Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: dYJANRJK7Bwu1WfPExmGLt/45u8+bd/piMLvJ8Msq/Q=
Subject key identifier: 15:8D:95:DD:F8:E6:EF:7C:90:35:8A:38:4F:48:25:77:C2:D9:01:1D
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 0198752BA6FEDF6344C450536A23F9AC2C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 0F1B
Signing time: Mon 04 Aug 2025 13:00:51 +0000
Manifest this update: Mon 04 Aug 2025 13:00:51 +0000
Manifest next update: Tue 05 Aug 2025 13:00:51 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: pcpSGlxQUJIu1/BDjR34mJ0MIhsm01EP7SvUoaQQJY4=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:a6:fe:df:63:44:c4:50:53:6a:23:f9:ac:2c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Aug 4 13:00:51 2025 GMT
Not After : Aug 5 13:00:51 2025 GMT
Subject: CN=158d95ddf8e6ef7c90358a384f482577c2d9011d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:4f:7d:a8:94:ae:13:29:06:71:a3:41:81:
29:e3:d1:1c:6f:34:c4:c2:6a:02:1c:10:8c:78:24:
43:2c:87:d5:76:17:30:7a:0b:5f:6c:9f:46:54:27:
53:b9:7c:5a:af:39:46:c3:56:88:c9:e6:e6:6b:49:
6e:8a:72:88:06:a8:cc:2a:16:b3:70:23:da:39:a2:
71:29:9f:66:b3:63:34:66:ad:39:2b:98:66:29:7c:
bf:52:15:8f:dd:88:45:8a:a1:7e:88:d7:7f:08:68:
dd:2f:43:49:43:6d:b9:d7:f0:61:2e:71:1d:3c:1e:
73:1a:e7:b0:a9:23:4b:ef:42:d8:24:84:c9:b8:5d:
a3:85:21:ac:6c:22:c8:39:f1:c1:c8:a1:59:02:fd:
3d:0c:25:94:bd:7e:76:1c:30:7e:73:d6:d2:5b:05:
08:3a:44:ad:dd:12:34:16:de:e1:0b:23:bc:ac:5b:
77:c6:ce:01:d4:24:6f:04:5a:cf:2a:f9:b3:41:9d:
56:c0:f4:72:24:3b:68:2e:b3:4c:92:04:ec:18:fb:
06:1d:f4:04:26:fb:3a:06:63:8c:b1:d3:68:c5:61:
f4:a5:09:5e:2c:c5:a6:aa:bc:38:9c:a9:77:55:a3:
35:67:2d:15:e1:3d:59:2e:66:84:2a:ab:12:18:3e:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:95:DD:F8:E6:EF:7C:90:35:8A:38:4F:48:25:77:C2:D9:01:1D
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0e:a7:88:61:a4:53:74:8d:2f:53:8a:c4:52:9c:1e:f6:c9:
4f:01:d2:a6:f0:84:3d:58:12:d6:3a:1d:1d:22:4d:52:96:b6:
53:53:92:93:4d:01:21:1b:2d:32:e7:68:e7:0f:61:d2:a7:f9:
c2:1a:9a:ed:da:bc:ee:c0:ff:02:15:e7:22:26:91:cb:db:ba:
de:61:d1:11:dd:04:f1:08:f4:98:4e:32:69:a0:75:42:f2:9f:
37:e7:f7:49:6a:c2:cd:a9:3f:fd:da:62:35:70:2e:92:94:5f:
9d:7f:da:de:d1:12:8f:5e:18:fc:c1:a5:ea:a3:87:9b:28:72:
5e:26:6d:cd:30:66:1a:b1:3c:1c:47:6a:d4:d4:f3:82:fc:25:
e0:c4:1c:17:51:0a:a3:1d:e5:c3:5b:8c:f1:bc:3e:6b:a3:c6:
cb:39:59:99:38:0d:fb:3c:12:62:ce:45:c0:0e:f3:b8:1d:61:
f8:d8:a8:70:d5:73:70:e5:b6:bb:9e:c4:9f:74:12:28:4b:17:
ff:2d:c0:e4:1b:5b:4e:93:27:cb:1e:fa:00:9f:9a:49:30:f8:
50:dc:6f:82:a5:5b:38:4f:51:49:fe:35:44:1c:dd:75:eb:a6:
e1:fd:75:2f:47:4c:be:db:47:ee:27:fb:b9:9c:91:a9:d5:5e:
99:16:08:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:14 2025 by rpki-client