Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: ZbiXkUBpV1O+ogLIzVHhYsUldn4sZ5zhkbp8k977eFI=
Subject key identifier: 3E:C8:ED:20:4D:7F:3F:93:10:58:6C:9E:5F:35:D4:9B:9A:05:BC:84
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019921E7AA6992B735AF8B9D4E3BE50ED171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0DEC
Signing time: Sun 07 Sep 2025 02:00:54 +0000
Manifest this update: Sun 07 Sep 2025 02:00:54 +0000
Manifest next update: Mon 08 Sep 2025 02:00:54 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: QfawgH2EVvKcf4FZY3wb4ZP8q0Us1/n8EE4VIhUX+2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:aa:69:92:b7:35:af:8b:9d:4e:3b:e5:0e:d1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Sep 7 02:00:54 2025 GMT
Not After : Sep 8 02:00:54 2025 GMT
Subject: CN=3ec8ed204d7f3f9310586c9e5f35d49b9a05bc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:78:53:ad:63:34:00:b6:dc:ce:82:79:55:
56:79:3c:88:00:49:30:c4:8c:80:db:4a:4b:02:8f:
2e:7f:f9:27:6b:06:b7:3c:7e:48:d7:35:6b:67:bb:
4e:e2:98:18:bd:c4:85:b4:fd:3e:88:aa:8a:b8:6a:
c5:73:ce:10:11:53:64:bc:78:52:92:06:e7:e6:6b:
ad:33:c3:ca:53:38:45:e9:9f:e4:57:e3:e0:03:9e:
f7:81:b7:41:8b:26:2b:15:b6:70:d6:c3:f5:aa:b4:
9b:dc:ae:9c:a6:10:ce:45:33:5d:f7:ab:35:d9:04:
c5:86:87:62:21:44:38:0d:f1:9d:50:fe:1c:5d:d2:
76:79:90:1a:c4:e1:aa:69:07:d8:59:e7:3d:f0:ee:
74:30:64:cb:fb:41:32:a5:ab:8a:3c:aa:1c:76:fa:
ce:c3:f1:54:21:d8:81:0f:a4:65:9b:8b:54:78:b1:
df:bb:40:b8:35:5a:05:ab:5b:18:47:c2:27:fe:1f:
39:2b:82:57:3f:08:16:0f:9d:ca:0d:b3:01:09:f6:
ba:53:7d:b3:9c:23:ce:4e:4c:ec:68:05:91:07:c5:
83:7e:e9:72:ab:7a:54:1c:4b:ec:ad:b3:ad:b7:9d:
93:d0:d1:b1:16:ef:bb:e1:2d:85:96:55:08:2e:23:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:ED:20:4D:7F:3F:93:10:58:6C:9E:5F:35:D4:9B:9A:05:BC:84
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:23:73:26:d8:b0:f4:33:66:c4:12:c4:0f:2d:6b:8d:fd:dd:
88:09:8a:6e:c4:48:45:9c:68:e6:af:42:0f:dd:7a:77:49:99:
b7:b0:0c:33:ca:89:f5:c2:d5:ac:0e:2a:b7:ec:ae:53:ad:34:
55:01:b8:af:b4:2c:d9:05:77:54:88:20:61:f1:d2:d0:ae:5c:
c4:a3:26:20:2f:af:18:72:88:fa:eb:21:d9:b5:35:07:b4:b3:
91:44:ae:c5:ad:82:a7:a2:69:3c:2e:26:5c:f8:a9:c6:40:3e:
39:5b:d3:5b:c8:a0:03:c4:3d:39:56:fc:07:45:5d:e2:6d:fe:
92:77:bf:10:99:6d:c5:05:6d:f7:7c:d4:ed:d7:54:0c:f8:cd:
21:d5:b3:42:fa:ab:98:6d:8c:21:b3:c2:a1:38:15:38:1c:aa:
c9:92:cc:43:a0:3a:eb:2d:28:09:66:0c:4f:c1:c5:df:f1:ca:
47:5a:7f:ce:9c:3f:e8:6a:58:21:9a:aa:a0:ea:82:49:a7:ef:
92:c7:ca:bc:fb:f9:ee:04:a8:0b:13:b7:9f:11:25:74:f7:40:
bf:a2:ab:fc:0b:56:c7:97:28:e6:14:4b:57:66:f3:f5:d7:59:
94:1f:7c:8f:fb:a5:9a:1c:c6:f2:38:d1:42:f6:89:fd:d7:a7:
77:2e:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:40 2025 by rpki-client