Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: hAROXCaWy8QTvHreCS0XM5QPhU9stesuW0XrI7XbrOQ=
Subject key identifier: FE:A2:B7:F7:98:E5:96:78:AD:90:F8:CC:DE:AA:7A:FF:1A:2C:BA:EB
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 019842880368409A60FDAC93D6911DE821D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 10E0
Signing time: Fri 25 Jul 2025 17:01:06 +0000
Manifest this update: Fri 25 Jul 2025 17:01:06 +0000
Manifest next update: Sat 26 Jul 2025 17:01:06 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: Lz7i166YMLrP7rW3zm2hh97Crc6fI+lud+qFBDM0M10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:88:03:68:40:9a:60:fd:ac:93:d6:91:1d:e8:21:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Jul 25 17:01:06 2025 GMT
Not After : Jul 26 17:01:06 2025 GMT
Subject: CN=fea2b7f798e59678ad90f8ccdeaa7aff1a2cbaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:19:57:da:05:a5:78:44:d2:78:b6:26:12:67:
d7:a4:8a:aa:4d:b4:b7:99:d3:73:c4:ff:08:8c:b0:
eb:c8:3f:6b:b4:34:32:de:f4:7c:0e:39:e7:e9:ae:
eb:de:df:e2:ca:76:0b:ad:d6:bd:8b:d9:a7:df:ce:
3b:7e:2a:1b:f4:2a:b6:0c:e0:79:c9:24:55:16:1b:
c6:3e:1f:5b:4e:91:10:6c:67:aa:c1:96:80:a3:76:
af:a1:d1:4c:f3:6a:95:52:b0:e9:f7:29:16:8d:b3:
2e:1d:0a:e8:e4:3d:a9:af:df:6b:d8:ab:e6:2c:3a:
1f:69:88:c6:e7:25:1f:2f:e8:52:d5:eb:54:c1:3c:
0e:24:27:d3:7f:57:e6:3f:09:4b:f6:f0:ed:ab:4c:
2d:8c:11:6c:bb:a1:44:18:5a:94:a7:fb:2b:be:98:
84:eb:4d:1b:c5:f0:6e:07:2a:e2:85:55:22:ec:9a:
0e:e1:54:80:40:26:f2:ac:49:42:22:af:c3:44:55:
93:d3:2f:e5:f8:27:6f:a1:30:60:57:04:f7:e4:30:
9f:2f:6c:5f:ae:4e:d0:37:d5:c5:7e:fc:2d:55:c1:
86:0e:b7:54:0c:e8:04:61:da:88:92:0e:22:ff:1e:
72:17:81:51:94:8d:94:64:1b:7c:5f:b9:60:f0:76:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A2:B7:F7:98:E5:96:78:AD:90:F8:CC:DE:AA:7A:FF:1A:2C:BA:EB
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:df:a1:4b:f8:17:85:e9:e6:49:88:39:85:0e:d7:2f:2e:
ae:a5:03:14:69:9a:a1:07:53:3c:48:7c:b1:a1:cd:a3:5d:82:
9c:63:f4:b1:49:86:32:fa:6b:c8:6b:95:1d:88:a0:26:c5:c0:
19:9b:5f:4c:4f:ad:e1:73:ed:b1:a5:57:ca:82:8c:fc:eb:4f:
f5:cd:e9:28:43:15:09:51:ec:33:33:0c:66:bc:c6:44:94:a2:
cf:5f:40:9b:a5:b5:95:ea:36:aa:6f:1d:46:e7:f4:88:8b:f2:
a7:fa:96:bd:73:47:db:73:55:48:80:f8:dd:50:61:00:ff:e5:
d5:9c:85:b2:ea:94:b7:1d:88:60:9c:bf:1f:68:b3:0f:3e:d3:
d9:5c:d6:45:66:ff:ef:59:d0:f5:96:89:ac:75:ed:00:5b:c3:
68:72:43:03:d1:7c:3b:f5:c3:77:fa:f6:55:a1:0a:57:f9:38:
c4:48:55:19:23:2a:e7:0a:fc:62:89:b9:bd:a8:c5:26:0a:c1:
6a:96:bc:6b:de:43:09:0a:e1:ea:a3:90:54:c0:ab:ad:50:10:
e1:84:e5:6f:8e:b1:5a:ef:d3:b5:12:35:e3:60:ee:4a:50:b0:
97:e2:e1:52:86:bd:91:6e:82:5f:ab:dd:34:d8:e2:df:0d:bb:
01:11:8d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:51 2025 by rpki-client