Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: 0Akf4sUpAtIIIk/pu03ilUVeLQ06vrJAXAmETZgyvyg=
Subject key identifier: 5D:37:78:10:C0:F5:15:15:B0:96:AC:AA:6F:65:45:6D:52:AB:1D:1A
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 01992C343B1F5181D876ED43034F3AB24B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 1159
Signing time: Tue 09 Sep 2025 02:00:44 +0000
Manifest this update: Tue 09 Sep 2025 02:00:44 +0000
Manifest next update: Wed 10 Sep 2025 02:00:44 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: lrTZIdHe1Avr9OS9KsX0qRQN5FD/cNSx8n0W9pkTkpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:34:3b:1f:51:81:d8:76:ed:43:03:4f:3a:b2:4b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Sep 9 02:00:44 2025 GMT
Not After : Sep 10 02:00:44 2025 GMT
Subject: CN=5d377810c0f51515b096acaa6f65456d52ab1d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:4c:9d:b1:a1:3e:b6:e8:6b:4b:ec:84:ab:
f4:26:8f:68:6a:cb:25:f9:ff:f6:07:3f:0a:41:49:
ab:63:00:22:ba:33:d9:b3:e0:e5:8a:6f:17:45:e7:
5b:3e:0c:bd:b4:c3:81:ab:43:5e:48:b0:fe:65:0a:
a0:d5:38:7e:fe:3a:22:eb:b0:da:35:78:39:04:f2:
74:68:e4:61:16:fd:36:e7:06:a6:f4:e2:5c:ca:86:
58:df:40:ab:7a:86:a7:fc:52:a9:7f:60:19:d2:f7:
2e:a9:bd:a2:1a:8d:41:c6:d6:0a:d8:79:ce:5f:65:
d7:0c:81:bb:fc:31:d1:27:7d:63:15:f5:2c:a3:17:
51:dc:1f:f9:6b:07:75:7a:e9:3c:a2:55:e2:14:6f:
9d:03:42:cb:f2:a6:6c:eb:c8:15:1c:6b:55:38:9f:
4a:ba:5a:63:04:79:11:16:dc:b7:47:ff:67:dd:a8:
3d:82:48:fc:4f:9a:5f:90:b0:51:69:74:62:69:9a:
26:7f:c6:ed:30:c7:e2:88:c0:a5:fc:6f:4b:0c:8a:
3e:14:94:c9:5c:2f:a2:75:b6:68:05:46:f8:ff:ff:
41:39:cb:40:64:8f:5a:9a:39:7d:a9:1f:f1:c8:21:
a3:34:60:da:01:d1:9f:7c:b0:30:e4:39:50:da:41:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:37:78:10:C0:F5:15:15:B0:96:AC:AA:6F:65:45:6D:52:AB:1D:1A
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:18:1c:aa:93:b4:50:ae:c0:f2:62:61:4a:ea:08:6f:ae:b1:
81:b0:30:3b:01:7f:58:2f:fc:42:8c:f5:fe:23:07:66:aa:33:
b9:b4:c5:03:2b:ae:9a:58:0e:77:51:e3:d6:18:b4:35:07:17:
e3:8f:f5:bf:ca:e5:68:c8:fd:5d:28:78:db:10:43:70:d4:60:
f2:d3:17:ff:3f:5b:df:53:bb:65:74:5f:9c:48:e7:3e:83:64:
52:55:b5:74:63:db:96:53:f1:dc:ab:01:68:71:ca:08:73:57:
7d:94:72:22:26:9d:64:e9:a4:6e:8f:80:1b:87:c9:86:26:06:
f1:60:0b:1e:10:00:4c:f3:aa:26:9f:b0:b9:a1:50:0a:ea:8c:
31:bb:5a:4c:63:27:ea:cf:46:18:51:48:78:58:1f:85:58:fe:
a2:f1:0f:2a:61:f9:51:57:00:a0:fc:9f:e4:fd:e8:c8:1c:17:
23:d3:57:3c:e5:e8:be:60:e9:8b:64:bb:ed:f7:70:96:b3:86:
9b:06:73:0a:12:83:26:32:97:69:dc:6e:33:e8:ae:0c:2c:57:
26:0c:c3:dd:a9:f7:5a:1e:f3:4d:8c:b8:82:ff:c4:49:52:dc:
08:00:e6:36:71:f6:06:c1:d4:43:73:fa:45:d8:23:6b:de:e2:
cc:ff:a2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:19:53 2025 by rpki-client