Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: 4HSivR0Msy4LjWucGLuYdLpI2BfvK8CJirOYA5Z4TeA=
Subject key identifier: 0B:47:E8:3D:0E:61:07:9E:45:93:57:EB:21:06:88:D5:3B:60:EC:29
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 019921E748C3534A93D9B1D50E7B7C0A8844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 164C
Signing time: Sun 07 Sep 2025 02:00:29 +0000
Manifest this update: Sun 07 Sep 2025 02:00:29 +0000
Manifest next update: Mon 08 Sep 2025 02:00:29 +0000
Files and hashes: 1: _7nFqf5lz5tcDACtAr9RF1OczjU.roa (hash: +++HO383AAZs8DTGnKyEbL2DY3xsbwwnVwL8cUM+bTU=)
2: dABSJLRi0TLcB4OYtofXt8vc5mI.roa (hash: LxLgAjIFySbpl2HK3ef4vXYPLVBckR21OqAdcEmHAdI=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: RfPUunOzyWqf6tcuaFOJuW5jVoomjeiTOrz8o2mE+SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:48:c3:53:4a:93:d9:b1:d5:0e:7b:7c:0a:88:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Sep 7 02:00:29 2025 GMT
Not After : Sep 8 02:00:29 2025 GMT
Subject: CN=0b47e83d0e61079e459357eb210688d53b60ec29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:85:fb:c3:43:8f:52:2a:4e:02:c4:e8:da:ce:
9a:85:a8:cd:da:f4:ee:8a:62:22:3b:ee:c2:ab:f5:
27:80:3d:17:ed:8c:84:4e:1d:44:b2:ad:62:a3:6c:
98:19:2f:2e:63:e3:bb:af:67:08:f1:27:e5:c3:9d:
32:ad:91:4c:c2:15:49:72:e4:57:5d:53:8f:6b:c4:
df:86:22:70:ed:6a:10:fb:31:04:5d:49:04:e3:1f:
5f:8f:b7:b4:15:5b:08:6f:9c:6e:13:bf:d9:48:0d:
84:74:b7:c9:5c:1c:96:8a:c2:11:ed:54:90:1e:57:
91:72:e0:46:d5:6e:94:76:2d:79:d7:c3:e8:0b:3e:
3e:6c:0d:3f:98:4a:80:08:29:27:84:41:e1:93:5b:
86:32:cc:f3:54:e0:34:c7:32:24:94:8f:50:be:39:
12:ad:f6:a6:df:71:18:09:f0:fe:3e:76:9d:e9:9d:
ab:fa:23:8e:d9:ee:ba:1d:17:77:b4:32:84:86:9c:
54:95:18:e8:61:f7:54:70:e9:1b:b7:fd:7c:47:69:
da:6e:08:3e:20:3a:d7:dd:cd:21:21:a5:7a:65:4a:
97:5a:c6:e4:02:19:a6:2e:38:38:6f:1c:2b:7f:a4:
39:1d:85:dc:ed:d8:4b:79:c0:c5:47:fa:9f:ed:1a:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:47:E8:3D:0E:61:07:9E:45:93:57:EB:21:06:88:D5:3B:60:EC:29
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:af:0e:52:da:98:4b:32:e6:05:48:0b:9f:ac:6e:89:ef:37:
0b:4e:23:cf:cb:2a:5b:af:f0:be:9a:ef:45:f9:40:26:37:cf:
3a:6c:ed:aa:77:eb:47:45:81:b9:93:18:26:a4:92:70:a2:89:
db:84:0e:a4:cc:db:55:2b:b6:00:27:30:ea:0f:34:a3:01:39:
b0:ea:63:d7:53:42:39:3f:c2:84:e3:ee:fb:71:81:54:69:98:
e9:0e:bb:88:15:75:3c:51:05:2f:90:a7:88:40:f9:0f:e3:c0:
b6:b2:89:95:cd:13:f7:71:a8:06:8c:a2:68:b7:b4:dc:db:32:
34:8b:db:50:25:67:e1:07:3e:53:46:e4:be:7a:00:3d:78:eb:
50:66:af:cf:3c:42:39:01:47:17:e5:b2:f9:ef:95:14:07:fc:
e2:a6:1f:57:b4:95:e3:5a:b5:7f:8f:5a:37:65:1f:9f:5c:ae:
09:37:bc:09:8e:65:7d:df:ce:2c:15:d4:bf:54:85:d6:fc:91:
62:89:3b:0c:95:8b:95:9e:89:ba:fb:49:e8:7b:8c:21:db:0c:
0f:72:3f:8a:f2:08:df:4d:51:b4:ea:4f:c7:f1:84:19:4c:46:
46:51:4b:27:5a:2a:6b:36:de:90:cc:9f:c8:f6:b3:fa:d7:19:
f1:0e:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:10 2025 by rpki-client