Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
File: q3vjT10mnaUCqmg0i_B7ktksDMQ.mft (raw, json)
Hash identifier: 5ixPhLol7G4GCIEDukbLwL98vDlCrERxcm6kK620PgM=
Subject key identifier: 5A:6C:8D:B8:6C:89:C4:4D:9F:C2:3F:76:02:6F:99:62:D8:55:6D:DC
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 01992CD9053FFD2ADE7B623FB33EC6BB5CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
Manifest number: 017C
Signing time: Tue 09 Sep 2025 05:00:43 +0000
Manifest this update: Tue 09 Sep 2025 05:00:43 +0000
Manifest next update: Wed 10 Sep 2025 05:00:43 +0000
Files and hashes: 1: 7abujg5YyGw-Dy5kOxbayEhXp8E.roa (hash: lOz5VIr6Vz6VAh0bdDShfDUIzKOutVJzrANsECMkN+c=)
2: q3vjT10mnaUCqmg0i_B7ktksDMQ.crl (hash: hL1/EwIWnopTz39EZVRIWhMTRVR6Dg33LPfeaKzcMWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:05:3f:fd:2a:de:7b:62:3f:b3:3e:c6:bb:5c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: Sep 9 05:00:43 2025 GMT
Not After : Sep 10 05:00:43 2025 GMT
Subject: CN=5a6c8db86c89c44d9fc23f76026f9962d8556ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:53:af:36:4b:85:69:a4:16:42:5d:59:18:
99:ad:e6:0b:05:22:49:ab:23:4f:6d:ed:74:10:08:
ea:e7:35:aa:73:73:93:71:95:59:19:91:6e:00:20:
d3:d7:40:85:57:27:79:d7:21:c8:ae:cd:5c:db:7d:
b0:01:ae:98:56:92:a5:b7:0c:27:4e:e0:64:43:a2:
63:44:d8:4d:99:99:61:d3:70:c5:d8:22:c1:a3:68:
ea:df:34:60:59:5a:e9:38:bc:61:a5:10:cc:19:d9:
9c:b1:0a:5c:18:59:3b:e8:12:b7:5c:41:0a:11:2e:
03:85:dd:84:e8:9b:b6:a0:98:66:87:42:aa:7d:d3:
84:7e:32:8f:d8:e6:9c:03:d5:eb:f6:e3:3e:40:78:
bf:c3:16:14:ac:a2:b0:f0:fd:00:ae:29:71:5c:2c:
ad:4a:72:87:33:82:fc:f6:08:f2:e9:b0:e4:02:47:
c6:09:b3:0c:0e:81:60:8c:b1:66:42:0d:c9:01:df:
4a:e6:91:e3:cf:99:4f:1c:da:46:ea:76:c4:9a:7d:
6c:70:90:2c:51:e6:a9:db:ac:eb:02:8d:26:2a:39:
10:72:4a:b8:1b:fc:cd:59:db:61:ee:93:3a:a6:0b:
27:ec:c1:1f:d9:09:00:87:76:4e:75:04:63:47:6e:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6C:8D:B8:6C:89:C4:4D:9F:C2:3F:76:02:6F:99:62:D8:55:6D:DC
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:1d:04:39:6f:b2:c1:d7:d8:5c:ca:30:01:88:f1:3b:19:bd:
b0:a7:e7:c0:98:2d:9e:d5:02:d8:1f:68:e9:a0:72:2f:51:93:
10:71:e8:96:bc:6e:23:6d:80:28:24:19:25:c7:26:8b:57:48:
4c:d1:c1:da:ab:4f:9f:77:5e:9f:51:66:64:fe:a1:64:29:9f:
c4:25:0b:76:de:5a:b4:db:f5:5e:78:f3:70:ea:b3:09:cd:07:
16:ed:8e:5a:f1:8a:3f:4f:fd:a1:f1:11:a6:c7:0f:4a:36:52:
a7:91:79:fd:9a:59:91:5c:73:2a:fa:82:ef:a8:55:c8:4c:d6:
6b:13:f1:4d:4e:6f:f0:0d:f5:85:80:db:b1:4e:fb:cf:0a:ce:
45:e9:01:ba:66:9a:ef:b5:a3:94:d6:ca:44:0c:e5:af:3a:01:
b7:e3:9f:12:b6:aa:65:bd:42:57:60:0b:5c:38:17:79:b5:b1:
d5:2d:0f:88:ae:fd:f5:80:78:6c:af:28:c6:f7:c8:49:20:97:
d0:d3:8b:df:e7:b2:be:fa:c8:44:bc:a4:e8:1c:d0:94:8e:4f:
0d:19:fd:1c:5d:5e:b3:ac:d3:08:48:d7:46:5c:99:a3:2d:ee:
ca:b0:c1:f8:15:de:1e:91:3a:f9:60:a6:47:35:d6:9a:56:a2:
c7:61:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:03:42 2025 by rpki-client