Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
File: q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft (raw, json)
Hash identifier: Fl6xeIVEpGDCOAPFD+t0Q1xy4sXx9wgWFo1m6943vck=
Subject key identifier: F3:E6:0D:25:24:C5:5D:16:43:BC:3B:77:FA:45:D9:EE:7D:37:C7:EF
Authority key identifier: AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
Certificate issuer: /CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Certificate serial: 019921B26E1D0908F1EBED4967BDD47BF8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
Manifest number: 12B3
Signing time: Sun 07 Sep 2025 01:02:45 +0000
Manifest this update: Sun 07 Sep 2025 01:02:45 +0000
Manifest next update: Mon 08 Sep 2025 01:02:45 +0000
Files and hashes: 1: U0noiLh-k1UXMkIIKBzlJl8anFA.roa (hash: elwLD+4HU2f37SzvunJF3t0pDH8qA22yevc6clLdIHM=)
2: q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl (hash: 5FVbi3Au+vw8F/4z1c92DxqFzxJM9lG90uY/MCgKyPA=)
3: yWfF0scZVTP5CTfvSN5AZLRV8Wo.roa (hash: lubmpITrOYefbF4JNbcAm7bQPDyIFYxHEuPyUf330UI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:6e:1d:09:08:f1:eb:ed:49:67:bd:d4:7b:f8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc3a3091c3b1a8c9e82a09d374090f6d7300b20
Validity
Not Before: Sep 7 01:02:45 2025 GMT
Not After : Sep 8 01:02:45 2025 GMT
Subject: CN=f3e60d2524c55d1643bc3b77fa45d9ee7d37c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c1:e0:10:9f:c6:f8:5d:5d:28:21:49:a0:21:
a9:18:38:b0:f5:0c:b8:ab:76:ce:a9:23:f5:2e:05:
9b:c3:7d:fa:be:07:61:fe:e1:e9:9c:3e:be:f8:90:
0d:47:03:b1:30:1b:c4:b3:33:ba:ab:63:be:f7:bb:
42:25:37:16:52:5f:7e:05:90:0f:c6:1f:dc:5e:82:
43:a1:31:49:6e:60:cf:f7:b0:74:58:55:ed:30:60:
be:24:af:50:99:34:80:55:9a:a9:06:6f:27:22:c3:
47:a6:9e:2f:1c:32:c9:cf:b2:af:eb:3a:c9:31:ff:
08:45:57:f6:25:b5:5e:3b:94:07:6e:76:df:ba:5d:
aa:78:a6:45:72:b7:17:83:21:df:a9:43:cb:49:da:
43:f7:a6:a9:32:57:e9:da:91:a0:4d:eb:a3:3d:b1:
27:b7:64:d1:b0:5b:06:ec:9d:ff:05:61:ae:1c:59:
8a:ba:33:45:e5:4b:2e:24:c9:f6:62:d1:fb:f5:5b:
80:ad:54:e5:aa:2c:7a:6c:f4:fa:e4:63:f0:27:a6:
a9:90:32:19:42:73:00:2e:33:df:7f:aa:2b:cd:61:
b4:b3:43:f9:59:00:7f:93:57:c0:82:79:1e:68:ba:
aa:d3:7b:b4:9b:4f:be:29:01:fc:dc:2f:37:b4:f5:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E6:0D:25:24:C5:5D:16:43:BC:3B:77:FA:45:D9:EE:7D:37:C7:EF
X509v3 Authority Key Identifier:
keyid:AB:C3:A3:09:1C:3B:1A:8C:9E:82:A0:9D:37:40:90:F6:D7:30:0B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8OjCRw7GoyegqCdN0CQ9tcwCyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b739e9-16a8-42df-820c-18a768b60fcd/1/q8OjCRw7GoyegqCdN0CQ9tcwCyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:67:68:34:25:1d:b1:55:27:b3:84:61:1f:20:2b:6c:c5:0c:
fa:72:a9:53:24:cf:cc:b3:a9:7a:60:a2:e5:34:e1:23:fd:d2:
47:69:11:bf:4b:bd:60:42:38:56:37:d7:dd:fa:a3:fe:17:a8:
dc:13:7d:13:a6:71:ef:27:05:ac:33:29:49:d7:24:f7:61:bf:
49:4a:17:78:1f:f3:fc:36:67:7d:9a:27:9e:57:b6:39:30:ca:
03:16:27:9c:b3:90:d5:a2:9b:40:7f:89:b1:94:54:90:05:7c:
b2:e5:33:1c:fa:9a:37:fd:32:6c:0c:59:4c:ca:80:18:64:c7:
39:c4:f4:41:62:26:8f:7d:f3:99:4b:41:22:41:3d:41:68:df:
4c:62:02:31:35:10:f2:90:88:9e:a5:c1:64:2f:85:3d:08:25:
ca:87:8f:de:80:8a:ff:f8:0f:5e:be:40:fa:e9:78:1d:d2:25:
c1:1d:35:be:98:4e:16:14:85:4e:85:8b:61:7c:53:a3:e8:05:
cc:10:54:3b:49:44:bc:f1:a7:ea:cc:75:2d:d1:d5:6e:3c:d1:
17:5a:47:37:d1:0c:32:55:03:10:76:aa:8a:0c:0b:27:94:db:
40:a3:e5:b3:3b:26:d8:05:0b:a5:fc:0f:fd:69:66:5a:d8:ac:
a9:99:19:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:42 2025 by rpki-client