Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
File: q5z9FXRB9pQo3R9jYcpPSuQss4o.mft (raw, json)
Hash identifier: Zmsf1vy36Q8Ln44q7zIn/TIN6NrCnKhvIIg35+88M5k=
Subject key identifier: 1B:25:6A:FE:B2:92:78:34:17:A9:C1:99:F9:74:DB:CD:81:50:AC:06
Authority key identifier: AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
Certificate issuer: /CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Certificate serial: 01984B543F31F9A624F4CFC7383925757177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:01:09 +0000
Manifest this update: Sun 27 Jul 2025 10:01:09 +0000
Manifest next update: Mon 28 Jul 2025 10:01:09 +0000
Files and hashes: 1: dCfTqcxg62Lir67qVkgBChTuqA4.roa (hash: UBu+ymeFM9aQ8J18E3tvVpuPsYqEYn9P+xx2d6+/UxI=)
2: q5z9FXRB9pQo3R9jYcpPSuQss4o.crl (hash: gftfMVE5mY+gO2kn0QUj4ROtpNbdlVAexgBc/x70Kow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:3f:31:f9:a6:24:f4:cf:c7:38:39:25:75:71:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab9cfd157441f69428dd1f6361ca4f4ae42cb38a
Validity
Not Before: Jul 27 10:01:09 2025 GMT
Not After : Jul 28 10:01:09 2025 GMT
Subject: CN=1b256afeb292783417a9c199f974dbcd8150ac06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:f4:7a:66:c0:91:0d:0f:e5:49:ea:b7:86:
b1:6c:64:f0:69:83:0c:38:3e:00:63:2d:5f:f2:49:
70:88:6c:6a:f5:82:bd:33:77:1e:ce:8b:35:b0:0e:
74:e7:6e:63:fe:5f:5c:e1:78:69:af:73:13:6a:bc:
53:c1:d5:79:48:1c:3f:43:38:29:06:d9:f4:c1:4c:
d1:de:46:74:f4:2b:2b:a2:b3:3a:db:17:69:a0:9e:
1c:73:a5:84:e3:d6:07:ae:c7:37:68:90:5e:56:2e:
b3:d0:84:5a:8f:a5:bc:e5:ea:ee:3b:3b:85:ed:7f:
9e:db:af:15:c2:31:17:9b:ef:e1:55:dd:66:c1:f4:
36:90:81:b9:66:bd:73:56:9f:9d:28:04:6e:b0:3d:
12:14:28:35:5a:a7:2b:62:e9:ac:49:40:4b:8a:52:
c1:42:27:b3:66:21:e6:3b:bf:42:22:45:ce:da:7e:
13:8b:40:04:a4:11:c3:94:f7:7a:b4:9d:09:69:8d:
89:37:44:bd:54:c7:57:ac:78:cf:31:8b:af:9b:f9:
3e:a1:43:de:74:48:05:4e:60:61:40:b0:b1:5f:2f:
d0:9a:41:00:cf:2b:53:3f:37:ca:f7:90:c4:31:8a:
eb:7c:6c:12:38:ae:18:7a:1a:94:e3:b1:68:3e:c8:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:6A:FE:B2:92:78:34:17:A9:C1:99:F9:74:DB:CD:81:50:AC:06
X509v3 Authority Key Identifier:
keyid:AB:9C:FD:15:74:41:F6:94:28:DD:1F:63:61:CA:4F:4A:E4:2C:B3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5z9FXRB9pQo3R9jYcpPSuQss4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7d314e-42cd-42ce-985e-954f26913f43/1/q5z9FXRB9pQo3R9jYcpPSuQss4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f1:11:44:d8:0c:0b:b9:98:2e:42:e2:5c:75:59:9a:c3:c7:
04:24:e4:84:12:10:15:6d:11:75:a6:77:28:01:72:d4:03:35:
7a:8d:78:e3:d1:7e:3f:4b:39:3c:68:61:2f:de:89:38:37:e9:
22:49:f0:2a:3e:16:2b:a7:4f:f5:80:a7:04:30:5e:5d:ca:82:
6a:ea:fe:90:cb:e8:ee:23:7d:1b:43:b4:ea:0c:1c:1a:34:7e:
6e:e3:08:a0:a9:ad:6b:6e:b7:98:53:ec:5d:32:96:5b:2b:5d:
d4:51:95:de:c8:2c:8e:f3:70:0a:f6:94:02:af:fd:99:84:91:
a1:ba:db:63:71:18:53:fd:79:1f:67:6f:a0:f7:ca:06:d2:9f:
7b:e9:33:4a:39:d8:72:13:e2:2b:64:0c:8e:7d:c0:49:b7:ef:
eb:ee:6b:48:79:0c:3b:b9:96:cc:bd:3b:5b:d1:18:b5:77:0d:
ed:2c:2e:49:f0:68:90:ee:63:ad:05:bd:be:64:44:82:71:4b:
75:97:cf:51:03:fe:86:40:37:22:61:2f:9b:34:89:cf:c1:da:
29:29:ab:39:6d:6e:fd:d7:a4:f0:27:cc:87:25:e1:d0:b9:04:
c5:72:42:84:d4:e5:b0:b7:3a:3e:3a:42:66:18:61:a4:47:3f:
f0:cf:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:06:43 2025 by rpki-client