba43576667664ad6f29a666270e3357836f1a
Validity
Not Before: Jul 27 14:00:38 2025 GMT
Not After : Jul 28 14:00:38 2025 GMT
Subject: CN=adb47334b88e0bbe101407de34fc4fa89a9a2839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:e9:35:ff:b4:d8:ae:88:a1:89:06:1c:48:
a5:ed:a8:8e:f0:82:5f:48:35:e0:63:10:b8:54:a4:
71:11:c5:2b:52:c8:4f:b3:40:4e:e1:c8:59:ba:c8:
9e:f7:37:13:67:02:75:98:3b:32:36:53:b0:3a:95:
31:f9:95:e7:a8:62:ea:de:43:ef:73:5f:b0:55:bf:
d5:0b:48:ca:ec:ee:e4:11:cb:53:91:0d:f2:2e:59:
39:7a:bf:fa:f2:de:24:15:ea:73:9c:e8:25:54:80:
b5:33:66:d3:f6:9f:86:4a:4f:e1:9b:1b:07:ff:e1:
ad:9b:b7:a5:22:70:f7:d0:91:7e:79:f3:60:8d:91:
da:b4:12:13:8f:ae:17:7b:97:e3:38:1f:c6:a4:3a:
cc:7d:f6:8a:31:b9:5f:41:81:c0:b5:df:18:42:71:
02:ae:70:03:11:b2:e0:78:36:a3:8c:f7:22:93:29:
5b:9b:c7:0e:7c:71:0d:a1:1e:76:02:44:e8:8a:67:
d9:9f:c6:d1:2a:4a:83:96:3c:06:71:0b:cb:76:8f:
25:61:90:f7:5a:71:78:38:9c:93:0a:8b:9c:67:c7:
8c:f6:6a:fc:30:77:74:28:1d:d7:80:e2:55:07:05:
08:80:50:cb:41:71:dd:82:4a:43:96:73:e9:1a:ba:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B4:73:34:B8:8E:0B:BE:10:14:07:DE:34:FC:4F:A8:9A:9A:28:39
X509v3 Authority Key Identifier:
keyid:AB:7B:A4:35:76:66:76:64:AD:6F:29:A6:66:27:0E:33:57:83:6F:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3ukNXZmdmStbymmZicOM1eDbxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/0e1f91-c3ed-435d-a45f-23ac758048ec/1/q3ukNXZmdmStbymmZicOM1eDbxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:83:a3:21:ab:d6:3a:3c:62:49:1e:93:32:15:97:d3:47:7d:
c1:25:3a:57:10:6e:ef:73:4f:eb:b8:ba:8e:4c:dd:59:64:ca:
c1:dc:7e:8d:4d:f6:fe:fa:f8:6e:0f:b9:9a:85:5c:57:12:ce:
f6:5d:e1:99:11:6f:16:3f:cb:3d:ff:64:2b:b7:10:b3:13:d9:
71:79:41:cd:3b:72:b2:e6:21:c9:8e:48:f1:62:87:c3:d7:67:
fc:b9:d3:94:de:43:3d:a9:3f:11:11:97:de:c1:0c:43:e0:28:
aa:7b:a6:56:09:2c:38:e3:92:e1:c2:ef:77:64:c9:78:77:30:
16:b8:a9:b1:d4:d7:7a:bb:69:2c:2a:d8:b6:5c:c4:22:14:6f:
bf:ff:f3:ec:1a:ee:cd:7e:ec:95:0b:a6:8d:75:77:41:41:d7:
cf:61:b3:2f:57:15:31:85:ba:90:d9:e8:e0:27:a4:10:9c:d7:
a1:1a:98:a4:4f:ef:ff:8b:ea:4e:b6:ea:74:e6:a7:2e:be:d8:
9e:fc:10:ff:bd:75:52:ee:e9:2e:f3:87:95:73:c2:8a:8d:4b:
ec:fc:95:4e:d1:4f:71:7a:8c:3a:dc:71:b4:72:1b:27:5e:38:
a1:9a:3c:a9:d5:c9:d5:da:2b:06:ad:ed:5f:62:07:6d:a9:ac:
84:b9:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:03:10 2025 by rpki-client