Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: ek5bhsA5O7vI2Cx0t7VasxOrpUQsPCsnFZmwVbO/DAs=
Subject key identifier: 35:97:3B:30:6E:C8:D3:56:25:D7:1E:B0:54:4B:D2:DA:30:5B:EA:DE
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 01987A5208A2090A200196745F61DAEF86A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1620
Signing time: Tue 05 Aug 2025 13:00:52 +0000
Manifest this update: Tue 05 Aug 2025 13:00:52 +0000
Manifest next update: Wed 06 Aug 2025 13:00:52 +0000
Files and hashes: 1: nNICaFb7G3xV0xaZvY4tLFZeqjU.roa (hash: 5uzWSjZq0ATl8Nrn/VGx6JZA+5X6g81sHleJ+o0B2vM=)
2: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: 8Zkqco3AkuFIIk7IDrkYUFRBIMQy2JtJ8rRGWdP7MzY=)
3: vlECbF8HkBG6WpBhMBZnOl_AraI.roa (hash: 3UR9pQsXBE1n+38LaDwJGSYsS95ZptnvsHsDatSDo+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:08:a2:09:0a:20:01:96:74:5f:61:da:ef:86:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Aug 5 13:00:52 2025 GMT
Not After : Aug 6 13:00:52 2025 GMT
Subject: CN=35973b306ec8d35625d71eb0544bd2da305beade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:fa:97:16:a1:1b:f8:c9:54:32:90:17:c6:
66:38:79:89:74:7b:4a:83:4b:1f:cc:ec:ea:3e:25:
a9:24:21:1a:54:2a:b0:a7:9c:3d:78:e9:2c:56:44:
f6:9d:66:f7:98:20:67:d4:19:7e:27:27:f4:c5:96:
20:65:8c:17:ee:ab:11:63:a3:16:28:5e:50:3d:df:
d1:78:ac:d2:c9:45:de:73:47:f0:52:c2:e2:77:83:
5f:d6:51:2b:5b:a8:9e:45:43:55:bf:bc:5a:ea:93:
01:6e:d2:1f:e9:1e:ed:a2:d1:c2:44:d8:10:0c:49:
ea:17:74:3e:da:5e:16:db:33:b0:d6:c8:a8:6a:e7:
26:16:9d:0c:44:a0:72:de:55:50:af:52:d3:43:dc:
34:aa:b8:fe:b2:4d:44:3b:e2:bd:6a:2c:65:e2:68:
c8:31:f6:1e:eb:61:87:e5:24:3f:e4:62:c3:c2:17:
5c:6b:42:45:0f:b1:09:84:d4:06:19:89:07:08:78:
b1:f3:57:73:8e:2d:1a:1e:a0:6c:ad:f6:f2:36:89:
0b:7a:21:7c:6c:67:a8:b9:86:07:04:27:13:bd:d1:
2c:8a:c9:6c:83:33:29:55:56:50:9f:29:68:64:75:
fc:d0:6e:22:73:04:49:31:b4:85:1c:71:c5:13:29:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:97:3B:30:6E:C8:D3:56:25:D7:1E:B0:54:4B:D2:DA:30:5B:EA:DE
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b7:1b:a2:84:16:31:4b:af:e1:fd:01:b6:f4:19:3e:c2:3b:
c6:3e:59:5b:de:e7:3d:fa:a2:c3:18:b8:ca:a4:91:bc:3f:07:
de:17:d4:01:1a:29:c4:43:ba:00:55:27:e3:f5:56:ae:5e:49:
f2:8e:b0:76:42:44:54:ef:7f:4d:30:f5:d0:79:29:5f:06:8b:
74:72:fb:db:41:cd:f5:3c:d1:ab:cd:c5:fd:2e:8f:e4:e2:32:
05:5d:a7:73:06:a4:bd:a3:53:92:6a:05:b7:1b:4d:7c:9d:2b:
6d:c8:60:53:41:00:df:4a:d4:16:19:42:44:08:6e:08:a8:b7:
76:e2:2b:f7:9d:5f:3c:08:8a:25:f0:dc:56:50:2c:94:59:91:
01:8a:77:f8:5c:ee:70:b0:3b:6c:81:46:6c:c5:92:7b:1c:9c:
07:86:d8:49:26:44:a9:6b:93:4b:ea:f9:73:cc:7d:c1:61:ac:
8d:cf:29:76:83:64:3e:fa:fd:b9:7a:84:d4:3e:35:db:47:18:
9d:b6:5e:e8:a6:d0:e6:4e:a3:d2:35:91:0a:4d:1e:45:0e:6a:
4e:d0:5a:e1:ce:38:b2:7b:b1:42:1c:fa:ca:1f:74:30:69:76:
4f:5c:52:7a:2a:01:89:07:6c:85:09:22:fa:76:c2:2e:ee:d6:
88:90:96:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:59 2025 by rpki-client