Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: 7saC8HOY7+Eaj/oKqa8wG4vwlwJyLYHshA/sDHMf/tI=
Subject key identifier: 52:73:0C:AF:51:C0:D8:B5:91:65:35:98:80:24:A7:56:43:FC:68:20
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 019849D3831E9C5D2FFD4EE93EDC0E4AAE89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 145E
Signing time: Sun 27 Jul 2025 03:00:55 +0000
Manifest this update: Sun 27 Jul 2025 03:00:55 +0000
Manifest next update: Mon 28 Jul 2025 03:00:55 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: Q63iEfJ+sHFmBlJgMltM6GCkQjw+eCFT/4yjNl0phqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:83:1e:9c:5d:2f:fd:4e:e9:3e:dc:0e:4a:ae:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Jul 27 03:00:55 2025 GMT
Not After : Jul 28 03:00:55 2025 GMT
Subject: CN=52730caf51c0d8b5916535988024a75643fc6820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:19:86:58:c0:ca:53:de:5b:87:d7:a9:26:
3f:0e:1c:8c:20:2d:e5:59:3c:8b:66:f1:71:0f:da:
58:ee:d8:58:d7:b4:cc:94:32:a7:f9:22:fe:69:11:
6d:df:79:5b:c2:e1:30:af:cf:3f:9c:7a:00:5b:d9:
40:38:da:7b:4a:06:b2:67:9d:b1:a3:51:99:39:41:
5a:00:c0:b9:6b:66:bd:7f:4a:42:b2:97:c8:66:cc:
c4:62:7e:94:11:ff:90:80:e9:09:c8:f6:9e:1c:27:
e7:3e:19:aa:93:22:e7:36:1b:4d:12:c6:09:62:4e:
b3:14:97:9c:22:60:85:a0:33:27:a9:af:94:55:d6:
5e:7d:9e:c7:03:47:85:0a:a4:5f:d1:23:88:f8:c4:
8d:66:98:be:a5:db:1f:b1:11:20:f1:37:38:04:37:
42:4c:1a:64:36:ba:4c:c5:ad:17:04:74:ee:06:8e:
3d:02:06:b5:15:35:09:da:94:3f:db:54:d5:0d:93:
c6:36:4d:d8:1e:27:c2:ec:13:e3:91:dc:a7:32:3d:
f4:fa:1e:39:e8:eb:66:0e:5e:e8:9a:5d:10:2e:07:
cf:ee:5d:b1:84:57:88:36:77:70:f5:7e:b0:a8:6c:
51:a9:b1:b5:ae:78:5b:2a:71:a3:c2:95:7e:5f:89:
e1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:0C:AF:51:C0:D8:B5:91:65:35:98:80:24:A7:56:43:FC:68:20
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0b:03:f8:11:61:23:57:6b:d6:f5:c4:dd:77:8e:15:7c:85:
50:ff:8f:ce:9f:ba:ae:83:a5:71:88:66:c9:95:b2:66:45:77:
af:58:79:ae:41:46:3d:7b:f6:6c:17:6a:74:a1:b4:46:fe:08:
b9:37:70:2b:ec:ff:20:05:a3:c6:cb:cd:a9:85:d0:2a:bf:2e:
ba:b5:95:a2:2b:75:02:a0:ac:83:d6:60:4c:ab:de:7e:af:fa:
89:e4:35:b3:c0:6d:10:61:d6:d7:9b:43:7c:06:a4:7d:a4:9b:
6c:ad:6c:69:2a:da:f3:04:aa:cb:97:16:50:40:41:0f:c8:9b:
89:2d:6d:8a:a8:73:f8:6d:e8:ef:c2:ba:21:02:40:5a:25:f2:
f4:aa:bc:5b:b9:8a:f1:71:29:a6:81:2b:90:a7:a6:61:b4:c2:
70:9d:be:3f:8b:01:48:7e:62:23:52:05:43:cc:e2:d9:fa:b6:
ff:3a:f8:89:55:10:a2:31:6c:b4:7a:0e:00:b6:9a:3c:cd:c9:
9e:e0:eb:83:de:ee:c2:a2:67:ee:f1:30:95:e1:d8:5d:6d:fb:
36:39:c1:d9:70:fa:fb:18:d9:70:5d:8c:d1:90:50:26:8a:16:
a4:e2:37:11:be:a5:50:29:23:95:30:45:f2:21:77:13:a4:a7:
82:d7:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:42 2025 by rpki-client