Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: mfetuM/hafnQBIl67o47735skKHA0jWL0qeH/RnG9+o=
Subject key identifier: A2:2E:A0:38:D0:DA:F9:B6:27:D8:66:99:23:97:26:16:1D:13:A6:26
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 019847AD9CA6051153962D3E48E594BF2633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 13C9
Signing time: Sat 26 Jul 2025 17:00:16 +0000
Manifest this update: Sat 26 Jul 2025 17:00:16 +0000
Manifest next update: Sun 27 Jul 2025 17:00:16 +0000
Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: sEDMNrl0rwiYq9MqnkNuAV4ybDIR6lDPF802H2qRjeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:9c:a6:05:11:53:96:2d:3e:48:e5:94:bf:26:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Jul 26 17:00:16 2025 GMT
Not After : Jul 27 17:00:16 2025 GMT
Subject: CN=a22ea038d0daf9b627d86699239726161d13a626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:bf:e4:ac:32:6b:9d:62:00:4f:ca:15:b1:
be:da:e3:e1:05:24:0a:55:52:fc:ba:ed:c3:3c:be:
4c:7b:7c:1a:b0:fa:49:ff:ca:8a:6f:22:c7:ae:9d:
2d:67:6a:68:0b:08:04:94:f5:e6:e9:01:4e:c5:61:
27:6d:b6:b4:c9:a9:f8:5c:f7:dc:b6:ad:0c:10:87:
48:8c:fa:bb:c6:ae:90:ee:29:68:c5:f2:fb:90:33:
f2:cb:93:61:2c:7d:2c:2f:3f:5e:f0:29:a0:0e:f9:
90:20:28:dd:1a:c2:e4:e8:53:43:44:e6:de:ad:36:
80:3b:8b:6f:16:07:e9:64:4b:6e:93:98:67:9a:50:
d0:97:3f:44:45:91:9f:9b:74:98:11:fa:27:10:16:
21:40:10:c5:ff:b5:70:22:a2:15:af:e0:78:2c:0b:
40:cc:7a:50:4e:ee:1f:08:04:83:f5:ee:00:af:be:
da:af:52:93:b4:da:67:fb:32:83:92:19:1f:f7:9c:
16:cb:9e:fa:45:10:bd:91:69:1a:0c:8a:32:2c:18:
8b:bc:08:90:96:dd:e5:70:08:10:c0:8e:b2:4e:26:
b6:ab:1f:9f:06:a6:1b:41:a8:28:a9:b1:ea:a3:a4:
6e:a2:67:72:ba:3d:85:68:18:59:8f:9c:c5:09:f1:
c9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2E:A0:38:D0:DA:F9:B6:27:D8:66:99:23:97:26:16:1D:13:A6:26
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1e:ec:4f:9a:85:28:60:c3:18:9b:97:29:85:0c:7e:e4:d6:
75:be:db:2f:58:9f:1b:e7:f5:fd:54:16:37:72:39:22:7d:e0:
17:9a:d5:d7:cd:da:1e:3c:c1:bf:b3:1d:13:8c:5f:b0:77:78:
95:5e:8f:94:37:b3:58:91:94:04:22:82:eb:fc:0a:33:c9:0f:
46:c3:b5:ea:d9:a8:cb:9d:32:5a:50:f8:6c:48:f3:d3:f7:3f:
0f:dd:f0:9b:c0:31:33:bb:47:be:3a:b2:c2:b2:9e:86:87:9d:
f1:cd:28:f8:c9:55:5c:35:68:65:af:00:aa:2f:ac:ca:6e:0a:
50:50:c7:83:cd:ea:ec:52:f1:4d:53:27:80:1a:45:08:37:1b:
1c:9d:d7:41:e3:ed:d5:60:22:2c:b9:59:65:cf:df:27:4e:52:
e2:b7:6c:91:88:63:e0:7d:a5:30:b2:77:5d:49:1c:99:27:0d:
d7:79:3a:c4:17:ea:f5:23:8e:ca:68:99:db:b3:53:00:27:e9:
f1:d9:81:7a:26:d3:4e:1f:c6:97:43:85:ca:c9:67:be:a5:20:
0e:cf:87:b2:36:58:6c:a5:f4:51:72:74:da:21:aa:1c:12:fa:
a4:cc:eb:8a:79:2d:69:fe:e0:26:0f:11:f7:b7:54:18:51:9e:
e3:e3:dc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:03:40 2025 by rpki-client