Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
File: qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft (raw, json)
Hash identifier: BfoVwkXcxKtG7zwT7nCaXalWhPDNNIewxpNxklRXw9Y=
Subject key identifier: 02:FF:01:19:34:F4:1C:39:77:B7:DD:7B:B7:83:D0:09:8C:73:3C:96
Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Certificate serial: 0198C64916F68F3B6927E1F5BB34C195D28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
Manifest number: 15E2
Signing time: Wed 20 Aug 2025 07:02:14 +0000
Manifest this update: Wed 20 Aug 2025 07:02:14 +0000
Manifest next update: Thu 21 Aug 2025 07:02:14 +0000
Files and hashes: 1: F-LIYuBdyXdsWgfHqfWysJKiWXU.roa (hash: VqoafOC7jzXc0AkcNCpssMEPfK7J5Kse2STPQ5Iw9TU=)
2: RHzpUiuiNY0XEXcS875xUQAmg2o.roa (hash: 6vPYA2Rs4cYHy6RhBB/Rp48XNVrguqaU80TWpEOz0XU=)
3: qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl (hash: zEaAhbJWrHCFUZ3uV9Lkcd0wJysjssjJgSVoNPLqJFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:16:f6:8f:3b:69:27:e1:f5:bb:34:c1:95:d2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6
Validity
Not Before: Aug 20 07:02:14 2025 GMT
Not After : Aug 21 07:02:14 2025 GMT
Subject: CN=02ff011934f41c3977b7dd7bb783d0098c733c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:e1:aa:44:4f:1d:c9:d4:d1:36:b2:21:87:
51:3a:11:75:e3:53:fb:5c:4a:b6:80:59:0f:70:8c:
6a:a0:d7:04:75:b8:0a:ee:90:6c:dc:10:03:49:f9:
46:d0:07:3e:4e:9e:06:f0:df:58:82:0e:f1:ed:fe:
f5:ec:56:09:11:cd:a0:e8:65:e8:99:76:1d:da:7e:
77:d5:50:a0:2f:48:24:48:58:22:5f:97:03:41:1a:
78:ec:71:02:69:d3:cc:fe:6e:d6:27:d2:94:80:01:
3a:70:f4:29:9c:ca:8a:d3:60:3e:d3:8d:50:97:0d:
ce:e1:be:0b:2d:04:47:7f:66:c0:a3:aa:db:dd:0a:
be:bd:26:8e:79:fb:31:0b:39:94:62:9e:d4:41:be:
01:21:01:36:a2:ac:d2:31:73:0a:9f:6e:49:0f:e1:
f4:bd:42:4a:7c:8b:e0:ac:45:8c:11:d5:6e:e9:c7:
84:8d:91:8e:2b:b7:5b:1c:ff:4d:57:68:e0:3f:4b:
d3:3d:4f:78:48:a4:28:b0:74:0d:ad:ed:dc:20:fd:
ee:e3:49:72:c7:06:25:79:2b:a3:a5:f4:fc:b4:15:
3d:fe:e2:27:da:2e:95:3a:03:72:ee:1d:40:7e:89:
82:47:39:01:67:7f:eb:b0:22:9e:da:fb:ab:79:db:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FF:01:19:34:F4:1C:39:77:B7:DD:7B:B7:83:D0:09:8C:73:3C:96
X509v3 Authority Key Identifier:
keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fe:ff:6a:a7:f9:95:47:40:9a:a7:40:3d:e0:3d:b4:98:86:
e3:c2:7d:d0:60:d9:02:35:15:93:f1:20:04:01:49:1c:36:f7:
41:58:b6:ee:38:99:bb:0a:b7:b3:20:f3:8f:e2:e5:d3:e1:7c:
7f:7d:18:cf:1f:65:79:8a:f4:a6:6c:81:ee:b5:a3:3d:cc:0e:
7a:41:6c:f2:3f:51:30:7e:fd:a1:5e:12:5b:e3:a1:f5:7d:e7:
ca:40:91:97:0b:e5:29:88:65:b4:e0:70:5c:67:27:da:49:0a:
fd:0f:df:34:bc:59:eb:96:dd:eb:2d:1b:a6:00:5e:44:7a:bc:
2f:1e:dd:03:76:87:5c:26:51:aa:be:04:b6:ad:3c:6f:39:5f:
2f:d9:ac:14:1f:b5:2b:35:7b:40:ec:ae:22:5c:84:37:63:d4:
86:3c:a6:a0:49:6e:7f:7c:30:31:91:44:a2:34:c1:16:ef:1b:
6a:54:ee:10:cb:01:f8:24:b6:36:22:3b:fa:4a:fc:45:a1:e5:
35:cd:ae:cd:c6:88:28:ae:f6:62:2f:9f:6e:df:3c:c6:72:4b:
35:b8:2a:da:90:89:e6:19:5b:cd:72:c1:2d:d2:90:64:15:90:
c3:47:8f:9f:a1:f1:0d:ad:ea:75:f9:fb:59:2a:41:06:b4:87:
55:a7:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:26:08 2025 by rpki-client