Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
File: q6g10GAXbugWDHkw-H5pNVkJDXg.mft (raw, json)
Hash identifier: QfEdtmn8yQxpvILv62uet9tw5F3vxTPQa+vLjA32IBk=
Subject key identifier: 81:11:48:67:F9:CB:6A:68:00:79:2E:57:EB:D1:78:9B:5A:4B:68:CA
Authority key identifier: AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
Certificate issuer: /CN=aba835d060176ee8160c7930f87e693559090d78
Certificate serial: 0199239F9020E7F156FD446D7F5709BB91ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:01:23 +0000
Manifest this update: Sun 07 Sep 2025 10:01:23 +0000
Manifest next update: Mon 08 Sep 2025 10:01:23 +0000
Files and hashes: 1: WxKERWcgZHE3QlVsylKc45ZZndo.roa (hash: ZntJzaaGEPPPr8RAncg56sX3jW5j5m9ABQj+rx3cm+Q=)
2: q6g10GAXbugWDHkw-H5pNVkJDXg.crl (hash: WSq/NKgMaqn2r2ubLOXVtK4ka0DoUS5Fmks9dgF44oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:90:20:e7:f1:56:fd:44:6d:7f:57:09:bb:91:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba835d060176ee8160c7930f87e693559090d78
Validity
Not Before: Sep 7 10:01:23 2025 GMT
Not After : Sep 8 10:01:23 2025 GMT
Subject: CN=81114867f9cb6a6800792e57ebd1789b5a4b68ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:4b:fb:93:69:5f:d0:13:e4:5f:95:d3:42:
ea:25:ba:d4:fd:f7:ae:89:a3:d0:d1:6a:6f:a2:52:
b0:33:65:18:75:37:2c:d9:85:9b:02:2c:43:22:59:
67:7a:d4:a0:fe:5e:ab:91:0a:d7:24:1c:34:e3:e8:
74:bd:91:a3:8a:30:07:1d:1d:0c:1e:c9:82:5e:72:
0e:9d:43:30:ea:ac:57:55:5f:7f:98:60:b4:d2:fa:
46:e0:ad:2e:ad:cb:0e:80:44:92:47:a4:15:9f:f2:
03:d5:9a:c2:21:5b:7d:a0:b2:f1:e8:b7:02:82:e2:
b9:6e:eb:c9:25:dc:ca:ca:2b:4d:09:b2:c1:14:4f:
11:14:ad:c4:87:3e:bf:ec:53:62:ee:53:60:29:75:
8f:81:66:1b:b9:a6:90:6b:58:3a:73:83:25:c5:a2:
05:df:33:a0:78:cb:73:ea:b9:a8:62:2b:26:ff:bc:
ff:42:94:8f:90:c2:89:4e:07:d1:45:c5:5d:ab:1f:
9b:2a:1f:4b:34:2a:22:c5:9e:54:f4:2a:88:ab:68:
15:1b:e4:b4:d8:dd:10:17:eb:46:6d:33:71:c3:da:
92:d8:9b:4f:c4:65:08:7e:e5:27:28:bc:3c:31:fe:
c7:f6:5d:c3:a8:f6:53:12:82:b9:81:73:43:95:f9:
ec:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:48:67:F9:CB:6A:68:00:79:2E:57:EB:D1:78:9B:5A:4B:68:CA
X509v3 Authority Key Identifier:
keyid:AB:A8:35:D0:60:17:6E:E8:16:0C:79:30:F8:7E:69:35:59:09:0D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6g10GAXbugWDHkw-H5pNVkJDXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/46d1d2-a6c0-47be-8771-c3ab6b3466c0/1/q6g10GAXbugWDHkw-H5pNVkJDXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c0:57:ad:7c:52:a5:38:bc:df:8a:ff:e3:f4:c8:38:7b:77:
88:91:36:b4:3b:1c:30:81:a4:a6:46:9b:2d:34:c8:33:b7:38:
2a:70:ac:b8:74:ef:d3:f0:26:6d:f5:d5:a0:08:7c:93:69:c8:
44:c8:f6:22:d4:9b:66:5d:f4:99:09:ee:82:aa:91:4e:4a:0e:
9b:15:ee:41:de:d9:b1:f5:27:bb:46:76:d7:4c:56:be:98:21:
6a:8f:97:71:ea:de:12:d2:59:4a:e3:fc:b2:38:2b:d8:de:bd:
26:a2:d4:8e:b3:4e:4a:7e:3b:30:f7:77:95:ce:eb:f4:b9:50:
63:89:d9:16:89:09:d1:8b:c6:43:66:64:2e:b5:ac:59:0c:da:
e3:50:24:44:6e:48:1e:10:57:47:44:15:a3:7f:39:b3:f7:d4:
73:f3:aa:66:65:9d:b2:8e:1b:c9:cb:a4:cc:43:0b:c4:b3:16:
23:7c:ac:d2:95:1e:69:4e:52:ba:cb:08:ea:d8:0b:a5:e0:c7:
49:62:94:9b:94:a2:fd:85:e1:6c:d5:e7:d6:78:d8:ae:b7:a8:
49:fa:98:c5:2e:7e:ff:e2:84:f9:49:4e:d1:54:c0:39:20:17:
3c:d9:b4:88:dc:c0:75:26:3b:35:37:1a:87:6b:b0:8f:78:4b:
e4:b5:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:22 2025 by rpki-client