Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: 3CiAwk+f6uKqZC0XLKY5m+yvy5nM40VdNagxO+UGS9U=
Subject key identifier: B5:AB:0D:57:C2:BB:14:63:30:1D:91:60:E7:2A:61:68:4A:80:7D:39
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 019874194E4012C68632FACA1F0E6375D08A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 13E0
Signing time: Mon 04 Aug 2025 08:01:12 +0000
Manifest this update: Mon 04 Aug 2025 08:01:12 +0000
Manifest next update: Tue 05 Aug 2025 08:01:12 +0000
Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: rvtDbYnsZmkJKmQ4Sk8W+WY8/UiUv14ywG4ECdzRwJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:4e:40:12:c6:86:32:fa:ca:1f:0e:63:75:d0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Aug 4 08:01:12 2025 GMT
Not After : Aug 5 08:01:12 2025 GMT
Subject: CN=b5ab0d57c2bb1463301d9160e72a61684a807d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:36:65:d3:38:e7:0f:d0:9f:c8:b1:f8:f4:86:
e6:d8:dd:1d:b6:72:bf:6f:47:e9:1b:44:0c:ed:64:
71:0b:78:48:ab:84:d4:0c:86:89:b5:a5:f9:92:c5:
76:f2:e9:dc:03:c5:c7:60:6f:89:10:87:b5:8c:fc:
67:5e:b6:7c:64:79:bc:87:ec:63:e0:b1:7f:af:0a:
11:ee:64:06:78:f1:d0:f9:cb:e9:75:05:10:7b:e2:
fc:6f:1d:9f:d9:98:71:ef:9e:c2:97:07:e3:5e:a7:
36:9d:cc:8f:95:08:30:58:54:09:ab:fb:62:97:35:
f7:93:68:d1:2b:56:b9:69:c3:cf:5b:5a:13:91:05:
61:f0:6f:b4:cf:d7:bc:2d:a4:3f:c6:e3:4c:a2:e2:
19:1c:fc:10:8b:39:c8:d4:c3:b1:23:4e:7f:0d:b5:
35:57:aa:c9:37:ca:2a:bd:a7:9d:db:e8:c7:e4:37:
16:23:59:5b:26:a4:01:7f:60:c5:34:d8:cc:0a:f1:
e6:71:7a:d3:da:2d:5f:21:a9:f5:b8:3f:b5:2d:18:
12:3b:41:7d:7c:f2:9b:ac:19:67:d9:b1:c6:51:d9:
a3:11:ac:c3:46:d4:13:80:36:fd:5f:f3:a0:b8:03:
e9:a8:63:8e:72:14:f6:55:b4:f6:67:84:34:f4:d2:
e6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AB:0D:57:C2:BB:14:63:30:1D:91:60:E7:2A:61:68:4A:80:7D:39
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f8:c7:65:b2:7e:1e:66:fa:fd:4f:58:2a:28:68:8c:51:de:
2f:52:7c:2a:9a:60:6e:01:84:cb:6a:05:a8:29:7a:14:80:e3:
97:16:87:9d:72:63:6e:93:9f:dd:1c:f9:07:4f:9f:c6:84:c6:
6d:4c:fb:bf:33:58:1b:ae:8f:de:9a:0a:a5:de:90:29:a5:c7:
63:f4:ba:d9:94:72:d2:e5:4c:bd:63:40:33:88:9d:89:1a:e1:
60:96:49:16:66:9c:3f:f8:ab:03:9a:e0:cc:da:29:f1:36:e3:
9f:1c:31:22:3b:49:fe:2b:5e:ec:ae:27:61:be:cd:71:91:2e:
74:b8:cc:c6:87:09:b2:99:1b:ff:52:c2:59:e5:02:96:3f:e2:
06:ab:67:d4:82:97:6c:58:0a:0e:a5:8d:12:03:d5:dc:36:af:
a3:05:49:a8:77:9e:71:ed:b3:d0:5a:b7:a3:07:6f:04:46:bc:
cc:13:fc:c2:65:f2:c2:03:33:14:e0:d6:7e:b8:af:72:04:1c:
1b:a4:4c:6c:75:f1:aa:a0:74:03:2a:dd:c9:79:98:c0:70:87:
f5:5c:24:6a:ec:14:2e:1a:3b:d5:60:f0:32:a9:b3:9b:11:a4:
d5:01:cf:b3:ef:68:91:25:a3:2d:ab:28:68:1e:f4:1a:73:79:
c2:e2:3b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:22 2025 by rpki-client