Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: mim97K6R6MYmGXZRR+2KL/VyUcVZ68S8DMoO0GzIu5c=
Subject key identifier: FB:42:FA:14:61:D1:33:15:39:75:CE:C3:3E:26:15:26:3C:38:34:79
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 0199239FD117DB5422E0F05CC86A7A717795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 10:01:40 +0000
Manifest this update: Sun 07 Sep 2025 10:01:40 +0000
Manifest next update: Mon 08 Sep 2025 10:01:40 +0000
Files and hashes: 1: LtPXIJBODsTgHOTG4NK5yVKpj5k.roa (hash: ITX8aC19jlc3FBy1kQN9LCE6ibXilzDMrJg98+CkzVM=)
2: TEBaODlmDCqhNdveSNP6xcEtL-0.roa (hash: Ni+drEe1sF+jcV53LsQ0wrDEiq7Vue9pJpbJAT7gLcE=)
3: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: TWH2jJQC8LUeEzAhz0wRqxWbu17EB96rKJh03hxZZ4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d1:17:db:54:22:e0:f0:5c:c8:6a:7a:71:77:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Sep 7 10:01:40 2025 GMT
Not After : Sep 8 10:01:40 2025 GMT
Subject: CN=fb42fa1461d133153975cec33e2615263c383479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:3f:da:1b:5b:b7:37:04:ca:d8:bf:22:37:
98:8f:70:50:36:2d:32:bc:68:cf:a9:27:5b:0f:0e:
a5:ca:d2:c6:4c:a0:0c:2a:f6:b8:67:d1:7e:15:7f:
f3:1a:52:cd:b5:5c:8c:87:89:28:71:ec:3a:f5:de:
42:4a:33:94:7e:09:2d:fa:e3:a6:b0:a8:92:37:40:
3f:25:b7:23:1f:c5:11:93:8f:64:64:0b:31:90:20:
52:b1:a5:36:e3:91:f5:15:9a:6a:70:9a:bb:7a:85:
6a:20:1f:2f:a6:3d:71:6c:aa:b1:b1:90:4a:bd:6a:
79:2f:99:db:ae:fa:7a:fd:2e:b7:44:f8:8d:59:7f:
f7:2b:9f:b3:07:89:07:ce:b1:2b:ce:82:3a:28:9e:
68:bb:27:49:0a:2d:0b:5b:c6:5f:b0:df:0c:9b:38:
e0:87:d1:0e:1c:4e:bd:42:b6:5f:41:f7:ec:83:be:
4b:e5:06:9d:7b:8b:f7:51:fd:2d:32:76:0c:d3:bf:
a8:d9:e0:e6:2a:4a:07:c9:62:0a:12:79:2c:98:39:
95:27:f3:b5:f8:59:66:64:51:54:2c:2a:b3:e8:36:
d1:16:9e:89:7c:4a:30:36:9c:60:04:ea:67:ec:1b:
b6:49:8c:be:72:ec:13:9b:aa:ae:98:a4:1d:da:95:
db:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:42:FA:14:61:D1:33:15:39:75:CE:C3:3E:26:15:26:3C:38:34:79
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:58:fa:a6:12:4a:f8:17:0c:09:5a:18:65:60:4a:07:c3:92:
52:9a:9c:72:76:b8:18:ab:85:72:c9:a8:1a:66:83:d1:7f:fe:
02:fe:62:b6:e8:ce:e1:15:01:4e:ec:ae:4b:6d:b4:e6:7d:d7:
0e:60:4b:0b:72:e1:ba:4c:a4:71:ad:83:35:94:cf:44:4b:b1:
e8:5b:4f:11:d5:a3:c2:62:28:4d:2a:47:8f:d0:13:45:f8:63:
4a:d3:e5:0b:53:9c:23:fb:74:e7:a7:38:21:57:5a:c9:5c:d7:
0d:06:6e:34:00:63:fc:8a:50:13:20:64:1b:8d:6c:23:63:a5:
5f:86:5d:75:a5:90:4a:9e:90:9d:13:7f:09:54:c8:34:9b:28:
16:e8:1e:65:9e:86:b8:4e:ae:ff:18:e8:b3:d1:e4:5b:04:6d:
9d:14:2d:f4:3d:44:d8:93:f4:a0:9c:39:c6:6a:2e:85:24:89:
7c:fc:5e:64:b2:60:e2:bd:2a:d3:54:94:06:cd:cf:cc:16:be:
30:02:60:6d:11:2c:c0:e0:98:87:3e:aa:5f:d0:d8:5d:9d:bc:
ce:3e:32:e5:c1:6e:e6:a4:81:71:cd:ea:ca:1a:f8:55:ed:37:
7c:d1:36:ae:b4:35:0d:bc:1d:60:72:3b:5a:ff:1a:26:a0:28:
06:b1:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:03 2025 by rpki-client