Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
File: q08Em20XYCv3tI0QTQja8BQx28I.mft (raw, json)
Hash identifier: W/7rzcb0FitKEuMMCVn5NkLdFf/XJDKvXBqWqR6AT6s=
Subject key identifier: A7:C4:93:4B:A0:30:47:2B:B2:7D:0C:E5:07:FC:03:8B:8F:83:4E:DE
Authority key identifier: AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
Certificate issuer: /CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Certificate serial: 01993424FD23505CFA02845803EC011A4125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
Manifest number: 1678
Signing time: Wed 10 Sep 2025 15:01:03 +0000
Manifest this update: Wed 10 Sep 2025 15:01:03 +0000
Manifest next update: Thu 11 Sep 2025 15:01:03 +0000
Files and hashes: 1: kWd4hi-OyYBjozDmbmhqQmpA6Pw.roa (hash: ZCQPM7gY7pbLQQubJYcs97+7fXVoiPmIY9e2vsVxbNM=)
2: q08Em20XYCv3tI0QTQja8BQx28I.crl (hash: +Cx5mnnLJHnfxL71KbLf7mApSCwpDvRzc9isz/9w0Tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:fd:23:50:5c:fa:02:84:58:03:ec:01:1a:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f049b6d17602bf7b48d104d08daf01431dbc2
Validity
Not Before: Sep 10 15:01:03 2025 GMT
Not After : Sep 11 15:01:03 2025 GMT
Subject: CN=a7c4934ba030472bb27d0ce507fc038b8f834ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:68:1d:24:2e:b7:e2:8c:9f:e2:58:33:9c:
df:08:2c:21:eb:7f:6f:90:ea:83:a9:ad:32:a4:2a:
67:0b:05:ba:dd:1d:5c:d1:2c:90:b5:dd:4c:a8:84:
e5:19:9c:90:6b:f1:a5:fc:22:5c:ec:85:5a:6f:68:
22:c4:ba:ce:ac:2f:74:df:5b:35:83:06:77:e5:a0:
6e:ba:87:7a:68:f7:ed:02:01:5f:5e:a4:29:3a:df:
b7:96:bb:65:b0:7c:a6:49:41:89:87:9b:bb:b3:5c:
f0:da:5a:67:4a:ac:8d:73:f7:a8:82:3d:39:d5:ff:
a5:d7:8c:17:40:14:86:69:be:d9:66:af:f7:eb:ad:
11:64:d8:46:e5:c5:5b:39:5a:86:5f:7e:a3:c1:23:
99:e2:bd:63:1c:ef:4e:6d:55:4d:e8:74:c8:90:ae:
c0:e5:55:a0:e1:83:88:20:1e:17:1e:e3:bb:24:84:
4e:c2:d9:7a:7b:89:da:ac:c9:77:25:eb:77:2a:49:
fc:cf:74:43:cf:15:7a:18:62:58:57:3f:97:5e:b4:
43:a1:f5:5e:02:07:be:19:fb:77:30:61:08:5b:1d:
57:43:65:bb:74:1a:5b:07:57:0a:a5:35:5b:fe:9d:
df:7b:06:36:0b:05:b5:19:03:a4:5d:96:45:cc:dd:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:93:4B:A0:30:47:2B:B2:7D:0C:E5:07:FC:03:8B:8F:83:4E:DE
X509v3 Authority Key Identifier:
keyid:AB:4F:04:9B:6D:17:60:2B:F7:B4:8D:10:4D:08:DA:F0:14:31:DB:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08Em20XYCv3tI0QTQja8BQx28I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94d49b-b0b8-4f0f-a188-94a1968bcadb/1/q08Em20XYCv3tI0QTQja8BQx28I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f1:b0:89:ef:b2:32:8b:35:ae:0a:94:6e:29:5d:2b:95:4a:
f7:d2:60:4f:eb:6a:2d:15:15:78:9b:44:8e:09:52:a6:64:17:
8e:f4:d2:2e:cd:f1:fc:89:dc:31:01:f5:45:8a:84:82:26:3b:
1b:03:3f:1a:fe:83:53:61:3f:73:eb:3a:89:4c:45:3f:b2:f2:
24:f7:ad:04:77:d0:d4:59:d0:b3:d1:24:55:40:f0:d4:45:25:
38:60:16:f6:06:d8:77:5b:e9:3e:89:c4:84:54:7d:77:ed:d7:
39:7c:45:c7:dd:96:6b:aa:59:47:23:96:90:32:05:ae:78:ad:
7d:81:3c:f4:16:5b:a3:7e:62:77:14:7f:52:35:1b:52:a8:11:
91:1f:de:0d:8b:7c:ec:05:97:8a:c2:16:9f:b8:6f:f5:47:44:
e2:4d:e8:0d:73:98:d0:57:7f:60:28:fa:66:5c:9e:59:0d:48:
42:55:19:22:e1:44:17:bc:43:1a:4a:cc:07:41:d7:6c:0c:9b:
86:0d:7d:3b:30:37:4a:7c:69:6c:41:51:f9:b0:7a:6f:1c:d8:
d7:39:94:d1:3d:8e:92:b7:12:28:1f:4c:e2:ae:65:71:a3:2f:
72:b0:5f:f4:25:06:47:e9:46:ec:61:a3:84:da:cb:1c:11:67:
f5:bd:c7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:07:45 2025 by rpki-client