Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: 7kt26xkR0yZWNGyb8vEnsFFdPclBPt1vikq50Ahet64=
Subject key identifier: 97:62:A7:A6:FD:71:F0:EC:AB:D5:32:9F:57:87:35:3D:EF:BE:7B:08
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 019894B78A700593B822A278AA093DC0A286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 16:01:53 +0000
Manifest this update: Sun 10 Aug 2025 16:01:53 +0000
Manifest next update: Mon 11 Aug 2025 16:01:53 +0000
Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=)
2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: VlvYqAGYK40dof1IZDPKY739K3fAZQepGUfG6lCe4Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b7:8a:70:05:93:b8:22:a2:78:aa:09:3d:c0:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Aug 10 16:01:53 2025 GMT
Not After : Aug 11 16:01:53 2025 GMT
Subject: CN=9762a7a6fd71f0ecabd5329f5787353defbe7b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:ff:6c:e2:d7:b6:6e:8a:a2:9e:6d:1e:9c:
3b:96:4e:60:be:99:22:33:85:b3:91:24:fd:c0:7f:
2d:3e:fa:78:a0:94:66:61:7d:43:96:64:ab:a5:b8:
11:cb:5b:52:da:2f:b5:ff:dd:62:8e:4a:a4:a3:01:
5d:a3:10:45:9b:03:55:73:49:b3:29:58:da:bf:94:
3a:ef:fd:d5:48:7b:8e:43:49:71:19:9b:87:c8:89:
79:f7:56:d1:79:67:08:2a:94:d4:9c:68:53:1b:ad:
9f:fa:6c:3a:ef:95:7c:f6:6a:e1:f8:d2:34:ad:41:
c0:41:80:78:89:15:0a:99:73:3d:59:bb:37:d4:86:
b6:81:1d:e4:db:19:dd:c5:26:09:17:90:56:16:f9:
60:ec:5c:1f:51:27:e5:89:a3:c7:e4:39:72:52:6e:
79:87:af:a8:25:9b:42:08:e7:62:b7:40:3f:93:8f:
07:cf:3b:30:3d:78:7f:47:51:0d:bc:7c:0b:0b:97:
ba:ad:60:fd:27:de:40:57:e2:2d:30:48:74:6d:5f:
e2:8a:e2:42:06:a6:df:4e:e8:85:ad:96:c4:06:89:
5a:0a:9c:6a:44:f7:dc:60:ab:f1:12:30:3e:76:26:
56:09:b4:db:82:d7:22:5e:08:30:5a:a7:d2:92:87:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:62:A7:A6:FD:71:F0:EC:AB:D5:32:9F:57:87:35:3D:EF:BE:7B:08
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:75:b2:31:60:ab:db:44:df:33:25:85:23:8f:d9:75:ee:12:
0b:bd:43:55:4c:11:ad:b4:01:86:29:7a:f7:50:d3:7e:26:de:
10:d5:65:01:68:55:1b:65:34:9f:7f:be:82:68:da:23:ad:84:
d2:4f:65:2c:ca:95:7a:ad:28:bd:2a:4f:8b:1d:09:9f:23:44:
a8:85:8e:c6:b8:cf:e5:06:f4:96:d2:f5:99:3a:6f:17:0f:85:
9e:f5:33:32:9e:99:9a:bd:1c:5a:ae:81:06:86:66:07:3a:a6:
a6:16:84:6b:1e:cf:54:15:b2:1a:00:51:06:0c:36:25:9c:52:
e6:f2:9f:f1:d1:b7:91:51:b0:46:7b:19:1d:b7:d8:bd:fc:a8:
53:40:c2:62:4c:e1:d0:f3:02:2a:19:91:b3:15:f0:a9:77:11:
51:07:47:78:04:f0:2b:1f:06:0a:d0:38:f6:53:f7:3e:97:f5:
98:83:df:96:cc:26:57:2c:de:a0:34:67:0b:bb:90:a1:10:2b:
99:b0:ca:71:cb:b9:b1:61:b2:4b:37:8f:89:19:af:37:e3:fc:
7c:b2:2e:6d:a5:c8:36:fe:d8:9b:75:ee:58:47:f9:00:f1:da:
31:65:4a:44:55:20:11:b4:1f:c9:1b:d0:b4:ce:d2:80:e5:b3:
ba:52:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:12 2025 by rpki-client