Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
File: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft (raw, json)
Hash identifier: LeCdWPPtibE+n3ekrBBSSAN3jcF56RU+Tl8e9glEBZg=
Subject key identifier: CB:9A:5F:95:71:74:61:22:D3:01:A8:F1:07:60:04:2A:56:74:35:B9
Authority key identifier: AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
Certificate issuer: /CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Certificate serial: 0199221F213958719DEE2D7B7B5AFD469EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
Manifest number: 0547
Signing time: Sun 07 Sep 2025 03:01:29 +0000
Manifest this update: Sun 07 Sep 2025 03:01:29 +0000
Manifest next update: Mon 08 Sep 2025 03:01:29 +0000
Files and hashes: 1: auh_CELZVQItOo9vbdk8bNA5drU.roa (hash: lsZhhuWVu0Ccaib1jj0SXulSIcbRTpNBfg+1fElDPKs=)
2: q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl (hash: MLSQslXMnRA8qH6qlwKc1JV0JUOeDrX40ipgxSWcigU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:21:39:58:71:9d:ee:2d:7b:7b:5a:fd:46:9e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab863267b5b73db07c80e74d715b6736d4fba9fb
Validity
Not Before: Sep 7 03:01:29 2025 GMT
Not After : Sep 8 03:01:29 2025 GMT
Subject: CN=cb9a5f9571746122d301a8f10760042a567435b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:66:cd:9b:20:15:54:a5:08:8d:5a:e3:c6:21:
5b:d7:e9:85:d4:84:d5:51:cd:89:2c:e5:73:75:2d:
93:1c:31:76:fc:ca:cb:b6:85:1e:ff:2d:f7:69:c9:
9c:a5:02:25:1b:ab:1f:6c:80:d3:e3:9d:15:0e:8e:
bc:11:a3:d0:5e:c9:91:89:5f:95:38:08:e5:f7:96:
5f:8c:94:5f:d0:c7:ae:de:d5:94:6c:98:da:c6:f8:
10:09:b0:4c:49:2b:67:cd:39:5b:18:b0:95:d2:6a:
fa:e8:fb:9a:c2:b0:fa:9f:93:6a:c2:49:d2:55:e8:
e1:ae:8b:dc:6b:e4:c2:14:bd:57:e5:67:f8:7c:51:
c8:2e:7b:8e:4c:ea:94:ad:b0:84:b2:0c:78:57:13:
80:1d:d1:29:11:88:dc:21:61:8b:29:18:9a:a7:ef:
f7:96:26:0c:19:36:6e:87:97:b6:96:9c:93:41:ba:
62:76:2c:ed:3b:af:ab:2c:9f:23:30:5c:54:48:48:
19:57:9f:b5:c1:2d:7c:df:3a:cf:5d:b1:fa:30:74:
55:04:d9:f1:61:df:f6:9d:b1:e1:c9:68:76:1c:e7:
7f:31:7a:67:e7:dd:d5:4f:54:04:a8:2a:93:ba:82:
8c:59:fd:fd:6d:5d:c3:90:64:fd:db:db:02:fa:55:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9A:5F:95:71:74:61:22:D3:01:A8:F1:07:60:04:2A:56:74:35:B9
X509v3 Authority Key Identifier:
keyid:AB:86:32:67:B5:B7:3D:B0:7C:80:E7:4D:71:5B:67:36:D4:FB:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c5bb61-a617-414a-a34c-a5e435c190e3/1/q4YyZ7W3PbB8gOdNcVtnNtT7qfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:60:7b:9f:1f:47:05:eb:fe:c1:b6:de:dd:32:a4:b1:31:21:
29:d6:e7:58:33:9b:53:77:55:ca:16:f3:8d:b0:a5:41:e2:f0:
d5:0c:6e:05:f0:e5:d2:b0:71:0e:82:0d:ce:81:7c:e5:cf:8d:
51:33:8c:b5:62:de:71:8e:88:b6:4a:2c:4c:e6:28:58:bb:02:
a2:73:9e:e4:b5:f4:d0:47:9b:9c:45:b4:fa:f1:b8:2b:38:03:
bc:8f:e0:47:90:85:e5:c5:1f:22:15:70:15:39:3d:64:6b:33:
44:64:ae:71:43:1b:84:7f:b7:59:b8:05:2d:c5:4d:40:5f:66:
57:cc:8c:ce:b9:12:f0:c7:97:69:35:61:21:fd:45:82:b4:5d:
94:24:83:dc:56:6b:05:6c:d0:4f:4a:b2:a1:c8:22:f7:85:8b:
9d:16:82:d5:01:03:03:1d:a1:bb:65:26:cb:80:c0:9b:d8:e8:
93:b7:ca:b0:4b:fd:8d:4d:fd:6b:97:f8:cf:4a:bc:a2:3e:cc:
55:c9:0e:0a:94:a2:a2:de:ab:bb:26:d4:ad:c3:cb:7b:97:81:
51:14:01:57:9a:4a:60:23:82:6f:0d:42:e4:07:37:44:c9:1d:
cd:f7:05:48:9d:cc:7d:45:91:64:77:7f:d4:f5:60:e5:fd:8f:
7b:12:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:35 2025 by rpki-client