Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: sbhR4+FqRXcfKnxa3bUFXelzuVqQlaDC9BWqCyv2Jfw=
Subject key identifier: 9C:35:D6:79:60:A0:4D:F8:FC:86:88:C8:44:36:11:55:1B:AE:0C:E8
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 01992330E339FD6D3116B807662EE573A983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 08:00:30 +0000
Manifest this update: Sun 07 Sep 2025 08:00:30 +0000
Manifest next update: Mon 08 Sep 2025 08:00:30 +0000
Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: JUokL0Cg9i9T8SLWveS1AHmom5shgTmeRuaZBZwAdkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e3:39:fd:6d:31:16:b8:07:66:2e:e5:73:a9:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Sep 7 08:00:30 2025 GMT
Not After : Sep 8 08:00:30 2025 GMT
Subject: CN=9c35d67960a04df8fc8688c8443611551bae0ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:e9:f9:7a:42:06:ff:46:68:ea:f4:5a:f8:
77:63:92:59:15:b9:5c:df:90:be:54:be:1f:42:a7:
26:9a:d0:42:d3:35:16:be:eb:ae:96:5c:45:a8:c4:
b2:a5:01:b1:5c:e0:17:09:db:12:33:0c:df:9f:b7:
46:03:46:29:f5:32:3c:9f:7c:d7:4c:ce:84:f4:44:
f3:42:0b:3a:5f:b4:53:3c:8b:5a:76:4d:50:b7:2d:
e4:0f:ee:96:b8:df:b6:f9:16:b0:5b:b3:da:e8:1e:
85:48:09:0a:a0:dd:fc:13:89:f2:1c:4d:f6:0a:d2:
f9:63:bd:43:b1:54:fd:47:d8:c4:65:a7:ea:04:09:
a7:d7:09:af:58:6b:bd:d5:da:b1:18:60:10:dc:2a:
75:0c:68:10:1c:03:bd:12:22:0b:84:d9:88:85:ef:
4a:71:03:67:6f:7f:c7:98:97:63:be:90:ff:cc:7a:
3c:8d:b8:f2:bf:ec:61:11:6a:41:4e:50:9c:e3:c3:
c5:76:0c:92:c5:f5:45:7c:35:d8:95:b2:1c:3a:88:
c9:0b:50:f0:82:ac:76:40:a8:de:7c:fa:f9:8b:74:
a7:e6:7e:41:cf:b9:cc:11:bc:38:44:73:1c:45:05:
ae:37:7d:42:0f:db:f1:f3:39:0c:a5:dc:c2:ab:07:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:35:D6:79:60:A0:4D:F8:FC:86:88:C8:44:36:11:55:1B:AE:0C:E8
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:d5:1c:12:0c:b4:8d:1a:31:54:50:60:e9:40:1e:27:98:3f:
a9:b1:a7:f0:cb:63:c1:ea:9e:2c:b9:62:5d:11:16:5c:55:0c:
92:e6:ec:75:ed:10:98:be:52:fe:3c:b8:48:d2:99:75:c6:85:
8d:5d:c3:2f:93:ee:ce:cf:3c:0b:6b:8b:58:81:0c:50:22:0a:
9c:62:f8:d7:ca:34:2b:a0:7f:3c:33:47:07:75:20:c7:4f:be:
e3:8a:29:73:b8:a0:f1:5a:fb:a2:42:4b:6e:92:7f:3b:d3:dd:
19:79:c5:26:09:12:3b:81:df:3a:ec:1d:bb:40:e3:08:a2:c7:
ce:0d:b9:77:b4:62:99:e3:2c:d2:6c:bb:2d:37:81:fc:57:e3:
08:af:0b:f1:6b:98:14:43:8a:70:f2:c7:21:17:7d:ce:c7:b1:
de:7f:ff:b7:ac:be:d8:75:65:64:97:82:49:0d:cd:96:54:b1:
b6:af:b1:56:51:27:d0:ad:ac:8a:cf:93:ea:64:9a:48:47:0b:
e5:6c:9c:9a:58:59:82:f9:63:d2:f3:b0:ff:05:4a:6c:ff:d9:
9a:8e:fc:10:0a:11:3c:af:85:15:ce:4a:de:ac:a5:22:47:e5:
d2:b5:54:12:e2:f2:8d:63:e9:f4:26:5c:d9:a0:0d:86:08:81:
0a:a6:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:06 2025 by rpki-client