Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
File: qBVYhT_rx52BPrLAzly3NvtzwN8.mft (raw, json)
Hash identifier: vUnQtwkR7Tr/cCld2vgrScpIDSdtr9G3MWnCgSK+DI0=
Subject key identifier: A2:68:EC:41:25:06:3E:AB:1D:10:BE:EB:2A:67:38:FE:CE:F9:0E:12
Authority key identifier: A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
Certificate issuer: /CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Certificate serial: 01984AAEF799226A470C8D6F61A4428AC29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
Manifest number: 13A9
Signing time: Sun 27 Jul 2025 07:00:37 +0000
Manifest this update: Sun 27 Jul 2025 07:00:37 +0000
Manifest next update: Mon 28 Jul 2025 07:00:37 +0000
Files and hashes: 1: LgqWUP0536hPg5BCpisRq1CfwzE.roa (hash: vMIIsO4xKqj7JGP30ELt6Q8iCAR8hVZNP/9djB0t8ro=)
2: dJRAHiOGAXHi9ZK3B82VqToDqnk.roa (hash: uJbxE7UmTFUvOg3MJeibMc8I9N/6ZLAzoiFFQ1kOB8U=)
3: qBVYhT_rx52BPrLAzly3NvtzwN8.crl (hash: AHby12Qq8cBU19RPmyv0sU1aRhYwS5s0W2OjKwiNn7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:f7:99:22:6a:47:0c:8d:6f:61:a4:42:8a:c2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81558853febc79d813eb2c0ce5cb736fb73c0df
Validity
Not Before: Jul 27 07:00:37 2025 GMT
Not After : Jul 28 07:00:37 2025 GMT
Subject: CN=a268ec4125063eab1d10beeb2a6738fecef90e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:06:d3:9c:33:99:43:9e:1e:46:63:16:20:
0c:a0:a9:bd:ce:f9:ea:ae:69:da:f7:68:20:73:8a:
20:f9:0b:f4:28:d0:57:0a:70:08:d3:88:3b:c9:1e:
8e:5c:08:51:a2:06:85:65:40:0e:f6:37:bf:28:66:
88:79:85:21:99:8b:28:9b:98:95:5c:0f:40:a2:6f:
b0:5a:22:be:8b:e7:4a:1e:00:40:b6:aa:c1:f9:a3:
3a:82:13:32:8e:8d:1f:f0:a3:98:9c:14:dd:e9:c0:
f8:be:08:e4:fd:01:ab:11:e5:49:2a:4c:b6:03:e4:
38:11:44:8e:da:c2:04:2b:15:a6:0f:06:b6:73:0c:
14:d9:16:09:9b:0d:e4:cb:c8:70:84:e7:ca:55:f3:
6f:57:20:4f:17:38:54:1c:70:66:89:42:f2:4e:04:
b8:bb:55:0c:5b:a4:12:d3:2c:17:b3:5d:1b:43:e4:
4d:0a:c1:1d:11:ef:8a:8f:62:5d:ef:e1:29:aa:1a:
76:23:4c:c3:b9:2b:6f:2f:a8:69:4a:90:db:44:e3:
38:07:ff:70:a5:16:3b:c1:24:4e:d2:2e:d2:e4:a7:
73:0a:0e:2b:88:78:6e:ff:bd:0b:ab:3f:b0:fb:60:
00:a5:ee:07:13:dd:79:ee:4e:96:48:c6:8e:b1:ed:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:68:EC:41:25:06:3E:AB:1D:10:BE:EB:2A:67:38:FE:CE:F9:0E:12
X509v3 Authority Key Identifier:
keyid:A8:15:58:85:3F:EB:C7:9D:81:3E:B2:C0:CE:5C:B7:36:FB:73:C0:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBVYhT_rx52BPrLAzly3NvtzwN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5ca48b-c966-4e63-868d-a85c1b2ec1ce/1/qBVYhT_rx52BPrLAzly3NvtzwN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f3:91:f6:66:9a:bf:5f:5e:8b:99:c7:6d:7d:4d:dd:62:c7:
22:6c:ed:f5:71:b1:a9:38:d7:c4:63:89:57:67:a9:1c:58:cf:
c6:7e:25:57:24:5e:7f:19:d1:7d:45:da:e1:d5:cd:03:f1:39:
09:26:45:86:f6:b9:b5:33:bd:54:33:88:e1:72:e2:08:5a:12:
ae:d4:f3:94:49:e9:5a:77:ce:c0:b1:2f:4e:f7:b7:d8:cf:d8:
00:a3:b9:4c:0e:fe:a4:fc:42:e6:ba:37:91:6d:86:0b:04:e9:
0c:bb:1a:08:3e:f9:ac:1b:38:aa:cc:9d:f7:67:38:cf:ff:b9:
50:b6:f6:22:28:ba:12:d9:ac:a4:ce:d6:61:98:71:21:a1:54:
89:7d:16:79:66:2f:c0:c7:05:cd:ad:e6:38:9c:e9:a6:d2:63:
c7:4a:9c:f2:ab:4e:00:c4:bd:fe:d2:e6:e6:94:5b:07:4a:e5:
5a:9f:e8:88:26:fd:8d:d4:30:bb:7c:41:b9:84:1e:8e:dd:00:
0a:c0:ab:b8:9e:ab:ff:5e:bd:2d:d0:b6:d2:4b:f7:7f:1c:d0:
89:3b:93:5e:c0:01:3c:8c:75:c3:53:0e:74:87:33:e3:04:17:
19:58:c5:d3:83:d3:5f:bc:d0:e8:1e:7f:f8:5e:a3:06:7b:64:
b4:60:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:56 2025 by rpki-client