Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: kNYleY89tbqiVBNPCkJwugufpIlA1ghPCtnPRbBb6Mg=
Subject key identifier: 4E:9E:F9:60:6D:1C:ED:D8:62:94:93:D4:CA:E4:B9:F9:4B:53:23:F9
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 0198CB01C0AD9323FFCA3321DCAF1A87AC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 11
Signing time: Thu 21 Aug 2025 05:02:26 +0000
Manifest this update: Thu 21 Aug 2025 05:02:26 +0000
Manifest next update: Fri 22 Aug 2025 05:02:26 +0000
Files and hashes: 1: 6-EX2htJlHImEHBSvQOybhHaeO0.roa (hash: 1ZsDmzKZ+zRhoeIFPi5/Pw5pQ/dfpTV0ipC/YNmanno=)
2: fl64q3w812YfzXLS36kYEo550Os.roa (hash: FCrMbgS1Qp2Ghje1H1/gJu/F21+3Pg9qcnIqWk+O48U=)
3: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: RieUp5Ba1XG8/WEyv8qe/0I8v/2v+WE5Nft7+myJJDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 05:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:01:c0:ad:93:23:ff:ca:33:21:dc:af:1a:87:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Aug 21 05:02:26 2025 GMT
Not After : Aug 22 05:02:26 2025 GMT
Subject: CN=4e9ef9606d1cedd8629493d4cae4b9f94b5323f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:f9:65:fe:97:ac:84:01:4b:e0:78:e4:c3:
9a:ed:5d:e8:4f:4a:07:60:bd:22:1c:d8:1e:45:b6:
72:b8:64:21:ae:cc:b2:49:2d:50:cb:ec:49:67:35:
46:e3:43:85:8f:09:47:bb:bd:20:d5:3e:1f:91:db:
b0:ce:48:42:18:d4:80:7e:d6:aa:a3:8f:11:42:c3:
bc:18:86:a8:08:94:76:58:6a:11:30:cc:e3:00:84:
cc:a9:32:08:1a:62:1d:db:e0:6a:10:81:8c:d2:fa:
7b:05:10:63:67:49:a8:4a:5e:f4:b4:76:82:ea:67:
94:47:7c:23:2b:97:76:f4:96:8e:40:b7:f4:54:7a:
46:ba:88:53:05:26:dc:67:1c:f4:d8:d1:6c:90:5f:
b0:f1:df:a3:03:73:52:9c:a1:5e:8a:80:67:80:10:
0c:5d:0b:cf:8e:f5:78:13:d8:06:06:b6:4b:72:3d:
7e:c3:f3:7a:34:10:4d:6d:78:0f:18:a7:73:7f:5b:
48:74:0e:52:13:d7:81:2c:af:93:4d:cc:27:fd:44:
1e:da:d5:1d:56:a2:20:d7:13:0d:ff:de:82:10:cb:
ad:22:49:d5:2a:d8:aa:07:2d:bc:9e:b3:2e:cc:39:
f8:a9:1b:3f:76:9e:ee:a5:a4:b7:69:d7:bf:3d:58:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:F9:60:6D:1C:ED:D8:62:94:93:D4:CA:E4:B9:F9:4B:53:23:F9
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6c:5e:1b:7f:5f:50:0f:68:e0:7f:66:10:b2:c7:7c:db:0b:
d3:4f:06:34:fe:48:02:ee:42:05:26:69:78:ca:12:74:8d:46:
63:98:66:70:6b:1c:d0:b9:e0:dd:93:c4:9b:9b:c9:6d:d2:64:
c9:c6:59:b7:79:f6:32:b3:04:43:5f:ad:9e:f7:b4:11:42:e3:
c2:ca:f2:0a:91:bf:6d:db:83:42:03:67:f8:6d:fc:10:03:e6:
dd:69:90:f8:7c:9f:4b:d6:0c:88:95:cf:55:62:52:b0:8c:91:
83:c6:f6:2c:d7:f8:98:3d:49:4c:aa:3c:50:c0:45:53:82:c3:
d7:8b:bf:6f:7a:6c:26:cf:31:d4:47:46:e6:f4:06:24:1e:df:
40:a8:f3:03:c8:d1:66:08:09:bb:aa:30:b7:1f:57:e3:ba:b2:
2f:d2:4a:ca:81:7b:4a:06:a6:9d:0a:c7:ec:ac:a4:be:74:1d:
e9:aa:a0:45:71:0a:25:7f:b9:7a:af:eb:75:7a:d3:b7:10:3e:
ce:1b:bc:bc:f0:0d:c6:41:53:b6:7a:d7:5c:01:d1:00:9e:26:
71:43:6b:3a:05:da:fb:18:eb:19:28:46:1e:78:e3:03:2f:81:
05:c8:19:d7:eb:78:5f:0b:0a:f5:52:a6:d6:e9:61:53:dc:e2:
b4:a9:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 14:47:23 2025 by rpki-client