
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: JIs1yahYBQi6SGweI4ivs7RjVnh8DiMavLC6MQKOnvU=
Subject key identifier: B1:CE:5A:68:AF:E3:D0:4E:69:E8:8A:2F:CD:32:A8:68:EF:65:A3:D4
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 019874BDBF4CCF4951CB4B9343724F3A5BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 11:00:48 +0000
Manifest this update: Mon 04 Aug 2025 11:00:48 +0000
Manifest next update: Tue 05 Aug 2025 11:00:48 +0000
Files and hashes: 1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=)
2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: uX9lRKtDRaI607eb1zLjixgxhtKaDRme1gAbRP59QRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:bf:4c:cf:49:51:cb:4b:93:43:72:4f:3a:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Aug 4 11:00:48 2025 GMT
Not After : Aug 5 11:00:48 2025 GMT
Subject: CN=b1ce5a68afe3d04e69e88a2fcd32a868ef65a3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:53:f5:6e:f3:ca:f0:89:55:48:d2:5f:8f:
ba:45:40:fe:f7:3c:d4:7a:40:bf:2b:f9:99:d7:57:
35:d8:26:fc:2e:ba:5b:c4:b0:64:d6:3f:11:0d:03:
51:90:f1:f8:a9:39:da:0c:c2:ca:3c:1b:74:80:99:
26:27:ca:58:bc:eb:47:72:f6:0a:88:60:f4:29:b5:
97:5d:ea:23:7b:71:0c:5f:0e:10:9c:f9:0e:97:01:
21:9b:77:88:00:79:42:67:17:40:37:79:4f:3b:ca:
db:ac:37:e3:16:b5:84:6a:1e:7a:7c:48:76:a2:ed:
da:fa:16:cc:e3:2e:86:9b:27:a4:18:d7:66:4e:03:
89:19:01:39:06:81:f0:27:ed:b2:29:22:f2:c5:ef:
03:6d:00:a3:e9:7d:25:d9:05:ab:31:16:b2:48:3a:
61:a7:56:1c:dc:4b:fd:c9:94:37:9a:01:c5:e6:ad:
bc:22:89:be:37:69:90:d8:8b:eb:d8:ab:8f:91:c0:
22:c6:7b:25:68:be:d4:c2:1a:7a:ad:16:d7:af:54:
84:c6:d0:cf:83:07:be:53:b0:6c:a3:11:eb:56:a9:
70:02:ba:22:03:a0:14:be:a4:7f:69:e2:94:9b:e8:
f2:ea:4f:60:c2:c5:fa:cf:83:a6:33:44:d9:73:d0:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:5A:68:AF:E3:D0:4E:69:E8:8A:2F:CD:32:A8:68:EF:65:A3:D4
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bc:c6:bb:2b:e2:63:ac:57:48:0e:b6:e5:b9:98:6e:5d:5f:
a4:77:fe:a8:58:23:11:83:93:01:28:5c:2d:75:9c:e9:97:16:
1e:5f:c3:e4:23:25:1f:38:66:cf:8a:65:c4:8a:63:45:ac:b0:
b9:83:c6:ee:28:ea:4f:53:16:50:99:ae:0f:73:f9:c4:45:1f:
0a:fd:a8:82:57:4e:ab:c2:6f:c4:31:bb:f1:a4:22:85:14:78:
20:16:a0:5a:89:b1:a4:79:0d:60:f1:fa:29:d8:e7:f6:39:42:
93:22:5e:8a:50:1e:7f:f0:7a:c8:00:fc:cb:e6:86:10:87:bd:
98:e2:22:94:51:a4:79:2d:de:c5:27:53:f0:66:a7:5c:3f:6f:
d8:16:19:6f:09:32:0f:cf:e1:e5:ef:e3:cd:11:eb:7c:c1:02:
ac:ec:d1:70:ec:5f:bc:47:84:99:77:87:ea:c8:fc:df:b7:99:
06:55:ae:14:a8:f8:11:09:4a:e2:2a:50:16:fa:1b:86:1e:68:
cf:f6:f0:41:e1:69:b3:12:ed:15:d7:65:82:8d:56:90:29:51:
ca:52:4d:ee:6e:e3:01:0e:fa:77:22:b8:96:18:ee:8c:80:19:
c6:5f:01:7c:4d:d1:76:e4:6b:9d:6c:c0:e8:da:ec:dc:10:98:
ba:30:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:08 2025 by rpki-client