Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
File: qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft (raw, json)
Hash identifier: rMlaOWbUFZ95FlJIxgIOU6gLQ86/RMOOlnnf9Y3spy4=
Subject key identifier: 22:2B:7E:AD:13:86:F2:EE:ED:0F:98:D5:73:0E:1A:1A:0D:65:C1:A6
Authority key identifier: A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
Certificate issuer: /CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Certificate serial: 019918AD46E46E7C664459AC1D8C82053B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
Manifest number: 03E1
Signing time: Fri 05 Sep 2025 07:00:32 +0000
Manifest this update: Fri 05 Sep 2025 07:00:32 +0000
Manifest next update: Sat 06 Sep 2025 07:00:32 +0000
Files and hashes: 1: YnK9gT6S7S0RgJeRsD04H4ISSzM.roa (hash: DtfDFV6FFewqe27Bp/4vezKhP0+2FJRS8CYQqbxzDS4=)
2: qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl (hash: bIxSWzOSrJtemNOVMtEnAjdWvxjsFginRsm1T1vZW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:ad:46:e4:6e:7c:66:44:59:ac:1d:8c:82:05:3b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8032f57a6119b692a2b8f142ce494ec08b1fcd8
Validity
Not Before: Sep 5 07:00:32 2025 GMT
Not After : Sep 6 07:00:32 2025 GMT
Subject: CN=222b7ead1386f2eeed0f98d5730e1a1a0d65c1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:1a:db:46:8d:8a:48:55:a1:58:b0:21:b2:
bb:86:28:00:a1:f4:53:fa:18:71:2b:a7:8f:05:83:
ae:14:94:3d:f8:b9:0e:a9:eb:34:5d:7d:19:4f:31:
b2:41:63:21:c3:4c:50:ae:33:03:fc:19:78:e6:a7:
71:ff:c1:52:f2:17:6c:63:2f:70:de:e8:bb:bf:dc:
43:03:37:83:02:87:23:6d:2f:7f:21:68:b2:c0:eb:
04:23:28:a1:a1:82:66:a6:36:e8:3d:52:70:fe:b1:
63:0c:83:9b:e8:fd:ec:0f:c5:2f:bd:f6:70:2e:6d:
a3:9a:cb:1b:78:66:37:31:ac:0d:56:b2:22:2c:94:
eb:36:51:1d:23:39:2b:91:05:a9:3d:f9:d7:94:73:
db:17:b7:a6:cc:d7:25:c4:24:c6:f1:e6:23:19:d5:
33:bd:88:14:0a:89:f7:2d:04:db:e0:8c:e5:d3:e8:
22:81:ba:07:af:b0:48:ec:b9:e5:5b:40:ae:01:3a:
4d:02:29:7e:44:f3:fa:6b:fa:54:f3:eb:26:95:7c:
cb:c3:f5:e7:2e:9b:b7:a6:cf:29:78:3f:48:52:9e:
cf:1c:f1:87:46:24:8d:59:bc:18:d0:59:ef:76:49:
20:49:fd:6d:bf:b5:18:34:15:c9:35:3d:54:fd:59:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:7E:AD:13:86:F2:EE:ED:0F:98:D5:73:0E:1A:1A:0D:65:C1:A6
X509v3 Authority Key Identifier:
keyid:A8:03:2F:57:A6:11:9B:69:2A:2B:8F:14:2C:E4:94:EC:08:B1:FC:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAMvV6YRm2kqK48ULOSU7Aix_Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c646e8-bb6d-4862-b9ad-fc779b0d9eed/1/qAMvV6YRm2kqK48ULOSU7Aix_Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8f:5b:d3:a3:00:dd:f5:3b:a1:da:ff:97:c2:ef:22:5b:9c:
59:ed:cf:88:5e:54:29:8e:03:6b:f5:e7:f1:5b:2f:ef:9d:0a:
3f:dd:36:1c:37:30:3e:66:8c:56:0b:43:f9:ea:b6:ce:44:4f:
68:9f:f8:79:e5:8c:47:b3:a6:58:ad:37:06:d1:18:81:e6:d6:
85:ed:7a:a9:35:11:f1:7b:f4:d2:56:d7:3b:e9:2f:f8:01:5e:
6d:bb:35:f1:84:a3:6b:8a:2a:4f:4e:d1:8d:88:9d:34:16:05:
db:59:0c:87:2a:de:e8:dc:92:9b:65:24:e0:2d:b8:b8:3a:98:
90:5d:ba:ea:e4:eb:b8:f3:c9:6a:34:3a:c6:5f:c8:6f:c5:d3:
67:fb:45:df:c4:29:af:10:cb:fe:31:53:09:8d:2f:c1:41:48:
30:a1:cd:ef:de:e0:d7:d5:00:b6:89:e2:b7:3e:35:88:41:4f:
6a:88:82:51:9e:71:4e:b0:c7:90:ee:53:24:17:fa:ea:72:23:
3f:6c:9a:c6:fd:d3:d7:21:68:b4:48:c2:1e:66:11:99:b4:ee:
52:0d:bc:97:52:5a:12:a9:5f:d6:a4:b0:60:3f:d3:90:ce:28:
4b:b6:27:b7:bf:82:71:be:df:9e:b3:c5:d7:5c:71:e3:c8:9a:
75:f5:b8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:52:03 2025 by rpki-client