Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: aNUmfO691k7eZDA004Lh/4iy460i23YgECkss/pVRB4=
Subject key identifier: B9:EB:D6:77:B8:5C:CF:7A:2A:FD:46:CC:60:B3:D8:63:6B:2F:51:4C
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 01984A09FC3A229611A64A6F2A4CDD577E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 14F6
Signing time: Sun 27 Jul 2025 04:00:24 +0000
Manifest this update: Sun 27 Jul 2025 04:00:24 +0000
Manifest next update: Mon 28 Jul 2025 04:00:24 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: GeEMmhvUqb8lroYpd7HyOcQ8Z1Xd5w+4lD0UGPvgYNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:fc:3a:22:96:11:a6:4a:6f:2a:4c:dd:57:7e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Jul 27 04:00:24 2025 GMT
Not After : Jul 28 04:00:24 2025 GMT
Subject: CN=b9ebd677b85ccf7a2afd46cc60b3d8636b2f514c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:6f:c1:7c:22:9b:01:9c:ff:65:3a:24:75:
d2:8c:dd:e5:41:ff:48:d4:39:59:1e:0e:38:02:ca:
b5:a5:00:6d:46:9c:20:5e:d4:52:33:22:89:bf:31:
e9:83:d6:6e:00:42:0e:ce:94:96:34:dd:20:05:61:
a5:01:0c:ed:11:db:85:e0:9b:4d:6c:76:33:07:d7:
ea:58:6d:5e:7d:b5:3d:46:b5:39:6e:08:6c:1e:f6:
d1:48:bf:c3:61:01:9e:6d:e6:1c:7c:df:99:67:56:
73:49:14:c0:db:fb:64:0b:c6:e4:df:44:30:db:a2:
1a:ab:d9:f0:c0:c9:41:e7:97:49:01:9f:f2:11:53:
68:5a:38:2f:05:50:b4:55:f0:d9:6d:65:bc:a2:b2:
78:5e:89:ae:71:72:a8:b1:b9:ec:6f:ab:91:29:76:
08:7d:65:a1:d7:98:b0:bc:f4:ef:18:62:be:00:0c:
c6:17:ab:ef:47:11:d1:93:95:af:b3:09:9f:b2:a1:
54:5b:16:49:06:96:92:aa:08:5b:81:00:c6:f6:af:
44:90:b3:2c:fb:57:0c:1c:83:08:b9:c2:a7:b7:da:
82:0b:8e:d9:ee:9f:b9:c2:3a:36:f5:b9:9b:dd:80:
03:c3:11:a4:0f:73:7d:1f:9f:bc:b4:c7:cd:b5:02:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:D6:77:B8:5C:CF:7A:2A:FD:46:CC:60:B3:D8:63:6B:2F:51:4C
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:de:3b:01:8e:8c:ae:78:7e:e1:17:0b:3f:4d:c0:37:5e:06:
b3:29:d6:b9:82:90:0b:d8:d2:67:c0:d8:7a:2f:20:e5:a4:6c:
e2:5b:26:05:77:64:4f:50:0b:41:1a:6a:8a:e7:c7:17:63:93:
73:8d:8e:4b:a7:12:3f:6f:9c:6e:08:98:bc:60:44:97:ba:ac:
06:84:c3:c9:41:80:a1:81:77:bc:6f:ff:a7:cf:ac:72:12:3c:
5d:a1:99:00:a7:8f:dc:61:48:00:04:f4:fd:c6:37:b2:22:42:
bd:6b:cb:2e:38:69:a9:52:3b:4b:d5:ff:8d:44:95:3c:11:aa:
19:9f:ef:fb:c6:db:bc:85:b0:3f:a6:6b:6a:11:cd:04:ae:36:
03:cc:6f:bc:28:b3:a3:58:8d:72:36:c3:21:5f:43:64:d8:f8:
e1:20:95:b4:94:8e:09:9f:f1:0a:38:af:3a:6e:56:2a:db:54:
b5:69:d3:aa:97:f5:6d:53:60:aa:d4:29:69:bf:c8:34:44:8a:
80:38:49:da:0e:bb:44:9b:69:22:7f:ef:ad:31:83:af:84:ab:
f4:ef:29:30:0e:83:6d:0c:4b:5c:1d:12:58:f5:ad:fd:a3:a8:
2d:79:3b:37:fb:20:12:ab:68:82:57:27:3e:f9:54:81:52:16:
81:cd:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:23 2025 by rpki-client