Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: tcSTs01wc/FBbmhf2+85Xppe6byL0xRuo2Uqch949h4=
Subject key identifier: D8:F4:09:51:49:4C:B5:89:7E:D0:64:A8:82:B7:7B:85:FE:67:CB:67
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 019841AC04538C3078DAB4C2DA173CD8FFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 161D
Signing time: Fri 25 Jul 2025 13:00:48 +0000
Manifest this update: Fri 25 Jul 2025 13:00:48 +0000
Manifest next update: Sat 26 Jul 2025 13:00:48 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: N5zj-5kvAhoJCItFFzdBa1pYbH0.roa (hash: ypTV2FdvIR6mdrYiLR6I+YqYJsccCY+5Z3r1n8pA0MU=)
4: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
5: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
6: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
7: oFumiBsAWooyBU0TcSWUrXQVV0M.roa (hash: O0f3W53wpKnfJgwZpwBD1xXfrpSbNoYlbIB/lXeKPq8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: jnme2ltHj6UmfDQBU/WToA/q/Pl+vIVeZReOFyKuVLk=)
9: zJzk_tM6gq364ozeInI309dIrxA.roa (hash: Wk+SRLeVkkf92Q0xGlI36RRywoqFOdrDHHnD94zbdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:ac:04:53:8c:30:78:da:b4:c2:da:17:3c:d8:ff:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Jul 25 13:00:48 2025 GMT
Not After : Jul 26 13:00:48 2025 GMT
Subject: CN=d8f40951494cb5897ed064a882b77b85fe67cb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:65:cf:03:c5:66:08:c0:2a:af:a3:90:17:
36:af:7d:14:b2:be:b3:2c:47:2f:8c:c3:84:07:40:
39:5e:f4:78:c0:0b:dd:60:25:11:bd:45:41:0d:b5:
ec:6e:e4:ac:bd:69:66:6f:ee:99:f4:88:b2:e1:b6:
33:52:22:f1:f3:b7:54:34:14:cc:d0:5e:5d:88:2e:
40:29:8c:7e:08:12:64:d1:8b:00:77:50:24:20:db:
61:26:4d:bf:95:83:dc:15:ec:fd:e8:6d:1e:82:fd:
b1:58:f0:1b:a4:30:ed:fb:63:0e:38:4e:cd:cc:b4:
86:c7:99:de:a6:1a:f1:5d:81:2d:9d:e9:9c:4f:60:
cb:40:8f:a1:35:9e:68:e8:5f:ec:72:48:86:1f:02:
31:4b:be:08:f7:18:2a:99:2e:be:20:f6:de:da:b9:
09:14:74:91:44:5c:14:d0:93:1d:78:dd:49:a1:17:
ab:1b:d7:5c:41:95:c2:3d:14:eb:2e:5b:4d:44:24:
46:fd:86:e8:e2:98:96:e2:04:11:5c:4b:f4:11:a2:
bf:fa:f9:00:d9:85:45:f9:76:8c:b8:21:a5:02:20:
f6:01:9e:4d:4e:a6:27:70:87:6a:c0:fb:62:04:d8:
4c:4b:e9:4b:8d:1b:70:b1:09:83:53:a9:eb:d2:f6:
97:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F4:09:51:49:4C:B5:89:7E:D0:64:A8:82:B7:7B:85:FE:67:CB:67
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9c:93:1a:2e:3e:39:8e:90:11:dc:8c:c6:80:44:b9:cb:4e:
f9:4e:e6:54:6f:ca:ea:a5:65:cb:99:0a:fc:00:a6:7c:c6:82:
9c:75:38:e1:c8:8a:59:25:2d:3e:34:28:f6:69:ab:97:bb:fe:
58:1f:e3:de:b5:25:bb:96:d3:1c:33:23:c0:8d:f0:e2:bb:3c:
52:0d:a0:94:6d:4d:39:51:2f:1a:64:4d:a0:05:5b:c8:2e:f3:
88:1a:e1:71:93:3b:d9:56:06:2f:04:52:8b:ad:ba:c0:f0:f3:
a4:4e:38:ec:cd:df:f5:c7:37:8f:e8:61:cd:84:8b:41:12:a7:
76:90:8e:d1:04:02:a7:d9:6f:6c:86:a8:fa:cb:df:ff:34:e0:
7e:b9:d9:79:82:cd:4f:11:a0:71:36:43:72:d8:c0:fa:ae:30:
6c:44:46:1d:84:c6:e3:30:89:9f:6c:bd:8c:fe:f3:19:80:5d:
31:61:70:d6:e0:db:a0:d4:9d:62:e5:68:36:02:79:48:6d:d0:
62:73:08:49:21:da:b0:aa:51:c7:63:7b:22:33:43:e4:34:cc:
84:a5:0a:ba:78:8b:34:b4:d9:d6:30:47:28:68:0f:de:f4:1c:
b4:36:bb:5d:97:f7:c8:23:11:f3:3d:e7:04:e3:1b:3f:db:a8:
63:b9:af:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:52:57 2025 by rpki-client