Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: /i7vvrXIMJGfGnylmIUFemEZ+R4cJmGTjGOhTy+Nybk=
Subject key identifier: AA:56:85:87:83:BB:23:39:42:87:D0:45:59:73:95:3C:22:71:C9:C4
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 01991DD4FF8F886C086A523E2D1CEB2E85A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 0E90
Signing time: Sat 06 Sep 2025 07:02:02 +0000
Manifest this update: Sat 06 Sep 2025 07:02:02 +0000
Manifest next update: Sun 07 Sep 2025 07:02:02 +0000
Files and hashes: 1: VyO46YpT23BvljW9CwqKp8OCvAA.roa (hash: iOrTV9PCcKDnK4SEk9hES8b1JaLYOrEkHnO7HcHHTeE=)
2: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: WpY6fyHCpf7XUELKeGQ2tCbENkcZ+hGVUE0Y5+gxOyA=)
3: zyla5TQUsQzSUxLneRGH2oWP4QY.roa (hash: Nh/0bB0eQrdPHOZC7+V6EmhOBm+BxF8VlJbCNYPi958=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1d:d4:ff:8f:88:6c:08:6a:52:3e:2d:1c:eb:2e:85:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Sep 6 07:02:02 2025 GMT
Not After : Sep 7 07:02:02 2025 GMT
Subject: CN=aa56858783bb23394287d0455973953c2271c9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:0f:36:80:ed:d2:c8:c5:cc:ae:7c:c7:66:
4a:1b:9b:15:2e:e5:8a:e7:54:8e:b0:c2:88:8c:a6:
fa:0c:b0:2d:fc:f9:60:cc:88:84:7f:f0:26:3c:51:
b1:bc:0e:6b:a1:0f:c6:99:2b:a7:4b:45:c0:9e:78:
44:1a:cd:f9:c2:79:84:0a:c4:42:95:ad:8c:a5:40:
93:0b:bd:8a:6f:d7:ac:b1:86:eb:db:8c:ac:b4:09:
ef:8d:63:6c:5f:6f:91:7e:45:c2:60:79:c0:f5:d9:
01:12:10:67:79:0e:88:fd:79:32:a2:1d:26:e5:d7:
4d:bf:96:40:0f:8d:6c:02:08:c6:79:df:5e:6e:c6:
71:00:93:2f:c2:d1:e1:b3:34:e6:47:49:5f:dc:2e:
c8:7a:1f:01:31:28:38:6c:73:6e:e1:b8:a5:51:24:
ea:9e:7c:bc:69:8b:7f:fe:f2:f9:fe:72:27:d1:2e:
29:61:de:f2:7a:2d:a9:29:a3:d2:3a:be:08:d4:ed:
d3:09:44:65:a6:96:4a:0b:e2:44:77:ab:d5:aa:25:
7a:d1:a4:ce:d5:93:26:e1:66:5e:2d:8e:66:38:c0:
24:23:f0:c6:af:1a:7d:da:2b:a6:5a:b6:4c:90:81:
46:bf:50:50:69:57:5d:92:0c:74:33:7e:57:c5:85:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:85:87:83:BB:23:39:42:87:D0:45:59:73:95:3C:22:71:C9:C4
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e7:14:93:e9:8e:60:3b:8f:fe:8c:d6:52:14:a4:26:c6:c2:
7e:d3:27:ba:24:26:f1:e0:dc:b1:ef:99:50:50:9c:e2:37:0a:
ab:5e:c3:79:c9:d5:04:fa:cc:ca:df:31:ed:45:82:49:b5:4a:
4a:0e:c8:41:0c:65:ec:ad:b7:be:20:68:9e:7a:17:6f:e1:fb:
8c:37:76:34:99:10:6e:09:1f:62:c9:ae:19:35:f3:a1:c3:2f:
46:05:32:c1:94:ad:39:cd:31:5e:24:79:01:b2:58:70:ff:a7:
d2:cf:33:a5:06:52:06:bc:83:8c:e7:f9:46:fd:23:99:21:1d:
1f:06:34:00:a2:06:3d:33:94:d1:55:48:ad:6c:76:63:ec:a7:
f6:dc:d7:92:d5:9d:d8:bb:15:be:71:1b:df:10:ff:8e:eb:eb:
4b:e9:56:cb:87:9d:f2:37:88:5b:8c:b2:4a:b9:fd:2f:30:3b:
fd:fc:5d:3e:19:3b:3d:04:2b:7e:20:93:64:18:3b:1c:cd:a0:
8a:41:91:a4:08:af:3a:dd:5c:e8:6e:9a:8c:50:99:8b:33:37:
b7:de:9f:a6:fd:e6:d0:0c:eb:30:6d:a6:5d:38:69:d7:a6:9c:
a0:1c:a8:ae:8e:ef:66:b2:3e:6c:b7:8c:96:4e:dc:00:fa:a9:
34:2e:09:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:11:20 2025 by rpki-client