Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json)
Hash identifier: roOugafZ30oW0JQ80vqBbnRi+fDmo0tWaqKF5hdnpE4=
Subject key identifier: CA:44:96:05:AD:05:CC:AD:3B:52:1A:A5:88:57:93:E0:DD:60:17:F5
Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Certificate serial: 0199180A3DEF52404EBFBAC7B0097D61CDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 04:02:28 +0000
Manifest this update: Fri 05 Sep 2025 04:02:28 +0000
Manifest next update: Sat 06 Sep 2025 04:02:28 +0000
Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=)
2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: RtYEMjmaM3tUocDZHGuihcMhLqSWsbbYNGT2PRSYCt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:3d:ef:52:40:4e:bf:ba:c7:b0:09:7d:61:cd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c
Validity
Not Before: Sep 5 04:02:28 2025 GMT
Not After : Sep 6 04:02:28 2025 GMT
Subject: CN=ca449605ad05ccad3b521aa5885793e0dd6017f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:53:68:34:e9:87:f6:a9:4e:fc:20:4e:f5:
c5:70:dd:b3:ec:cc:6b:fc:f8:1f:e9:cb:91:e3:23:
f7:53:ff:0f:d5:c5:61:bd:30:14:7b:a7:0a:bd:53:
40:e0:ae:74:77:be:0f:9d:ac:de:f0:bb:44:52:fb:
dc:c2:92:45:f3:72:11:34:6f:0f:bb:15:db:60:75:
7a:34:ef:35:49:a9:49:c4:73:c4:b1:1d:d1:85:d4:
e8:3b:7f:71:ba:3d:b1:af:0c:0e:af:df:6d:15:97:
4b:e3:3d:b7:27:3d:9c:ee:fd:b9:99:ac:cd:f5:10:
75:74:71:4f:15:5e:81:2e:50:e4:36:75:d5:6d:1b:
c0:b4:03:2d:a6:dc:10:90:02:7c:3f:c8:1f:b7:91:
a1:90:e1:5e:ef:6a:af:f0:93:d5:19:5d:26:5e:6c:
12:27:d3:ee:a6:da:b8:e2:f7:c3:8a:fa:01:8a:a2:
75:be:b9:f2:cc:03:15:fc:5c:82:85:38:b1:98:f1:
46:9a:d5:10:13:88:e4:d7:2f:0a:e7:75:be:ff:d5:
72:e7:31:22:30:48:78:db:b8:cb:91:1b:39:91:13:
5a:77:d6:b8:06:5e:9d:58:7c:00:ac:16:bf:6d:8c:
80:d4:56:93:69:ff:f4:b3:0e:8f:3e:7b:97:00:6a:
2b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:44:96:05:AD:05:CC:AD:3B:52:1A:A5:88:57:93:E0:DD:60:17:F5
X509v3 Authority Key Identifier:
keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:0d:06:10:fd:a1:45:20:74:3d:c2:5e:39:95:35:bc:b2:8f:
1e:d6:5b:dc:d4:d0:08:9b:ff:cc:d0:40:7d:04:67:79:f9:86:
bd:7b:ac:7b:c1:c9:8f:ce:01:5f:f8:1e:85:7f:95:27:ea:d2:
4a:0d:cd:2e:43:05:ec:33:f8:98:a5:bd:61:84:33:59:47:66:
88:9a:51:46:f5:c2:ba:f2:b8:f8:25:32:d9:30:c8:5c:52:f8:
98:d4:3c:f7:d0:ff:23:a7:f9:d0:c5:00:0b:a6:91:4c:3b:69:
b5:8c:63:17:b1:c5:8c:e4:54:4b:48:26:08:84:8f:6b:5c:58:
d2:5e:f7:f1:58:2c:e3:13:55:ca:df:a4:f2:24:16:be:a8:a0:
b7:05:5c:0c:d5:7c:fe:2b:2a:ab:42:15:71:2d:8f:0d:90:51:
97:fd:f1:d8:ec:30:5d:5c:5d:f5:55:9a:dd:10:85:5b:ea:4d:
9c:8b:7f:43:76:c3:16:54:6d:5d:f6:9e:f1:f9:8f:7a:1d:7d:
8d:5d:b4:cb:8d:31:ab:99:ab:75:3f:0b:eb:8c:5d:9c:d2:31:
6a:fc:e5:81:9e:3f:45:51:34:23:12:50:24:a1:c4:be:05:60:
ec:d8:07:f1:21:34:8e:0f:1d:d0:76:75:e1:0a:58:a8:14:a9:
7a:f6:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:42 2025 by rpki-client