Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: gaVWUwmrlDqho7XS41aptPDGm32NL3QZ2lKnD2uCU1s=
Subject key identifier: 28:F4:C2:B9:D2:0E:BD:3F:53:AE:DA:E4:5C:B7:A3:35:75:D4:6C:5A
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 0199233122B9266B4022032E3081D674ED8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 167A
Signing time: Sun 07 Sep 2025 08:00:46 +0000
Manifest this update: Sun 07 Sep 2025 08:00:46 +0000
Manifest next update: Mon 08 Sep 2025 08:00:46 +0000
Files and hashes: 1: 3rk6DTXzfhXnDvH7YjIIV0HcXhY.roa (hash: 8yMBicvXGg6+UMP8iKzu3+exUVvDmdmba1/S47z8Uyk=)
2: PHGv-iP3-GV5PUVRHcEuKvBjePw.roa (hash: 7jlPPnbCBHtnfInB0g3T4zwfv1LlUHpXKaShvtDGxfY=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: /WAipB2BEfqEokLW6/2qbxOHwZ1iaUgl3w2EqCGsLtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:22:b9:26:6b:40:22:03:2e:30:81:d6:74:ed:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Sep 7 08:00:46 2025 GMT
Not After : Sep 8 08:00:46 2025 GMT
Subject: CN=28f4c2b9d20ebd3f53aedae45cb7a33575d46c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:f1:46:5e:39:ee:69:79:dc:d6:36:bb:8d:
6f:df:d1:64:4e:da:cd:50:7c:9a:20:58:1e:43:7d:
38:5c:fc:ef:97:a2:01:ad:2a:91:0c:68:7c:4a:92:
d0:d5:20:78:a5:29:69:32:38:47:9c:07:d8:84:62:
97:4a:a5:a5:2c:c0:64:1a:73:21:38:a7:04:51:ea:
26:bd:04:ae:25:3a:66:68:8f:0d:5a:bc:08:6f:1b:
91:fd:b9:56:73:59:f3:2f:45:ef:e1:db:e1:56:f1:
f9:a2:39:22:97:17:42:b5:e6:ee:53:92:f1:a7:33:
d0:85:8a:00:d4:da:a1:db:02:27:91:c4:03:f3:69:
dd:2c:51:05:3f:9d:20:97:3f:e1:e9:4e:de:ea:44:
75:ef:c5:b0:1a:28:e6:45:f1:59:b3:7c:8d:14:19:
d1:31:b6:34:15:db:e2:d2:5a:3f:76:e7:cc:9e:33:
c6:c3:54:de:2b:93:f2:2a:92:2a:59:87:04:71:83:
3e:6f:39:e7:67:99:9c:fc:c4:8d:be:40:80:f1:60:
ea:d2:3b:ab:2b:4f:04:2c:a0:47:3c:9c:d9:20:01:
99:d4:2c:e0:fa:a9:68:d2:e8:39:e5:d6:22:3c:18:
bf:19:f0:12:5f:44:f2:df:32:67:30:93:a2:63:17:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:C2:B9:D2:0E:BD:3F:53:AE:DA:E4:5C:B7:A3:35:75:D4:6C:5A
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0f:b8:47:3e:bd:f4:68:91:8c:1f:58:43:bf:e6:fa:06:e4:
1e:c1:52:7d:04:78:73:ff:4b:29:bd:54:15:71:10:71:fa:2d:
b0:6a:1a:7c:1f:21:7f:44:dd:a7:6a:93:41:d1:be:e1:c6:13:
6b:d5:3c:27:5d:14:c6:64:93:5a:00:66:fd:dd:f2:7b:d2:b1:
45:7b:00:b6:4b:d2:07:ff:79:ba:43:af:df:28:a5:31:eb:e2:
4a:36:9c:57:2a:81:40:7b:6e:85:f4:57:bd:9d:97:8d:79:ad:
cf:62:e5:8f:4b:86:2a:b9:d4:ef:71:d0:59:6a:64:5f:d8:71:
b2:a5:5a:ce:cf:f6:2d:d9:73:6e:93:5d:17:c2:67:1c:69:04:
c7:f6:ef:7f:35:72:cd:67:91:01:ef:37:da:00:5a:3d:31:52:
03:48:eb:0e:77:07:fa:da:bc:83:07:ec:88:ae:8f:d0:84:75:
ab:26:e8:91:a3:09:a4:66:5f:80:cf:aa:2b:b4:72:56:5d:1d:
cc:90:61:8f:14:85:e0:44:4b:38:94:5a:64:1c:40:6a:d4:a5:
7c:f8:6b:55:9a:98:03:46:0e:c2:98:6b:55:80:8d:ed:47:55:
97:f1:50:4b:5d:a8:13:c7:e7:9d:66:f8:dc:88:b5:85:ab:ac:
ed:6f:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:26 2025 by rpki-client