Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier: nwbhTFUvSwkYfHjc602WNZ/9SOrl1Gpsl3AppeO5XU4=
Subject key identifier: B6:FA:18:88:71:92:03:AA:F7:7A:B5:CD:10:40:91:34:5B:7D:03:81
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial: 019922FA4C6CF5F39478157496A5629F4E87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number: 055D
Signing time: Sun 07 Sep 2025 07:00:52 +0000
Manifest this update: Sun 07 Sep 2025 07:00:52 +0000
Manifest next update: Mon 08 Sep 2025 07:00:52 +0000
Files and hashes: 1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=)
2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: 6nSogNlDj52rfA+BFpuzlTIysQ4CgrhZP4OnOezYEIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:4c:6c:f5:f3:94:78:15:74:96:a5:62:9f:4e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Validity
Not Before: Sep 7 07:00:52 2025 GMT
Not After : Sep 8 07:00:52 2025 GMT
Subject: CN=b6fa1888719203aaf77ab5cd104091345b7d0381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:6d:db:50:17:c6:15:77:cf:ce:1f:5a:95:
14:82:dd:af:b4:d4:3e:a2:74:ce:37:01:cd:f7:80:
ef:46:be:99:c4:3f:7e:db:47:f1:6f:c5:b1:52:71:
f8:bc:05:8b:fb:13:ff:25:09:5e:49:fc:7d:55:f8:
b9:c7:73:1e:0e:22:18:1e:fb:c6:3e:6b:5c:a0:e6:
7a:03:3a:34:21:14:70:f1:b1:d5:70:81:d8:08:20:
fc:fe:21:5d:95:c9:3d:24:6a:42:70:ff:9f:89:7b:
94:91:7d:80:66:06:3c:49:25:c1:22:e5:e5:d0:06:
19:76:9d:b4:c3:54:cb:8c:37:8b:e9:cc:0a:31:9e:
c6:4a:43:57:a4:95:80:f1:6a:74:d1:15:e0:1a:9b:
b2:5e:b5:31:a9:4f:b8:b3:9b:38:f1:6a:43:cd:f4:
b9:8e:43:1c:98:17:67:0e:3a:07:a4:6a:1e:f7:79:
f3:0d:5b:ab:9f:5a:2a:75:7f:63:2a:2c:52:05:4d:
de:e5:57:57:11:18:55:22:2e:4b:80:a9:29:ed:27:
3e:41:15:cd:c7:73:4e:52:4c:e5:71:23:7c:e2:c4:
91:d4:af:d5:10:e1:fc:d9:5d:ce:1c:1a:63:a2:8e:
33:0a:c0:e6:b6:33:e5:9b:c3:6c:5f:07:f4:2a:04:
b8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:FA:18:88:71:92:03:AA:F7:7A:B5:CD:10:40:91:34:5B:7D:03:81
X509v3 Authority Key Identifier:
keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c2:63:9c:e7:9a:b9:58:82:82:47:c8:3f:b4:be:63:11:9a:
cf:42:65:5b:75:49:e5:68:25:08:2f:78:c0:89:8b:1b:4e:f0:
80:a7:53:fa:dd:eb:25:4b:4b:80:82:d1:35:62:bc:ba:7f:96:
1a:58:27:5b:c7:ab:91:92:38:f5:cf:44:5a:0d:b5:e2:16:f4:
29:fb:e0:ef:06:92:4f:ef:93:d0:d9:58:e2:f7:b0:c1:a2:94:
cc:dd:5e:8a:7c:ef:dd:28:e2:2a:96:7e:0d:e6:91:10:23:cd:
08:5b:98:01:a8:da:19:c5:d5:73:4a:55:7e:8a:bc:69:ea:6a:
67:4f:40:2d:c6:e5:24:a0:bb:57:26:01:b6:a1:75:82:de:ea:
14:67:c8:02:37:78:34:e5:7b:f3:8a:ee:a8:fc:17:02:68:fb:
7c:6f:43:dd:ca:e7:21:54:47:e9:c7:e9:61:b3:59:83:33:ec:
e0:c3:2c:77:94:62:5e:59:6b:ea:c5:f6:bf:af:54:7a:67:fc:
51:92:46:e1:4f:eb:b6:8c:7e:a2:1c:c1:e8:1a:21:40:5e:6a:
1f:7d:72:64:e4:52:f4:13:79:20:dd:3c:f4:b0:f8:1e:97:25:
58:94:81:09:1a:e0:b3:2e:f3:53:26:1b:61:ab:ca:41:73:7d:
85:d6:4b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:41 2025 by rpki-client