Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: D2mmRQpKIcdpUgQjdddSqL+HBsYZHMIhwwfHNYhZ0s4=
Subject key identifier: C5:1C:CF:36:B9:19:7D:C8:A7:22:76:7E:F2:2E:84:68:61:01:A8:21
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 01984AAF028D4427287F607BB4BE430C1E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: S0sJgeFKsSQM_Y24-bMbEEazWOE.roa (hash: y7ujKOOyPaVjZL4Z2dl77e4qeqFzdcjNTXADyZzs44w=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: 8g+wh0l87Y7bFWHvjoPZm195Qz/qyV5eROoOR0gpQiM=)
3: r-ygRbjtxxgO3t3aGjdEJ1nnCcw.roa (hash: WR2yF8mNXvC7JDBK3ZnnxThACZnLlRj8L9WEQd6jnY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:02:8d:44:27:28:7f:60:7b:b4:be:43:0c:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=c51ccf36b9197dc8a722767ef22e84686101a821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:8e:02:86:1e:24:66:d3:c3:fa:67:c5:6a:
8b:c5:31:33:bd:87:a7:93:4a:53:e2:a5:4c:9c:46:
12:20:95:8f:0e:10:c2:d5:02:93:85:73:73:07:57:
e8:9d:a3:50:7f:e3:d2:55:bd:f5:c3:50:30:78:12:
26:c9:08:fc:b4:d7:61:27:37:02:d3:70:a3:3f:2e:
1d:21:3b:6a:46:62:e0:f9:40:25:82:52:86:56:9d:
df:7f:3d:85:4f:e3:b0:df:f5:dd:34:77:a2:8c:ad:
ae:1c:06:3a:f5:e9:ff:7d:22:5b:76:44:da:1f:0c:
85:31:35:dd:04:93:64:6e:5b:01:b5:df:fb:41:be:
bf:e3:f9:94:36:df:8d:23:cd:39:7d:ed:b4:9b:06:
91:aa:7a:86:77:bb:f4:80:13:51:b0:21:f8:c4:cd:
28:09:67:21:83:61:f7:d7:9f:90:54:5f:be:87:65:
19:fe:3c:4f:f8:f0:c6:79:7a:7a:bf:3b:c8:70:64:
a9:d0:f5:ce:3b:f6:87:a2:d4:c5:78:62:28:20:69:
3c:13:da:bb:ff:45:6a:f8:7f:d5:e8:dc:c5:ad:02:
e5:ca:a7:94:27:6c:36:dc:e7:8a:e7:f6:92:67:63:
8c:24:fb:42:b4:33:21:42:a2:83:81:9e:47:3c:5f:
a8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1C:CF:36:B9:19:7D:C8:A7:22:76:7E:F2:2E:84:68:61:01:A8:21
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:48:62:da:b8:a0:98:b1:8f:00:c4:cf:13:ac:3a:4f:3b:83:
f8:23:00:6e:72:dc:cc:14:e1:c5:39:3c:e9:8a:33:ec:b0:57:
82:59:00:a8:08:ab:22:d1:14:16:ce:ef:9b:31:ca:56:06:7b:
30:3b:aa:14:18:12:00:c3:b2:58:f7:54:15:0b:1c:5f:eb:2b:
d6:31:45:de:82:89:df:51:bd:1a:2c:71:f5:da:da:57:4d:c5:
be:75:ec:18:90:ba:b0:aa:00:03:86:80:ad:aa:71:67:53:4c:
2b:3d:1f:b7:13:2f:d3:dc:10:f4:3c:12:3d:6d:29:e4:8e:0d:
52:e8:cc:7d:85:97:be:d6:8b:05:fc:f9:f8:e8:05:12:2b:7d:
1e:b1:0e:9b:20:85:bc:dc:77:2f:f8:26:a4:1e:eb:19:a4:d5:
d8:cd:f0:57:9f:f2:a8:e4:58:a6:0a:d5:6a:0d:91:f4:d4:37:
81:a2:72:c6:c9:7e:a1:7a:1a:8b:ad:67:88:bb:74:9c:8f:3e:
70:fd:cb:79:fb:13:71:54:d0:e5:6f:ae:91:0b:1b:f7:98:2c:
aa:99:62:a6:06:9e:dc:f2:2a:4b:8d:a0:26:f9:7d:db:cb:f6:
df:d9:e3:3e:9e:0a:8b:ea:ac:af:59:d6:70:e5:75:ee:46:89:
fd:3b:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:16:01 2025 by rpki-client