Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
File: q5ioJj4GO4p709cYDnpKpklTRBw.mft (raw, json)
Hash identifier: 1Hxw8zoUSAnU6+0WqrtoBCrH5yDq2naeBPHwdwy6/gM=
Subject key identifier: 49:16:A7:A8:E4:A2:42:B4:6D:50:AB:47:BA:A7:67:00:AA:D8:F3:21
Authority key identifier: AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
Certificate issuer: /CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Certificate serial: 019922C39D5FB4CA3B3D300C6286AF46C2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
Manifest number: 053E
Signing time: Sun 07 Sep 2025 06:01:08 +0000
Manifest this update: Sun 07 Sep 2025 06:01:08 +0000
Manifest next update: Mon 08 Sep 2025 06:01:08 +0000
Files and hashes: 1: kD0NYEJpgxaFFDcqPxx98oDLF4A.roa (hash: kEfgwntStfXPUtLxcdJZBEv9NrzPqg0tH8aS2VZkZpA=)
2: q5ioJj4GO4p709cYDnpKpklTRBw.crl (hash: o/qaAHmBicLs0RWvio2u1nrE325nKklin4a2OiXl7dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:9d:5f:b4:ca:3b:3d:30:0c:62:86:af:46:c2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab98a8263e063b8a7bd3d7180e7a4aa64953441c
Validity
Not Before: Sep 7 06:01:08 2025 GMT
Not After : Sep 8 06:01:08 2025 GMT
Subject: CN=4916a7a8e4a242b46d50ab47baa76700aad8f321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e4:7f:34:45:e1:17:63:e7:68:a5:1d:9e:90:
2a:17:3f:54:09:22:c4:43:75:c2:85:71:b8:1a:ed:
cc:1c:23:f1:a9:06:6a:94:72:57:df:30:ff:91:e6:
74:c6:cb:b8:26:fd:f8:b8:ef:8a:71:34:9e:8c:57:
04:71:81:88:7d:79:0e:0e:96:a6:33:da:25:c7:e1:
c9:1b:5c:af:a0:4e:dc:77:40:53:f0:88:5c:ee:8e:
ed:0d:e4:a0:d3:b6:10:a7:cc:b2:e0:a1:d8:1f:f4:
b0:46:e7:17:cc:1b:e2:83:d6:40:35:9c:c2:d0:ed:
95:c7:28:c8:39:1c:39:69:21:33:1b:c2:51:bd:5d:
67:50:43:33:87:9c:c3:e0:f2:8f:d2:b9:17:1f:ff:
85:87:0c:86:ea:c4:5d:46:d6:1c:76:85:95:8c:2d:
dd:95:6e:1f:87:ae:93:59:d0:1c:12:14:af:10:83:
08:2a:ef:7c:b2:ee:ed:21:bf:fc:c0:fd:98:e2:0b:
e9:11:dd:ee:e2:fc:ab:5b:aa:0a:49:9a:81:18:49:
9a:f2:fb:d1:4a:6a:87:25:3c:0b:d6:72:47:02:8e:
1b:9e:2f:d3:f8:cf:83:77:20:66:fd:5a:a3:3c:64:
4a:f8:e0:d0:a2:b8:a5:09:14:ca:f7:74:a9:cb:18:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:16:A7:A8:E4:A2:42:B4:6D:50:AB:47:BA:A7:67:00:AA:D8:F3:21
X509v3 Authority Key Identifier:
keyid:AB:98:A8:26:3E:06:3B:8A:7B:D3:D7:18:0E:7A:4A:A6:49:53:44:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ioJj4GO4p709cYDnpKpklTRBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/119d34-407a-429e-9056-7628cbaf0ec8/1/q5ioJj4GO4p709cYDnpKpklTRBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:98:6f:d7:2d:86:b6:45:4c:0d:da:d0:1c:51:7f:92:2d:e2:
4e:84:22:d3:e9:41:28:f1:e6:27:a8:0a:c2:35:ad:3d:09:78:
7f:6d:81:07:c8:68:c6:27:37:98:89:22:d8:49:91:c8:5c:1b:
ef:a9:c5:6f:3e:0c:ac:f1:7a:20:68:46:fe:86:ab:c1:de:48:
97:1d:c6:71:57:34:aa:23:e7:ea:e0:c9:4e:d1:93:c0:34:73:
f7:ee:0f:8b:f9:de:06:d0:f2:a0:8a:39:68:c4:3a:8b:9b:c8:
bc:fa:08:db:a5:6c:ba:fd:d3:24:82:4d:65:96:6e:70:f7:a2:
b5:15:27:00:de:69:9f:60:e1:31:d5:cf:2e:01:c2:5c:92:e8:
48:60:9d:c2:87:bb:67:0f:17:16:aa:1f:37:c9:96:4e:42:6f:
85:69:23:b4:3c:13:8c:db:a6:6d:c0:a0:89:4b:10:5b:86:98:
76:57:7f:12:93:8e:15:d0:af:c1:f5:ae:b2:b6:4e:a5:62:06:
b2:26:8d:14:13:44:f2:86:35:51:2d:e5:f1:98:90:3d:98:9b:
26:ae:1d:4a:86:ee:e4:94:e7:ab:3f:1d:d6:55:11:3c:f4:77:
53:14:3c:d3:92:83:92:d5:53:3d:00:10:8e:a4:ec:95:82:f1:
76:28:be:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:24 2025 by rpki-client