Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
File: qLq2HDYOoQjNGSx856ftVWW9--A.mft (raw, json)
Hash identifier: tzwKid6wImDiqj3RBsvVw4UQXhIO0To/5YMpdA0DHNA=
Subject key identifier: E3:C0:DE:5C:B8:10:B6:8C:AC:96:DB:03:F3:CA:7D:D9:05:CE:D2:D1
Authority key identifier: A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
Certificate issuer: /CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Certificate serial: 01987450C8F9EFF52112545C73B39F026960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
Manifest number: 0D8D
Signing time: Mon 04 Aug 2025 09:01:47 +0000
Manifest this update: Mon 04 Aug 2025 09:01:47 +0000
Manifest next update: Tue 05 Aug 2025 09:01:47 +0000
Files and hashes: 1: llKmEV0JVzIG0_MZWPlP8ygpeC0.roa (hash: jPaOJ8ND+JyHLtdhEIszWBX4EhT8804ihxPfOvX+M6g=)
2: qLq2HDYOoQjNGSx856ftVWW9--A.crl (hash: hbgdPQkKH8/R3I88lFuNOoVESB9u7N4AqQbvKl/idHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:c8:f9:ef:f5:21:12:54:5c:73:b3:9f:02:69:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bab61c360ea108cd192c7ce7a7ed5565bdfbe0
Validity
Not Before: Aug 4 09:01:47 2025 GMT
Not After : Aug 5 09:01:47 2025 GMT
Subject: CN=e3c0de5cb810b68cac96db03f3ca7dd905ced2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:db:f4:61:11:22:dc:c4:70:14:da:84:c9:
3e:15:cb:b8:77:0e:06:e4:d1:92:cc:51:f8:bf:cf:
b4:09:24:0c:19:f0:28:2a:00:f0:12:e5:cb:00:6e:
b4:ec:e7:22:ee:af:f3:97:00:cb:48:e8:c2:e5:c4:
7a:80:26:64:6c:d1:cb:29:98:c0:5d:40:b6:39:e5:
1c:7d:aa:f4:67:4e:ed:96:1d:5a:48:2c:74:b8:0e:
13:2c:2e:6f:b6:94:c9:6e:2b:82:1e:1f:7e:71:3c:
05:35:ff:a9:8a:3f:7b:3d:40:40:7f:ca:d0:4d:a2:
d9:0d:09:2d:d4:6b:33:95:96:af:32:be:46:6b:4f:
48:85:db:f8:96:e0:ed:e2:12:8f:fa:11:15:ab:c5:
42:61:f8:16:41:63:10:a2:cc:4c:9d:c7:aa:ff:1e:
f2:b6:33:3e:27:d4:36:b2:57:9b:91:da:84:be:cf:
9a:d6:d5:c8:0a:0d:48:14:a9:a6:91:dd:51:f8:ca:
8c:d8:4e:83:b7:61:8b:a3:a6:56:2c:22:b5:f1:21:
fd:c5:47:47:03:e2:00:a7:bd:c8:d3:29:a2:8f:33:
aa:53:f8:ef:6a:d0:88:02:c2:5a:f5:29:9e:fd:07:
ec:3e:5e:c9:f9:70:72:79:f3:3d:90:04:21:e7:7a:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C0:DE:5C:B8:10:B6:8C:AC:96:DB:03:F3:CA:7D:D9:05:CE:D2:D1
X509v3 Authority Key Identifier:
keyid:A8:BA:B6:1C:36:0E:A1:08:CD:19:2C:7C:E7:A7:ED:55:65:BD:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLq2HDYOoQjNGSx856ftVWW9--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9b39b9-82c8-4c7d-b268-766e546057a7/1/qLq2HDYOoQjNGSx856ftVWW9--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:22:98:b1:5b:4e:2c:d7:ba:66:a2:09:c8:2d:7a:04:df:53:
6f:bd:d7:41:8e:95:d0:c2:52:38:cc:38:11:54:9a:32:22:39:
6e:f6:23:90:7a:10:29:a5:00:6d:db:be:9b:34:8a:ee:56:2c:
3d:36:e5:03:4d:01:8a:44:05:93:fa:c7:ff:d2:45:d4:0f:0c:
fd:1c:ff:11:27:26:0e:cb:4f:85:32:3b:c5:db:d7:bf:84:1b:
09:2e:91:37:6f:30:af:d8:d6:fd:10:6c:28:6a:83:d7:36:3a:
31:b9:52:e4:0b:f3:68:b6:e3:25:35:b1:90:ad:d7:02:f5:fd:
17:9a:21:53:6c:77:f1:45:37:5a:e8:90:3f:d7:e7:de:6d:f6:
a4:ea:ef:1e:63:bd:f2:9a:14:7b:0f:3a:d3:36:b6:ce:4e:24:
15:ab:e8:cd:8c:ef:0a:ef:aa:f2:33:f1:76:f3:88:8f:4c:eb:
f9:a8:8b:42:38:04:d9:b2:6c:7b:14:2e:34:f5:df:7f:4e:30:
dc:bb:dc:3f:1a:d3:4f:87:20:84:53:4a:60:5a:e3:08:db:25:
e1:25:16:5a:22:14:a5:29:a6:88:bf:34:af:f3:a9:e7:8d:f2:
21:fa:5b:05:af:7b:10:b7:43:9f:3a:c6:f9:02:d0:e9:c0:26:
a5:46:9d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:59 2025 by rpki-client