Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: zQE9RL2QODXY1Mt2+MGmWrb1Qp2LyZGs5XP7pSplNzo=
Subject key identifier: 9B:14:73:F4:DB:D8:E5:A0:52:EC:6A:2A:1F:8A:21:E3:F0:69:42:2D
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 01984852E609C6BF767856B401030E332FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 20:00:48 +0000
Manifest this update: Sat 26 Jul 2025 20:00:48 +0000
Manifest next update: Sun 27 Jul 2025 20:00:48 +0000
Files and hashes: 1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=)
2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: MGtgD/KjWiBsq3+d6KfvxbiHXt/t9AHLdetf0D/eGBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:e6:09:c6:bf:76:78:56:b4:01:03:0e:33:2f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Jul 26 20:00:48 2025 GMT
Not After : Jul 27 20:00:48 2025 GMT
Subject: CN=9b1473f4dbd8e5a052ec6a2a1f8a21e3f069422d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:ac:39:3d:40:b0:61:d7:db:de:67:5e:87:
18:42:73:4d:93:66:61:75:0e:ba:d7:15:ae:88:81:
0e:be:c5:0d:32:37:4e:92:60:0f:12:12:2b:66:33:
04:cc:93:99:94:c1:36:be:17:33:98:2d:03:8b:06:
32:39:80:5f:5a:0a:0e:81:1c:8b:e2:52:a3:2f:e2:
f3:04:62:f5:6e:cf:ec:f6:1c:d2:a5:82:4b:65:42:
95:51:ea:f9:67:49:8e:c5:f2:f4:96:b4:f5:59:2b:
2b:be:0d:0b:01:d2:65:71:ae:a1:e1:5f:ab:93:60:
69:96:d5:43:9b:38:0d:93:cb:fa:a7:79:dd:63:35:
6b:6b:db:b9:a6:65:da:62:c9:bc:99:f8:9d:92:66:
e3:0a:75:54:07:a8:20:09:2d:ab:c5:97:70:53:b6:
3f:63:2f:26:7e:2e:8e:7b:91:f7:28:1e:d7:72:f9:
ec:3f:15:e9:ef:37:db:fc:e1:f9:a3:ba:a6:86:78:
42:25:83:61:0e:ba:cd:c6:e5:39:76:81:bb:27:2a:
69:8c:3b:9b:8a:34:6f:fe:72:55:28:04:bf:a4:84:
76:53:7f:cd:63:ef:48:4e:a5:8b:b5:ae:f7:f8:2f:
10:1e:47:74:1c:ab:e0:62:b7:4a:ee:d0:cd:8d:e3:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:14:73:F4:DB:D8:E5:A0:52:EC:6A:2A:1F:8A:21:E3:F0:69:42:2D
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:35:ca:8b:2d:c9:ca:26:89:bf:2d:9a:9e:c2:77:11:06:16:
24:9e:33:a9:2b:37:dc:04:04:06:c7:4e:8d:1f:8f:b7:d7:c5:
17:1d:12:cf:4c:fd:a7:d0:d0:d3:3f:8a:1a:7c:92:eb:4d:73:
85:c3:12:88:de:ba:a6:2d:43:f7:06:dd:c3:ad:0e:2d:5b:59:
f7:3d:69:b0:42:9a:b4:37:8b:e8:d7:64:d7:0c:5a:0a:67:54:
05:08:c7:cc:9f:fc:ea:77:a7:08:84:eb:d2:aa:9c:55:15:a3:
c9:9a:89:4d:48:d3:94:24:be:a6:67:0b:59:65:49:0a:07:26:
4d:83:61:c8:a1:96:55:e8:0c:0d:18:5f:8c:dd:02:b4:8e:0b:
a0:6f:9a:56:1e:83:3a:4f:61:2c:f5:22:b8:ef:57:57:39:cc:
63:ac:59:f4:35:8d:77:50:b5:4e:cc:7f:d0:35:dd:90:24:cd:
4c:43:b9:f2:f8:26:87:68:9c:08:1b:c5:7f:b4:55:7e:71:04:
d7:58:1b:d1:52:a5:b0:62:15:37:df:28:75:74:77:5f:a6:6a:
ff:f7:b3:94:24:53:48:a7:cf:30:99:9b:a8:46:d9:04:02:e3:
fa:af:e6:63:dd:3b:03:36:db:c8:82:2a:f5:cf:8c:20:67:09:
94:dd:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:24:25 2025 by rpki-client