Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
File: q0ZoYAiowQHoTqh4MYrljrcc7II.mft (raw, json)
Hash identifier: GUkCZu1JA8O+JL1zfh8m0CSaMie/+tHTZS7dJDkpnnU=
Subject key identifier: CD:46:0A:11:64:5D:69:14:0F:85:EB:91:23:03:E8:EC:CE:8B:F9:B0
Authority key identifier: AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
Certificate issuer: /CN=ab46686008a8c101e84ea878318ae58eb71cec82
Certificate serial: 019935DBBA65505C9A41C456B194C3D59107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
Manifest number: 0D5C
Signing time: Wed 10 Sep 2025 23:00:16 +0000
Manifest this update: Wed 10 Sep 2025 23:00:16 +0000
Manifest next update: Thu 11 Sep 2025 23:00:16 +0000
Files and hashes: 1: EMySEwRrF4bq2LUNRJSbJLGHINA.roa (hash: DrdEgmoEeO2eKUnBVDonWL4YHyVw8zsXK3sYKFvyya8=)
2: q0ZoYAiowQHoTqh4MYrljrcc7II.crl (hash: dtIJNJxNSbvDGx6Xsm5Hpjc1sf5KLCm+qXEGz1rT/NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:db:ba:65:50:5c:9a:41:c4:56:b1:94:c3:d5:91:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab46686008a8c101e84ea878318ae58eb71cec82
Validity
Not Before: Sep 10 23:00:16 2025 GMT
Not After : Sep 11 23:00:16 2025 GMT
Subject: CN=cd460a11645d69140f85eb912303e8ecce8bf9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:87:ab:2a:5b:bf:c4:74:7e:a8:b5:3d:9c:
40:ef:87:3e:0e:f7:43:b6:92:2f:f4:46:9d:97:a0:
8a:cc:75:48:86:a3:98:bd:1b:dc:9a:06:95:e2:ed:
bd:e2:2b:43:66:d5:15:95:cd:b3:b8:5c:6c:72:11:
b5:0b:ec:14:05:bd:8e:e6:1e:31:99:8f:84:9b:d8:
66:21:1e:d9:d1:cc:6e:0d:bf:2e:54:30:b1:02:d0:
c0:52:31:f0:ef:db:b7:66:02:5a:ae:7e:0e:24:03:
ee:e8:b9:b4:4b:2c:b8:6e:96:a8:be:1a:72:d6:1b:
da:ae:ba:f3:b9:ad:65:e1:aa:de:c1:9f:45:2b:8e:
7e:a0:92:03:a0:4e:13:e1:44:0d:25:df:fa:4e:00:
81:61:1a:40:d7:a4:e2:59:f3:be:5c:62:6f:06:83:
4b:4c:0d:85:d2:7b:d9:0b:a6:3f:ef:40:e4:ed:72:
08:d3:e9:de:92:70:e9:41:90:fa:be:88:79:da:14:
92:c1:b3:59:21:53:5f:a5:54:48:6e:99:ff:ae:3c:
6c:d5:e0:91:97:f4:4e:3b:1f:1f:5e:7e:86:47:25:
b9:d3:73:21:60:28:8f:2e:96:96:5a:d4:c7:ff:16:
ca:84:b5:c1:b7:73:a0:ce:14:70:2f:aa:5d:a4:cb:
f2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:46:0A:11:64:5D:69:14:0F:85:EB:91:23:03:E8:EC:CE:8B:F9:B0
X509v3 Authority Key Identifier:
keyid:AB:46:68:60:08:A8:C1:01:E8:4E:A8:78:31:8A:E5:8E:B7:1C:EC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q0ZoYAiowQHoTqh4MYrljrcc7II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7264d6-3bfd-4de9-8ffb-f3363cbd424c/1/q0ZoYAiowQHoTqh4MYrljrcc7II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:29:c1:0e:1c:11:e0:7b:d6:1b:88:7c:32:27:5a:fa:ec:cc:
ff:d8:23:0a:09:52:ed:30:10:df:a3:cd:f0:ca:21:18:18:8e:
10:ba:dd:ab:32:6b:6a:63:2d:e0:da:c7:93:2c:3c:ec:ca:57:
2d:6f:14:a9:bc:0b:2a:85:03:63:84:8d:99:5f:2f:d5:2a:2c:
93:6a:4a:cb:1b:3c:90:47:8e:51:13:94:53:f7:67:cf:4e:9c:
a7:9f:f4:16:bc:96:93:c1:34:4d:98:9d:07:31:8b:a7:09:45:
c0:54:5a:92:5a:e3:2a:b0:79:4b:28:bd:c7:ff:8e:2f:2a:12:
bc:78:59:f3:10:7a:39:f7:84:0c:16:4f:0e:b7:4c:64:65:0e:
32:47:70:71:c5:46:f2:cf:bd:b4:5f:15:f1:f6:3a:8b:76:18:
00:e3:57:44:0c:29:b3:2e:e7:1e:78:67:b8:9b:c8:a5:01:f3:
c8:67:ef:6d:bb:f5:66:77:77:86:b1:f0:4a:e2:77:f9:aa:85:
1c:d3:61:86:f2:83:e7:2c:6e:52:f0:05:94:7c:ee:2a:18:2a:
c3:7f:92:d5:c3:f4:e1:70:88:e9:d0:06:cd:da:cd:0b:eb:fe:
b0:7c:37:ad:6e:26:60:11:97:29:59:4d:f3:36:e2:da:e1:87:
03:be:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:25:03 2025 by rpki-client