Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: Gqe+wD9DhVXgDD9vfgkOpxaq08Q7MJXo3ohGKuNnaco=
Subject key identifier: 22:A9:09:68:C7:84:CF:5D:3D:E2:0B:30:BA:81:1C:28:1C:9F:0B:58
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 01993A27049372922D904ACC34DADB4AF016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 1680
Signing time: Thu 11 Sep 2025 19:00:59 +0000
Manifest this update: Thu 11 Sep 2025 19:00:59 +0000
Manifest next update: Fri 12 Sep 2025 19:00:59 +0000
Files and hashes: 1: F9AhQNt9Udb849dXCdScX4FqhCA.roa (hash: px1gv2xGNlwFH8D+WdL+fioWoJ0lDCB6LorhXUTwMrQ=)
2: LVdTUXxiMF9XJQST5UOIEXtOCYY.roa (hash: 1JvKiaaOoOhGqXZ9Dq7CyaK8VVJ8p+cu5cPkQb+6aUs=)
3: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: K6fNFbPgAnDL8uFaR5sB69XEVWYSSfNzOo9UD+cV8c4=)
4: skwwLakYgia163942_1PcvI2KGM.roa (hash: RjC50vXYyJh6b6nwgCbvXjKOTFm1vHWVMG4k+WUjU5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3a:27:04:93:72:92:2d:90:4a:cc:34:da:db:4a:f0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Sep 11 19:00:59 2025 GMT
Not After : Sep 12 19:00:59 2025 GMT
Subject: CN=22a90968c784cf5d3de20b30ba811c281c9f0b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c7:b3:32:e0:68:4a:17:83:6c:21:ac:2c:0d:
e7:0f:24:7b:23:94:ec:a5:61:45:c0:fa:dd:1e:e6:
1a:d0:61:6e:1c:77:cd:8c:8d:e5:c8:0c:8f:c3:74:
d8:c2:f7:ba:ea:55:00:b8:8b:37:b0:5e:11:a3:f6:
d2:5b:39:db:15:8b:40:a8:a8:d2:55:bc:2e:5f:f6:
db:8c:52:fa:41:1e:dd:03:d2:cf:60:6f:7d:96:96:
58:d3:9f:e5:da:ae:e5:d3:64:67:ea:82:53:9e:23:
87:a8:3b:b7:ee:74:61:ac:2a:b2:60:af:ee:8a:60:
c6:75:af:8d:d0:ee:21:f8:3f:8f:b7:57:7d:75:17:
d4:7b:a0:ea:d1:e2:cc:00:56:89:db:86:25:ce:67:
4f:ad:04:60:49:8c:c2:ed:0f:f0:2e:8b:c3:2d:4a:
7b:b2:5d:7a:10:a3:16:c6:54:51:e4:3f:ab:6b:91:
66:49:f4:6e:e8:b6:9b:5d:7e:ee:3b:f4:f1:33:81:
51:b8:cc:b0:e5:25:a4:8a:2f:54:38:01:dc:df:9d:
ac:41:fa:be:c9:af:64:03:0e:47:e0:79:3d:d8:17:
b1:9c:a0:6e:61:fd:6a:bf:6e:51:4a:12:2c:e0:44:
29:e5:c6:2b:3c:fb:ce:26:9b:91:b7:3b:98:e7:ed:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A9:09:68:C7:84:CF:5D:3D:E2:0B:30:BA:81:1C:28:1C:9F:0B:58
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:95:b1:d6:42:68:9b:1f:2f:fb:24:a0:75:85:fb:ee:c6:97:
23:10:11:10:0a:17:4b:1d:88:9b:96:da:86:01:4b:56:18:41:
1d:63:b4:66:b5:09:21:fd:32:eb:55:d7:5a:9a:82:57:de:f8:
a9:8b:12:0e:aa:f6:45:ec:59:98:90:36:51:c1:f5:6c:3e:92:
18:79:ef:11:f5:50:87:e1:2a:c8:f7:44:ff:ad:14:9c:7a:49:
2d:3c:27:8e:58:ae:aa:a4:bc:9f:5f:82:7d:87:3f:83:fe:5a:
da:ac:64:28:d6:65:1d:49:fb:88:a1:d7:d7:e0:0e:de:43:89:
3d:16:b6:1c:b3:a7:5c:fe:f0:0c:92:b1:e7:55:f3:aa:d2:53:
61:45:3f:8b:ef:96:54:39:19:94:1e:62:34:9a:7e:c3:06:5c:
f5:46:01:6c:d7:3f:21:47:ec:52:09:e1:60:c6:65:d2:84:76:
9c:c0:df:e0:27:a5:32:e7:af:5f:cd:9d:bb:28:bb:b9:9a:e8:
f5:f0:f5:7f:33:10:6f:77:af:86:bd:63:52:77:3e:fd:db:f5:
b3:d1:34:98:25:7d:ca:ef:e6:d1:9c:7c:e0:03:e9:88:c1:94:
9a:a5:e8:be:fb:63:c4:5a:f5:1e:12:2c:5a:6f:cb:b1:a8:22:
e8:74:2f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 22:31:55 2025 by rpki-client