Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: 6cXAOZvsPF2bhcg4mo+WI2dvE5hSVXnembB3eqy5Yks=
Subject key identifier: 31:05:41:22:51:49:03:75:F6:C2:08:4E:09:A1:2E:FB:73:5E:D4:20
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 01993047BB6185AC076ACB6AD84D0E164749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0BB8
Signing time: Tue 09 Sep 2025 21:00:31 +0000
Manifest this update: Tue 09 Sep 2025 21:00:31 +0000
Manifest next update: Wed 10 Sep 2025 21:00:31 +0000
Files and hashes: 1: eZOZdw0xvypBF51rN4RfpY5h6vA.roa (hash: Rrqkszl7rnzrAJTcRtFLjvZXJPc9ZovjcSYFWUvutzY=)
2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: i+FT25rjXD1zv/Yx5DoswpvP7xMj2PgVftwtLM5zOM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:47:bb:61:85:ac:07:6a:cb:6a:d8:4d:0e:16:47:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Sep 9 21:00:31 2025 GMT
Not After : Sep 10 21:00:31 2025 GMT
Subject: CN=3105412251490375f6c2084e09a12efb735ed420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:78:be:46:96:37:c7:73:5f:63:a0:d9:bf:
ab:3b:08:0b:8b:e5:9d:77:d6:3b:01:db:36:4a:7c:
89:03:5c:c9:a6:e5:df:1c:f6:7e:07:3a:63:57:1b:
72:23:62:07:6d:af:8f:1f:c3:33:2b:20:01:c1:44:
e6:8a:51:0a:13:b3:30:55:21:dc:1e:bb:9b:1a:be:
bd:d8:1a:3f:4e:61:b9:56:d1:56:b2:62:48:cd:82:
5f:7d:8c:66:14:6a:bc:38:d4:a0:b1:36:17:4a:3d:
80:10:e6:49:b8:da:90:10:83:77:f7:fe:d4:35:a1:
c2:a6:18:6b:d7:93:03:44:b7:1e:52:68:74:e7:68:
79:6f:7a:a9:2c:8d:1c:6c:51:aa:3a:fe:e5:4e:9d:
12:e9:de:87:59:b2:38:17:33:31:1b:f6:7b:a7:42:
a7:38:c0:f6:ea:ec:9b:ef:8d:92:6d:6c:65:89:1f:
c6:a1:56:3c:2e:b2:35:a9:99:9c:97:b2:25:c8:dc:
14:98:a3:8d:90:6a:05:d2:8f:0e:bd:0b:db:f8:70:
43:83:94:4b:43:5b:7c:d7:3d:48:0c:8a:97:5b:31:
09:67:fb:6b:ca:36:45:3b:3e:0a:1a:55:36:a9:c8:
96:a2:74:a3:16:f7:c6:b7:24:c5:ed:d1:44:be:42:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:05:41:22:51:49:03:75:F6:C2:08:4E:09:A1:2E:FB:73:5E:D4:20
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:05:46:9f:e9:ca:db:6f:2d:14:f9:98:d7:81:bf:40:be:49:
4d:7d:33:62:56:b4:91:e1:ca:31:7b:c4:25:7a:9c:02:24:42:
fb:70:7f:8e:9e:d3:8a:d4:c8:7e:84:0f:3b:c7:af:38:10:6c:
56:8a:04:9f:c8:fc:5b:87:9a:4c:6d:3d:fd:c7:b5:dc:dc:a3:
9f:30:5b:58:f7:4c:4c:7f:ea:f2:02:fd:ec:72:cf:b1:3f:25:
80:7a:66:a6:48:f0:e4:2b:fb:d3:7d:5e:f9:34:86:59:94:4e:
6c:5c:8a:31:64:bc:3a:50:5c:71:3b:54:59:8d:31:db:db:14:
5d:a1:92:f2:a8:63:94:6e:01:c4:1f:3d:38:1f:58:16:70:d7:
71:3e:71:f9:3d:b9:d7:86:30:d6:8e:f2:5c:4a:a9:4f:24:06:
ec:d7:36:d6:93:fc:82:a4:33:d1:69:c1:e5:cb:48:9f:81:d2:
25:5b:aa:7e:2c:e9:5f:87:ef:d5:46:89:81:67:23:5d:d5:96:
1d:91:a6:01:59:19:3f:09:53:28:93:37:e3:1a:96:70:61:03:
22:38:d2:b9:45:73:72:b5:e9:a7:47:8f:a4:4a:95:ab:0d:61:
7b:bb:b1:79:4a:55:cc:11:f5:43:d4:90:17:9f:5c:71:d5:fe:
70:5a:f9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:06:37 2025 by rpki-client