Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
File: q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft (raw, json)
Hash identifier: PsTVid4TUxUM/DX4Oep5U1tqWhQwX+sfIpTTpoFlXkk=
Subject key identifier: 47:54:9C:30:49:03:F7:19:EA:56:9F:F9:67:E0:C6:D2:EE:34:0E:A9
Authority key identifier: AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
Certificate issuer: /CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Certificate serial: 01992B5A79CACBFF8169A6378D060EA0020A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
Manifest number: 1696
Signing time: Mon 08 Sep 2025 22:02:53 +0000
Manifest this update: Mon 08 Sep 2025 22:02:53 +0000
Manifest next update: Tue 09 Sep 2025 22:02:53 +0000
Files and hashes: 1: F9Xe_7jgOYvdTNT9YC7uc1m7clw.roa (hash: dbf14IPOhGmAOgdUCZzI8fhPd/ppi3DXyc8q1YDOSJo=)
2: HncO7o0Hx6kmO3BNCUVPbF42-m8.roa (hash: /pA5z2SwqwvGDpyWUHOM2Fy+nufCkYimVU2as7hvZq8=)
3: N5zj-5kvAhoJCItFFzdBa1pYbH0.roa (hash: ypTV2FdvIR6mdrYiLR6I+YqYJsccCY+5Z3r1n8pA0MU=)
4: NiqjOlNTXM20fr7bb_Hu7fNVpnk.roa (hash: WMjXZpt8cy+IOzVtTivSuKAcQFZieAhNSlute/PEdJQ=)
5: VUze8_1n74uVa_uD6F7A6AioYKM.roa (hash: ugq/e8QeF0wIWa9W8bf0Wvpu26TSdCjGX0yCM4f1o1k=)
6: jJkmu95ExwTShGBJvsJR7aBhoPU.roa (hash: nz14VG6Wmam+OFYqgavV7ACmkDO4KpLptIyk8PePgL8=)
7: oFumiBsAWooyBU0TcSWUrXQVV0M.roa (hash: O0f3W53wpKnfJgwZpwBD1xXfrpSbNoYlbIB/lXeKPq8=)
8: q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl (hash: GpUoa3VO4yRThI0rA2VfbAeUzF9hDmA6yr06e/UuYTI=)
9: zJzk_tM6gq364ozeInI309dIrxA.roa (hash: Wk+SRLeVkkf92Q0xGlI36RRywoqFOdrDHHnD94zbdGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:5a:79:ca:cb:ff:81:69:a6:37:8d:06:0e:a0:02:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab54fe831b6a719f42e6c8486fd03b550be761fb
Validity
Not Before: Sep 8 22:02:53 2025 GMT
Not After : Sep 9 22:02:53 2025 GMT
Subject: CN=47549c304903f719ea569ff967e0c6d2ee340ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:32:c2:c9:55:8c:30:e8:fd:33:66:17:99:
05:14:b1:25:4e:9c:c2:cd:6e:16:e8:97:8a:1e:9c:
47:b7:33:54:dd:f4:35:36:29:47:99:f2:6f:7f:40:
7f:6f:22:1b:b7:2a:df:26:10:53:f5:48:b3:3b:64:
2e:d4:8c:0e:6b:e9:87:1b:8f:ab:74:8d:de:e6:09:
fd:d1:f0:ee:f3:b2:4d:1e:11:b8:24:f3:6b:69:fc:
86:7d:ff:02:26:ff:2d:f1:46:44:f1:e8:2d:50:76:
c0:b8:e8:18:d4:f8:7e:36:85:d9:38:78:ac:34:db:
49:60:a5:28:cf:25:7b:21:19:dc:a2:99:5c:ab:57:
20:62:c0:bb:85:6d:5e:d9:ae:cc:6b:4d:ef:59:44:
e6:5c:f7:9f:4f:12:4a:b4:41:45:b9:ab:8c:46:1a:
47:88:8d:72:93:f7:a0:44:0d:65:8c:df:74:66:94:
86:d9:3e:20:f1:f7:5a:72:de:c1:9f:bb:bb:ad:c8:
c7:11:79:dd:7e:37:b3:d9:8c:6d:da:f2:53:e8:b4:
53:38:67:b5:c1:32:1c:51:58:28:dc:39:7e:15:0e:
35:fc:e1:24:20:66:04:56:24:ed:47:92:d4:26:82:
30:8a:5e:73:20:6c:67:49:11:60:f6:97:38:04:be:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:54:9C:30:49:03:F7:19:EA:56:9F:F9:67:E0:C6:D2:EE:34:0E:A9
X509v3 Authority Key Identifier:
keyid:AB:54:FE:83:1B:6A:71:9F:42:E6:C8:48:6F:D0:3B:55:0B:E7:61:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1T-gxtqcZ9C5shIb9A7VQvnYfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/5eaaa7-3107-4268-aad6-6fd9789205ba/1/q1T-gxtqcZ9C5shIb9A7VQvnYfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d4:8f:7e:2e:e8:63:a2:79:ba:72:f8:b7:db:bd:e1:3f:6a:
28:ff:70:1e:02:71:f6:84:ab:63:5e:24:fd:69:d4:1a:b3:f4:
79:cf:5b:8f:7f:f8:bb:5c:83:b5:29:62:d2:36:d2:d1:a7:3c:
24:19:91:4d:42:53:37:2a:7b:81:40:3e:0e:5b:52:bb:87:2a:
46:12:83:6e:b8:3b:10:48:c3:e6:a5:c2:50:a1:0e:16:cc:37:
11:17:09:47:db:4d:ef:14:60:31:7a:1c:dd:63:de:8d:df:b8:
50:f3:a4:6b:96:a0:d6:bc:7d:c1:9b:9f:97:6b:fd:c8:59:5a:
cd:1c:44:5c:7f:33:ee:c1:af:9c:29:49:a2:65:1e:50:f3:41:
ae:f4:7c:76:e0:6b:25:73:21:46:a7:61:57:a1:0e:eb:39:f7:
e1:d5:8f:b1:3b:f1:0e:af:0c:de:f4:a9:52:f6:2c:81:60:10:
a6:57:bb:af:85:22:e8:36:82:60:f1:94:cf:d7:1f:58:70:d2:
96:e8:01:f6:d7:28:2d:70:8e:14:11:36:dd:b5:d4:a8:f3:9d:
ee:90:e2:19:66:b1:9a:e6:ef:31:b4:5c:5d:79:af:fa:94:c5:
a2:c5:84:4a:40:61:46:f9:1b:30:72:f1:68:7d:04:75:f5:44:
99:55:e8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 01:46:49 2025 by rpki-client