Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
File: q4PmT3LdWIn7E9whjGg_bi-s9bI.mft (raw, json)
Hash identifier: hvjXY540zvgac8pDCV5UYu6R8IVjqP0t5LJdnY/ZlUU=
Subject key identifier: 08:E5:1B:1C:4C:3B:56:69:BE:14:DF:50:FC:03:8A:63:F5:8B:96:B8
Authority key identifier: AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
Certificate issuer: /CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Certificate serial: 0199221F383EFD282886D2A1F1A5A0EA145F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
Manifest number: 1677
Signing time: Sun 07 Sep 2025 03:01:35 +0000
Manifest this update: Sun 07 Sep 2025 03:01:35 +0000
Manifest next update: Mon 08 Sep 2025 03:01:35 +0000
Files and hashes: 1: XtZEW_Ge-fj7ts452exDji_sEMc.roa (hash: Z3qqH40xAjBbJprbXnVydXKDBxTyDTfpQSqRlWz/dFs=)
2: q4PmT3LdWIn7E9whjGg_bi-s9bI.crl (hash: s29QHTh/i+0rvxDVMWMYlscGWfaq8exb+KWJMvAdFcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:38:3e:fd:28:28:86:d2:a1:f1:a5:a0:ea:14:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab83e64f72dd5889fb13dc218c683f6e2facf5b2
Validity
Not Before: Sep 7 03:01:35 2025 GMT
Not After : Sep 8 03:01:35 2025 GMT
Subject: CN=08e51b1c4c3b5669be14df50fc038a63f58b96b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:9d:5d:20:13:b5:ce:33:d4:19:d6:98:68:
63:3f:e3:d3:c0:b3:b9:eb:90:ee:ed:32:7d:1e:62:
56:28:1d:58:ec:bf:0f:0e:35:32:cd:39:ce:cb:a7:
5f:6e:39:70:6e:a3:fd:d9:a7:c7:8c:57:74:ae:35:
f8:a3:71:aa:e7:24:95:9d:2f:27:68:9d:2f:02:c9:
9f:b3:9b:d1:a0:4b:39:51:02:00:27:e4:7c:70:df:
5b:45:65:33:03:35:b5:84:08:1c:de:2d:5f:a3:53:
51:98:7a:37:6d:11:9b:72:e7:8b:ca:fb:73:dc:8e:
24:a8:d1:70:12:1d:63:7e:c4:50:f2:6b:15:76:a2:
65:7d:fe:2c:ce:37:6f:fc:91:00:2e:bc:0d:09:0b:
60:29:8b:8c:cd:b6:e5:d9:72:1e:32:b3:7f:2d:01:
6a:cd:5f:e9:7c:5f:e4:b3:cb:ae:5a:f1:a8:92:3a:
e0:ab:53:03:09:72:ee:82:ce:21:cc:60:a6:72:d5:
d4:bd:46:4e:73:9e:5a:2c:95:b5:e7:18:12:c2:52:
c9:3e:4b:57:98:a3:2f:eb:7d:fc:06:14:f9:49:26:
06:d4:f7:a1:52:7e:64:a1:2b:be:07:37:0b:6f:d1:
d3:69:3c:3f:88:1e:e8:af:cb:da:3a:da:64:5c:2f:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E5:1B:1C:4C:3B:56:69:BE:14:DF:50:FC:03:8A:63:F5:8B:96:B8
X509v3 Authority Key Identifier:
keyid:AB:83:E6:4F:72:DD:58:89:FB:13:DC:21:8C:68:3F:6E:2F:AC:F5:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4PmT3LdWIn7E9whjGg_bi-s9bI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9d66fc-31d4-4ab1-8eae-541f48924952/1/q4PmT3LdWIn7E9whjGg_bi-s9bI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:92:ca:20:d8:de:1f:9d:0f:8d:c2:a8:df:73:1b:89:b3:db:
b7:9b:cf:c3:fd:41:c1:76:81:f6:c5:19:ef:db:d8:7b:ad:a2:
e6:0f:b4:e5:eb:3b:87:21:cd:8a:f2:bb:2e:bf:9f:10:1f:5e:
e9:15:51:c1:e5:17:bb:e3:8c:91:a6:a7:7a:4c:61:a6:d7:fc:
cc:6d:9a:ba:bb:eb:33:98:cc:9a:e2:11:ed:6d:da:3d:dc:03:
e0:e4:ca:b1:78:62:62:15:f3:fa:6d:64:f6:9a:3b:40:37:eb:
d3:cc:3c:cb:46:85:be:b6:7c:e2:61:bd:49:5f:62:f6:f5:0e:
68:e0:d2:3b:8c:27:c6:39:89:fc:ce:d5:bb:44:d2:ca:12:a1:
30:d4:e2:d6:6d:4f:6f:c8:b3:9c:44:d5:37:e6:72:1c:51:40:
56:0f:c6:eb:5e:84:fa:4d:bf:f0:5e:6c:35:79:0e:df:36:b0:
ce:7b:9e:64:ec:0c:df:30:7f:47:f5:88:da:04:d2:ae:62:8c:
e1:3c:27:44:68:83:86:6c:4d:72:14:15:22:06:49:6b:c8:50:
97:c6:cd:53:3e:f9:80:19:df:3f:6f:d4:cb:ab:1d:e3:15:95:
a3:fe:5f:da:0e:28:8b:71:ae:21:d6:51:48:fd:01:9f:73:e3:
b0:28:6b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:55 2025 by rpki-client