Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: POwjahRzgdwu5rb1vFe+R42mRpTRDs16RytFuHyFHmA=
Subject key identifier: A4:AD:97:8E:78:51:D7:EC:01:D5:6A:7D:5F:9D:A9:CC:66:24:59:32
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 01991EE66BE209DA70BE1C13304252F86024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: B7
Signing time: Sat 06 Sep 2025 12:00:41 +0000
Manifest this update: Sat 06 Sep 2025 12:00:41 +0000
Manifest next update: Sun 07 Sep 2025 12:00:41 +0000
Files and hashes: 1: FeEiiWjAdJKymNjox7n7zCUc9Wk.roa (hash: dzt2dxmN6m2Hyo/H9hlkWWL7XeHHBgERvBsbJJztvYI=)
2: XBjHbo-JikUirnDC9mDO-NUnYF0.roa (hash: Kq6nw7oAp8kgVGJWvOFausntjkcQVXP1uvqCb3Bz6XI=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: HWSuI/g+ZrXQ4mGLJdvVmmNrMYpeR6SZ1QsXNjz7sTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1e:e6:6b:e2:09:da:70:be:1c:13:30:42:52:f8:60:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Sep 6 12:00:41 2025 GMT
Not After : Sep 7 12:00:41 2025 GMT
Subject: CN=a4ad978e7851d7ec01d56a7d5f9da9cc66245932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:bd:c7:ef:86:16:cc:26:9c:5d:af:cc:8a:
9b:f0:3f:a0:28:fa:cb:61:67:1c:87:35:5b:66:67:
9e:b6:0e:19:02:28:08:4c:af:d7:ea:a4:2c:2f:ca:
00:1d:77:21:11:2a:4f:3c:75:7f:a7:fd:5d:c8:ce:
6a:26:0b:0e:0f:d7:d9:d5:67:03:7c:38:c8:d1:c6:
a4:8c:8d:10:c6:93:9e:97:8e:85:c9:92:d1:c6:06:
42:e2:f1:51:97:a5:ea:ac:75:33:bf:ba:b1:1b:3c:
7b:2d:0c:8c:60:54:ba:7b:fa:06:dc:59:46:8b:dc:
d3:ab:3c:94:2a:c2:39:ae:cd:e7:33:60:46:7c:29:
8f:b3:d1:4b:b5:9f:db:40:03:90:ce:80:2a:7d:a5:
11:93:39:f1:5b:57:50:3c:60:22:7e:06:37:0e:c8:
b0:a9:44:18:f4:66:12:7a:db:e6:90:28:de:6d:a7:
9b:25:cd:64:8c:46:f8:02:bb:9f:35:7e:43:88:44:
29:22:6e:21:9d:3f:e6:10:c1:61:eb:f2:c9:4e:4c:
2c:52:aa:5a:fe:c9:b5:df:31:0a:ac:77:52:76:f8:
4d:40:49:52:ee:73:de:45:d9:17:22:0e:9d:47:73:
5f:d6:f4:ce:1e:62:21:7c:62:ac:50:b7:ba:bd:eb:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AD:97:8E:78:51:D7:EC:01:D5:6A:7D:5F:9D:A9:CC:66:24:59:32
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:64:c5:9f:34:82:4b:f8:99:e1:e3:a7:27:76:61:8b:57:40:
29:d9:d2:46:ae:74:3a:14:d1:35:56:d1:a2:ca:d2:ee:89:aa:
e0:9f:b6:75:27:f2:ba:29:9f:0c:87:2c:3b:16:e8:94:d4:51:
d3:ed:e6:ad:6e:bf:e0:6b:da:e6:a6:ef:1f:c1:06:c4:ae:f8:
c3:97:0c:ae:42:2a:af:15:f8:21:28:dc:38:b8:92:47:49:b7:
d1:26:ad:88:14:4d:18:e1:33:45:3f:ed:5d:34:62:51:c8:bd:
05:1b:7c:0e:a9:2e:92:4a:40:82:13:1d:f9:db:9e:ef:26:ba:
35:74:dd:c3:e2:30:f0:7e:dc:d7:ab:cf:e3:30:33:f5:d1:1b:
c0:a3:90:e9:d9:15:b2:49:fa:36:3b:a5:e4:86:2b:0a:93:81:
47:19:f7:2e:b0:68:3e:bc:3a:b7:25:2c:cd:ed:1b:dc:3b:cd:
ce:7d:38:94:24:8f:63:01:b9:78:8e:7f:bf:64:c9:b5:8e:04:
98:89:ed:59:d5:e6:41:dd:ee:48:a5:cc:03:32:e1:6e:17:4d:
19:38:b1:02:1c:10:50:14:59:fd:38:99:ce:0c:eb:9c:cd:24:
ec:c5:a6:8f:94:64:57:2d:f9:42:a1:86:e0:e2:17:cb:55:ba:
ae:b4:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:25:53 2025 by rpki-client