Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
File: q6-0Li5v0JBX_KIbmQhNrDt68tA.mft (raw, json)
Hash identifier: LfUDno73QWFd+38JKOkbfSl/KiOfruydKn2d2FPZDGE=
Subject key identifier: E8:76:5A:C8:35:5A:40:71:41:1A:A8:2B:92:A9:F6:7D:72:F0:42:5E
Authority key identifier: AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
Certificate issuer: /CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Certificate serial: 0199228D2CE8E8B10348E7FEEC11D93BF140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 05:01:41 +0000
Manifest this update: Sun 07 Sep 2025 05:01:41 +0000
Manifest next update: Mon 08 Sep 2025 05:01:41 +0000
Files and hashes: 1: m33s4sgep6-q8UmRmhXl2lkYj9Y.roa (hash: SAyf+MEL6W5SBqvzjsdQj/Xgc4QN6O97LJUm4XtKLGM=)
2: q6-0Li5v0JBX_KIbmQhNrDt68tA.crl (hash: y1dRGvG4Z6OTB1agzXs0Uhq9kBa4wNVFKvMSHzI3R8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:2c:e8:e8:b1:03:48:e7:fe:ec:11:d9:3b:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abafb42e2e6fd09057fca21b99084dac3b7af2d0
Validity
Not Before: Sep 7 05:01:41 2025 GMT
Not After : Sep 8 05:01:41 2025 GMT
Subject: CN=e8765ac8355a4071411aa82b92a9f67d72f0425e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:75:26:4a:57:0f:72:c7:12:ed:ba:91:57:
2c:a0:91:b4:a3:26:da:2a:e9:b2:ac:85:cf:41:8a:
be:f2:02:2f:95:7f:70:26:51:c6:93:e9:ac:1f:11:
de:0a:60:2d:f0:43:a5:6a:ce:56:72:a0:84:72:05:
0c:c7:9a:79:6d:e9:b8:c5:58:b5:6a:ba:d3:a4:a1:
05:7a:59:2f:f2:80:53:59:de:20:9a:b3:71:e6:5f:
d2:9e:13:9f:6e:e7:11:9a:c3:9c:18:30:1f:e8:95:
30:5a:68:f9:9f:08:30:7e:fb:de:7f:5a:73:27:81:
6c:41:0a:3a:07:20:9f:dc:83:34:bb:3a:b3:22:6b:
2e:49:25:63:3b:52:23:df:ca:9f:a1:14:2c:76:67:
2a:46:7b:bd:9e:c3:05:ef:8d:4c:c5:83:a0:28:7c:
2a:ef:18:77:52:ba:2d:fc:25:c1:51:f5:ff:c3:f3:
d5:de:cc:c5:c1:c6:cc:55:65:f8:2f:e1:2a:49:f8:
5c:11:80:71:25:49:07:fb:90:4c:f8:d8:42:e0:5a:
d1:3a:9b:dd:6b:09:64:a6:f2:14:7b:d2:c2:28:1f:
b7:4b:06:5b:26:c6:d1:51:6f:c6:ba:20:5a:da:e1:
f6:31:5e:f1:9b:72:94:1d:fc:97:88:5d:ab:4d:94:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:76:5A:C8:35:5A:40:71:41:1A:A8:2B:92:A9:F6:7D:72:F0:42:5E
X509v3 Authority Key Identifier:
keyid:AB:AF:B4:2E:2E:6F:D0:90:57:FC:A2:1B:99:08:4D:AC:3B:7A:F2:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6-0Li5v0JBX_KIbmQhNrDt68tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/898754-e446-4b51-99a9-e59bd4f4f740/1/q6-0Li5v0JBX_KIbmQhNrDt68tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5e:18:2f:3f:38:6d:d4:76:10:a8:b2:db:17:42:25:b7:c4:
5a:5a:8d:6a:6a:2e:4f:d5:54:da:ac:1b:f5:47:d4:9f:0a:09:
a5:50:ef:56:2a:d5:04:23:74:24:67:44:c7:5f:56:50:f5:2c:
42:2f:e2:16:27:e0:3e:9d:19:c2:90:55:45:7b:c4:e8:e9:96:
97:ac:2c:06:99:90:6a:ff:11:6e:76:4f:79:36:30:84:2e:ce:
8a:ca:59:8e:9d:8b:48:c0:06:40:89:c3:9d:b4:3e:93:0a:fb:
fa:73:b1:a7:04:9c:d5:15:f3:3b:df:37:c3:21:ce:a2:51:ae:
cc:b6:68:8d:22:4d:b1:d6:b9:f0:e2:d6:b7:9c:9e:04:b4:f2:
2b:d8:04:0d:f0:3f:a8:82:79:3f:c7:02:cb:b0:f4:64:08:23:
9b:65:28:4a:4d:05:d7:db:32:80:71:05:13:73:67:51:18:1e:
fc:36:b6:9b:74:3a:68:59:5e:b7:7a:51:8b:0b:25:fd:05:f9:
68:0e:98:44:a5:f0:7a:32:38:ef:d1:30:f1:27:57:32:48:2e:
0f:4d:1e:cc:1c:65:ab:81:04:43:be:8d:75:31:3c:fe:12:4d:
c0:18:b1:17:fc:7c:a2:3e:9f:23:71:9e:79:a8:55:5d:b1:64:
ae:f4:5f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:30 2025 by rpki-client