Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: OZKx5BSlZrPIGiplGQnqoVGst1RZ+llPZzULlW+IUU4=
Subject key identifier: FA:72:7F:1C:F9:95:82:65:06:4A:C3:F8:F8:DE:BD:AD:A5:2F:B9:14
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 01984A77D3F5300D7A3A033FA39C0A0E2D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 0158
Signing time: Sun 27 Jul 2025 06:00:23 +0000
Manifest this update: Sun 27 Jul 2025 06:00:23 +0000
Manifest next update: Mon 28 Jul 2025 06:00:23 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: qFxrrrFTmBSDvBWilwWPSF2SuvHa6r641dAO0lqwO/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:d3:f5:30:0d:7a:3a:03:3f:a3:9c:0a:0e:2d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Jul 27 06:00:23 2025 GMT
Not After : Jul 28 06:00:23 2025 GMT
Subject: CN=fa727f1cf9958265064ac3f8f8debdada52fb914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cb:a4:80:5f:65:93:92:63:da:5d:49:f1:49:
c4:7e:e3:c9:04:97:af:c6:a4:a7:42:ec:4d:61:ad:
33:c0:ac:d9:65:29:d5:e0:e2:7e:ee:69:68:82:fc:
73:c4:73:76:5e:ff:24:e2:78:88:b4:f5:3d:95:6e:
70:80:b7:c5:78:5c:c3:4e:f0:a3:a7:38:b5:d8:f6:
96:bf:82:90:97:fe:88:bf:53:ec:2f:c7:07:75:ba:
55:68:e4:e9:5d:5c:e9:f3:ca:72:08:f4:a0:e2:63:
3d:fe:f0:f3:60:7e:85:a0:71:57:ae:7a:2b:06:6f:
53:4e:d5:4c:ca:bf:a7:9c:86:fa:84:a4:e0:a4:33:
81:de:92:cd:64:15:91:eb:53:ee:cc:26:93:6a:2a:
81:bd:68:77:af:44:f8:93:89:7a:1c:b2:64:16:8c:
e9:60:62:22:7b:60:7e:82:4a:0f:71:d7:da:bc:1a:
1f:f2:a8:e3:f9:78:03:1a:a7:38:62:fe:e4:9a:f1:
6a:09:a7:16:87:fc:f3:e7:6f:83:16:4c:44:d4:df:
84:fc:09:c7:ea:dd:33:16:d5:ea:e7:c8:43:19:35:
4a:d5:a8:bc:b6:d6:62:35:ab:1d:87:7c:a8:a1:56:
2e:2b:9e:75:62:40:67:3f:cf:c6:de:ea:9f:7d:57:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:72:7F:1C:F9:95:82:65:06:4A:C3:F8:F8:DE:BD:AD:A5:2F:B9:14
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:28:29:d4:f8:04:22:f3:e1:e7:92:99:8d:aa:d8:5f:26:eb:
57:19:01:ee:ac:24:b4:66:33:aa:37:43:09:d7:41:9d:f3:8e:
b7:d0:8e:af:db:86:ee:71:31:64:0c:a7:7e:0d:8d:74:2b:93:
6c:36:7b:c0:f5:1b:ba:f8:29:32:aa:d3:f6:4e:93:ba:6a:b0:
6c:01:44:f3:17:e0:0c:04:bc:8a:c3:6a:77:53:84:45:47:2d:
49:f7:7f:c2:f2:6f:21:71:97:fe:41:ae:11:19:de:95:ca:a3:
d1:d8:04:a2:86:ca:b5:62:4f:c2:c9:c6:5e:b4:47:22:5b:ea:
3f:12:29:00:e5:0d:ab:39:84:a8:31:40:32:38:2d:80:15:50:
17:80:0e:94:8c:33:ae:0a:8a:c8:47:21:2c:0c:76:bb:72:88:
69:7f:3a:b7:5d:f7:8a:f6:89:aa:a3:19:fe:c0:27:94:bd:22:
88:a9:8e:22:f3:fe:f8:72:41:8f:f8:d1:cb:63:35:d4:74:b9:
10:03:fd:fb:d9:c8:ad:52:32:d8:4d:90:71:2f:c2:72:66:8e:
3b:9f:d5:e3:c8:14:72:c5:a8:02:75:9a:a2:cd:3b:a5:a6:3f:
42:50:4a:60:b4:c8:0f:91:99:0f:17:28:dc:8c:7a:2a:e9:d6:
7b:1e:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:08:18 2025 by rpki-client