Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json)
Hash identifier: CH1AcJ9In+dXy/kn4uAGo5nnrvf+snVqydoRMSN4rIM=
Subject key identifier: 2A:DE:D1:81:7F:37:1D:6F:CD:AA:59:57:32:C9:50:2E:5E:45:C1:BA
Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Certificate serial: 019849D35F01C4B15174ECA6FDDA2D7351FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
Manifest number: 0E69
Signing time: Sun 27 Jul 2025 03:00:45 +0000
Manifest this update: Sun 27 Jul 2025 03:00:45 +0000
Manifest next update: Mon 28 Jul 2025 03:00:45 +0000
Files and hashes: 1: evpxyC_xQr6-9_i5vhF3SSD60QY.roa (hash: F+Lkz2iLknBGekmgWZevszL+qAh6hnFUDMady9RqMNg=)
2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: f2muaTqvo+gqE7dQ7TmIYxT0heuMJtE2rNJrVoXLzp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:5f:01:c4:b1:51:74:ec:a6:fd:da:2d:73:51:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176
Validity
Not Before: Jul 27 03:00:45 2025 GMT
Not After : Jul 28 03:00:45 2025 GMT
Subject: CN=2aded1817f371d6fcdaa595732c9502e5e45c1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:95:49:0b:64:a5:a3:31:05:b4:5b:dd:13:
95:69:dd:aa:ed:10:37:15:33:fd:15:40:4d:e1:34:
cb:47:5d:52:2f:fe:0c:55:b8:5c:71:84:e2:e0:9f:
66:e1:14:9c:90:27:1d:e0:1f:02:d8:3e:d0:38:f9:
c3:ae:02:53:a4:7e:8e:0a:2a:13:51:ff:cc:29:0d:
01:43:00:db:b2:31:38:75:73:0b:16:95:7b:f1:13:
6c:5e:cf:69:6f:59:23:e5:fe:22:09:b1:d4:e2:11:
78:aa:52:46:04:87:37:04:a6:e8:a7:20:cb:95:f0:
d5:bf:73:b6:84:eb:ea:3e:24:b1:96:19:ad:b1:81:
ea:cb:a2:b0:5f:25:34:2f:e7:f4:5f:94:cc:2b:4c:
98:37:42:90:b2:0c:97:72:4f:00:ae:85:89:64:c4:
1e:68:3e:48:b1:ef:ff:1b:47:54:f2:30:60:ff:0b:
68:a9:89:41:e5:e2:ee:b6:8c:06:4e:f3:19:da:b6:
e2:b7:a4:a6:62:9a:ec:70:b5:35:dc:e6:e4:5d:2d:
fa:fc:58:8d:a3:99:9b:45:e0:2c:d9:c4:c2:1e:24:
5c:a0:92:d8:78:c8:0c:70:7d:87:94:72:55:af:80:
b6:d1:87:e0:5b:91:2d:f8:e4:8c:e9:82:0e:72:73:
87:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:D1:81:7F:37:1D:6F:CD:AA:59:57:32:C9:50:2E:5E:45:C1:BA
X509v3 Authority Key Identifier:
keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:5d:03:8e:a6:34:ab:c8:ba:60:3a:79:0c:0b:69:27:a0:e3:
20:83:4d:aa:5d:6f:a2:d7:8f:ca:d7:dd:62:c0:68:87:46:93:
8f:6a:a1:02:23:b7:4c:48:f7:1d:79:b3:79:f2:06:1f:c6:20:
45:85:ba:d0:30:8c:5b:4a:42:59:6f:06:92:bf:c6:11:94:80:
1b:d8:6c:b1:e7:8b:21:60:12:40:55:94:c6:07:e3:da:2b:d0:
24:3a:a6:1d:82:22:b2:24:71:1a:82:44:7f:5c:e2:be:ef:bd:
e2:36:dd:06:8a:9f:0c:4f:f8:66:8d:12:3c:6c:49:8c:f3:46:
6a:81:47:6d:d7:64:fa:fd:10:89:52:3f:66:70:53:52:85:f5:
13:56:c6:79:ae:13:7e:a3:ab:98:70:04:7d:79:33:b1:c5:c6:
02:b9:b4:4f:8a:ec:69:94:f5:3f:0c:f0:2e:15:d7:33:65:7c:
ce:bd:aa:60:45:86:70:03:be:aa:19:43:57:8f:0c:be:ee:65:
fe:29:42:e3:e8:cf:76:22:ac:90:72:86:81:30:38:9e:27:22:
ea:97:0f:91:26:4e:e8:9d:7a:b5:91:78:4e:5b:cf:3d:da:fe:
f2:ab:be:26:dd:a0:61:d9:25:3a:c4:97:71:3c:26:ab:ce:5f:
e3:07:62:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:59 2025 by rpki-client