Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
File: qpB64Zd8I1J6rWZWoUjHA3LpslY.mft (raw, json)
Hash identifier: uiJHjtRTqJv3hSX56mdgdl9vBT7/gwqKnaCPCK95Olg=
Subject key identifier: 3F:78:DF:E1:2C:49:0E:5D:B5:A7:AC:24:A5:29:AB:74:E6:DF:CD:9F
Authority key identifier: AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
Certificate issuer: /CN=aa907ae1977c23527aad6656a148c70372e9b256
Certificate serial: 019847E4CDFB01DBBE195BB942F038FEC878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
Manifest number: 08CE
Signing time: Sat 26 Jul 2025 18:00:33 +0000
Manifest this update: Sat 26 Jul 2025 18:00:33 +0000
Manifest next update: Sun 27 Jul 2025 18:00:33 +0000
Files and hashes: 1: ea2Y-dwaT445EGlgfXN8R70YRos.roa (hash: hFopTbVTP9tQkxA8ISdrfSlJKlSYxul+sHm5GKjmi5o=)
2: qpB64Zd8I1J6rWZWoUjHA3LpslY.crl (hash: irvK1d/6xQ72mdAV0ZMHrKCkVEqqFCUP3pbmOkaUN9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:cd:fb:01:db:be:19:5b:b9:42:f0:38:fe:c8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa907ae1977c23527aad6656a148c70372e9b256
Validity
Not Before: Jul 26 18:00:33 2025 GMT
Not After : Jul 27 18:00:33 2025 GMT
Subject: CN=3f78dfe12c490e5db5a7ac24a529ab74e6dfcd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:a6:1c:45:cb:ff:a4:55:3f:ec:8a:aa:b7:
df:6b:8b:15:d2:e0:19:0b:aa:67:93:a6:ff:e0:3e:
b8:9e:1a:4b:0e:dc:71:25:51:17:7a:e5:8f:87:26:
bd:8a:29:4b:77:b4:a2:a0:e6:09:a1:ed:f5:e7:62:
2f:1a:39:25:ea:52:4b:81:6e:3c:fa:98:55:34:4e:
b7:ea:bd:6c:21:87:51:41:ad:d4:8f:b9:0c:17:fb:
6c:25:d2:e2:ed:2d:98:85:36:2b:45:43:f2:ea:f9:
46:b3:87:6d:3a:e5:39:3a:a8:bc:f0:f5:50:82:01:
35:d8:d6:c9:d5:97:58:c9:01:60:64:59:6b:65:c1:
fc:23:88:6c:a4:a4:23:a8:7e:e5:7a:6a:e9:95:05:
74:e8:97:c4:98:4a:04:1d:13:9e:05:33:68:c6:37:
d1:24:ec:0d:37:98:7b:22:a5:45:d1:2b:6b:b6:26:
f8:90:a4:c9:1e:b0:6d:6d:cf:1a:7a:37:21:50:1a:
70:4e:1c:37:15:e7:85:53:f2:64:4d:7d:8e:8d:cd:
6d:3f:23:fe:2f:00:1b:4d:50:59:86:b3:c6:87:e6:
55:ea:47:58:0a:8b:ff:95:56:58:b7:6c:1d:08:38:
ce:a7:6c:b8:76:a2:ae:4d:1f:fa:53:10:ce:18:84:
bd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:78:DF:E1:2C:49:0E:5D:B5:A7:AC:24:A5:29:AB:74:E6:DF:CD:9F
X509v3 Authority Key Identifier:
keyid:AA:90:7A:E1:97:7C:23:52:7A:AD:66:56:A1:48:C7:03:72:E9:B2:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpB64Zd8I1J6rWZWoUjHA3LpslY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/2a53e8-f236-4242-a13b-8f5f713b37aa/1/qpB64Zd8I1J6rWZWoUjHA3LpslY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:79:21:f8:c3:16:5e:13:4a:3c:bc:68:5a:f4:30:73:6d:96:
06:30:01:16:aa:0a:dc:ae:25:91:95:7a:1a:50:14:d0:5f:48:
0a:e5:7b:7d:69:72:f9:f1:c7:42:01:ba:8b:d7:5d:cf:0c:17:
52:4b:53:37:ef:0e:d2:6c:c2:a8:7a:43:4c:5e:2b:88:0c:11:
19:34:02:c1:ab:bd:b1:c3:a7:ad:14:82:d3:49:dc:f1:0f:50:
d7:a5:96:d4:c6:b4:82:2f:0c:1c:20:3e:50:d7:3f:2d:30:c6:
5c:cb:8a:78:67:a6:67:6b:9b:f1:eb:2e:1e:c7:a5:db:ef:33:
01:fb:7c:38:a2:9e:20:5c:7b:19:48:2e:f4:b7:09:ee:2a:c5:
df:fb:dd:ee:58:cc:1d:82:9e:2b:aa:6e:cc:48:6b:14:62:e7:
d1:4b:12:13:e0:22:92:3d:83:16:bb:71:76:ca:45:20:19:a7:
ba:ad:4f:18:ee:a9:ba:5e:c7:26:34:b3:e9:24:25:bf:9a:c7:
77:ad:ed:bd:a8:52:c1:14:69:67:5e:aa:6d:7c:c5:c8:6a:5c:
97:a4:43:a1:69:b4:02:d6:da:c4:44:57:0d:91:64:f4:60:64:
9c:ed:f2:1c:79:9b:38:89:ff:0e:f5:1d:f4:0d:c6:9d:a9:44:
67:c2:69:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:08:54 2025 by rpki-client