Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
File: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft (raw, json)
Hash identifier: IgA73ZbZwsj6AszBHUw7mxih+xFyAn2IJMAWINSds4Q=
Subject key identifier: 2A:B1:98:1F:E9:C8:1F:46:F4:69:DB:A4:3C:26:CF:B4:20:F2:FD:87
Authority key identifier: 46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
Certificate issuer: /CN=46aa60676c130c6438e45b5a607210e9566b6832
Certificate serial: 0199221F248908B918F8A4874472133B7A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
Manifest number: 038A
Signing time: Sun 07 Sep 2025 03:01:30 +0000
Manifest this update: Sun 07 Sep 2025 03:01:30 +0000
Manifest next update: Mon 08 Sep 2025 03:01:30 +0000
Files and hashes: 1: 4pIrmmCZWAO8NuTmun2AQKQETQo.roa (hash: Pf6nhAI8L5UL8XOlhvccLv1CzKTIGW/DapLLMv9479I=)
2: RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl (hash: Drxv8AaivPri4X9jR4++KkC4/UzTST0cmwkjuG3tuKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:24:89:08:b9:18:f8:a4:87:44:72:13:3b:7a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46aa60676c130c6438e45b5a607210e9566b6832
Validity
Not Before: Sep 7 03:01:30 2025 GMT
Not After : Sep 8 03:01:30 2025 GMT
Subject: CN=2ab1981fe9c81f46f469dba43c26cfb420f2fd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:23:a5:b1:b1:60:c5:50:fb:fe:c3:93:4d:
cc:ae:2f:ca:ff:a9:f4:9b:55:ea:d1:94:0e:ed:3d:
a6:31:55:f1:bd:25:ff:38:6f:3b:b6:0b:89:b1:68:
60:84:37:04:a5:92:a7:f3:8f:75:05:9e:bd:2b:7f:
04:f9:e0:a6:e1:a2:bf:ca:7d:e3:a3:ca:2c:14:43:
44:16:07:31:b6:78:6a:cd:1c:52:80:5c:de:a3:b5:
18:ee:3a:92:8c:f7:7f:f0:3e:37:79:85:72:6f:fa:
37:bb:4e:04:be:25:9a:a4:ee:fb:87:a1:d3:f8:1d:
45:61:15:a6:b5:17:97:39:cb:a4:a0:05:fa:ff:45:
da:57:8f:c6:d4:fa:6b:70:f4:44:7b:3a:83:7e:e4:
af:8d:7b:17:4b:cb:24:4e:bc:4f:cd:bb:7a:bc:14:
2b:ad:dc:39:15:0d:f4:11:51:91:0c:ba:56:60:16:
28:8c:0c:69:fe:6b:4a:15:7a:20:5c:98:79:9f:c1:
3e:17:f9:3d:46:12:4f:a2:1e:ed:4e:c2:2f:ec:0e:
72:17:75:9f:d5:82:d2:3c:be:07:12:e6:89:70:3b:
ce:2e:af:9e:09:58:3f:9f:1b:e9:2c:5c:3e:9a:8e:
23:f8:fb:26:aa:83:5b:c8:ed:1d:c6:a0:42:4f:cc:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:98:1F:E9:C8:1F:46:F4:69:DB:A4:3C:26:CF:B4:20:F2:FD:87
X509v3 Authority Key Identifier:
keyid:46:AA:60:67:6C:13:0C:64:38:E4:5B:5A:60:72:10:E9:56:6B:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/1721d8-aa46-4faa-ae15-c5e32c8272d7/1/RqpgZ2wTDGQ45FtaYHIQ6VZraDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:01:f4:52:1e:25:f2:1e:e6:e6:5d:3e:9f:c5:9a:fd:78:8f:
43:9e:d6:85:a7:0a:dd:1b:e2:cb:2b:f0:76:b4:35:e8:e4:48:
c6:b9:cd:ce:17:52:ca:0b:9f:f8:94:a9:56:44:42:f9:31:22:
fc:ab:71:f5:4f:ea:2a:e5:36:50:48:6c:85:ff:85:c4:d4:50:
4c:02:d3:84:ab:d9:40:68:78:e2:f1:a4:89:d7:63:24:49:b7:
c8:00:6e:4f:98:fa:64:3b:e1:23:b8:d1:09:45:c5:b5:38:38:
67:f9:bc:64:52:a5:b2:bb:11:ea:64:d7:d3:14:03:3b:8e:ce:
3d:1e:27:42:8a:84:13:99:35:1d:9d:40:f2:3c:f8:39:04:99:
20:fc:ba:d7:62:6f:2b:37:ea:9b:ea:09:e6:af:15:89:bf:04:
b9:e3:76:25:e1:7d:08:8d:47:b3:41:e5:50:4c:85:41:3d:4d:
04:60:0c:ab:ab:23:de:5a:ca:10:d2:ba:e4:bc:b8:0d:d1:78:
54:a7:14:51:67:ff:5d:a4:93:ba:9d:f3:9e:81:20:f5:fd:ac:
bc:4e:0f:36:07:3c:84:f8:10:93:f4:74:cd:3d:18:8a:54:95:
27:2e:fe:ee:96:bc:d6:ee:c0:8d:13:1d:82:81:f5:c8:8d:cc:
c5:8e:67:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:32 2025 by rpki-client