Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: roo9qvNYNe8pwWQUya8J6QNAP2V7dX8UuBWTch3vOGo=
Subject key identifier: F5:D4:5E:B1:31:0E:E6:D0:15:DC:75:AC:81:8C:C8:99:5A:E6:E2:C7
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 019881673C16FA1F9EEE96C584042A6EDB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 22:01:22 +0000
Manifest this update: Wed 06 Aug 2025 22:01:22 +0000
Manifest next update: Thu 07 Aug 2025 22:01:22 +0000
Files and hashes: 1: 6fJ4zkF0Wp752Gh82PiGV0cycFs.roa (hash: zmN/ZdPf9fmMKW0I3LZoD4w3jrap740/mP6rHx2Dkzc=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: sOdxzdS8h1PXM9Zub0Rg2uFjGA5E0UmTX7eTg72xYPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:3c:16:fa:1f:9e:ee:96:c5:84:04:2a:6e:db:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Aug 6 22:01:22 2025 GMT
Not After : Aug 7 22:01:22 2025 GMT
Subject: CN=f5d45eb1310ee6d015dc75ac818cc8995ae6e2c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cc:a7:c8:6a:75:ef:5c:74:ec:8b:0c:5c:0f:
2d:c2:b9:1f:78:c8:ba:b6:6f:aa:22:76:d6:09:97:
04:04:f6:fc:20:3c:77:4a:73:00:4c:b4:d3:76:29:
0a:69:52:91:2b:7f:f1:78:16:92:39:19:c8:0c:f8:
3d:67:7a:80:d6:10:ec:a2:20:99:31:3c:18:fd:07:
37:e2:2e:fe:bd:df:2f:0f:d9:7d:1d:31:34:04:4b:
d8:8d:cd:86:4b:f4:17:2d:b0:31:28:9b:29:0d:45:
0d:7d:88:8c:15:b0:17:32:48:0c:4c:ba:e1:c3:4d:
92:c2:69:29:94:9d:00:de:a5:a4:6e:f4:05:e8:10:
60:6a:c4:1c:58:6d:2e:71:ab:a4:9f:36:0d:9d:19:
05:8c:e8:cc:0d:2d:63:0c:e5:d7:66:7c:e9:df:8a:
52:e3:2d:e3:f6:5b:68:b0:f9:21:a8:0b:1c:09:0c:
46:c4:51:28:79:5c:ad:10:d5:ba:8b:68:9a:9b:dd:
8b:0a:e3:05:c3:06:e6:08:5c:5b:15:91:17:7d:a9:
c6:0c:73:11:e2:d1:20:a5:a0:53:05:78:16:e9:61:
fa:33:c3:56:33:82:93:99:e9:68:ee:d3:1f:d2:45:
27:0e:06:c8:56:cb:ec:71:bd:56:79:00:c1:16:72:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D4:5E:B1:31:0E:E6:D0:15:DC:75:AC:81:8C:C8:99:5A:E6:E2:C7
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ac:d2:40:b3:cc:7a:87:dc:03:fe:3a:b6:ee:4a:bd:b8:08:
f1:31:7d:3c:ec:21:db:c1:a2:63:ff:1a:21:52:b7:65:96:29:
55:39:0d:5f:d7:35:d1:28:51:7a:1a:fc:83:ff:97:f7:ac:92:
64:70:cb:98:b7:79:e6:2f:dc:01:c3:cd:c4:47:87:60:4b:72:
af:25:ac:6f:d7:c2:83:e6:e8:e4:ec:08:94:c7:82:a5:03:0b:
24:da:e0:83:6e:98:9b:1a:af:9a:a1:b7:a0:cc:b9:bc:78:95:
87:6b:ab:f6:a0:4c:18:0c:37:f2:03:43:15:7f:b5:5f:27:5f:
a8:fd:98:ef:2f:94:3d:d6:35:cc:5d:8d:cb:6e:2f:ee:91:8b:
01:37:26:88:91:71:c7:fd:59:6e:94:01:e0:ee:74:eb:ae:d6:
ab:a0:b6:79:41:d7:a0:88:41:6a:25:2d:e9:b0:a6:60:c5:fb:
8d:78:c3:b7:8e:d5:1c:73:09:1e:56:0a:4f:b6:aa:df:0e:5c:
02:50:51:24:b4:01:80:9d:4d:44:c1:ee:4e:a3:4a:af:eb:5a:
c3:8b:bb:48:a9:cd:a7:f3:e2:fa:7f:7d:30:c0:58:86:60:d9:
58:0e:d1:83:f8:65:da:07:13:52:9b:f8:83:51:38:7b:88:71:
37:2d:8f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:44:45 2025 by rpki-client