Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
File: qag61DyItM5E6CDhFd6cU34qVKY.mft (raw, json)
Hash identifier: uyCAmdRQVXXOFTO8dTiS6OB1AanEBFJ8Hp2XKJXOjLs=
Subject key identifier: 88:58:FE:83:CE:5C:AB:0E:6C:25:BA:3A:7B:78:D8:41:C6:36:35:80
Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
Certificate issuer: /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Certificate serial: 019873E364131399225576C7DB7D26212BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
Manifest number: 08B7
Signing time: Mon 04 Aug 2025 07:02:18 +0000
Manifest this update: Mon 04 Aug 2025 07:02:18 +0000
Manifest next update: Tue 05 Aug 2025 07:02:18 +0000
Files and hashes: 1: 3JUWGQsOPBFoC4I-OGs1qaLU-CQ.roa (hash: HAn/ErTzS/Zebt/yY2233fhmAXGMbizcG23F8CM++/Q=)
2: qag61DyItM5E6CDhFd6cU34qVKY.crl (hash: Y9PRh+4M9srY9bq1If35zFzQWs+1SmFPmvCf4oMHyKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:64:13:13:99:22:55:76:c7:db:7d:26:21:2b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Validity
Not Before: Aug 4 07:02:18 2025 GMT
Not After : Aug 5 07:02:18 2025 GMT
Subject: CN=8858fe83ce5cab0e6c25ba3a7b78d841c6363580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:4f:38:26:49:5a:37:f2:8f:2b:45:f4:e7:
23:49:2a:e0:21:97:69:72:5c:78:12:08:a1:73:03:
d0:e7:1d:0e:65:ee:bc:2f:b6:c7:a3:c4:86:a4:15:
4a:08:52:f3:79:9f:72:47:74:a7:a1:cd:a1:85:38:
f1:47:8f:6c:89:48:17:d9:cf:73:cc:4d:75:61:f8:
6c:45:1c:23:45:f0:de:33:46:22:d9:aa:2e:7d:9e:
11:0c:08:10:a0:9a:77:a6:9a:87:ca:6a:72:4e:61:
cb:2a:cd:fe:81:bf:2f:00:47:40:d7:26:54:8f:c2:
c6:7c:c0:14:c8:d8:d4:81:8e:46:22:d4:96:ed:eb:
04:f7:a3:3b:fb:b5:00:41:42:33:9c:d2:47:09:75:
65:85:24:a8:1d:9c:78:fe:8b:dc:19:45:69:41:44:
22:36:28:02:24:93:ca:fb:16:ef:17:26:d2:08:8b:
e2:f2:9e:52:85:b9:55:4b:5c:8d:7a:a6:38:fd:11:
e4:a4:72:64:85:e1:9c:48:01:98:dc:dc:48:2f:a3:
33:cb:3c:3e:94:aa:aa:4a:26:90:f2:a9:df:77:fb:
1b:89:54:6d:b6:19:ac:30:97:88:d0:21:71:8a:83:
87:8d:09:0e:59:57:84:38:ee:c8:9b:f5:63:66:04:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:58:FE:83:CE:5C:AB:0E:6C:25:BA:3A:7B:78:D8:41:C6:36:35:80
X509v3 Authority Key Identifier:
keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:65:5e:a5:f4:79:41:35:1a:ba:23:73:e0:24:3a:16:fb:b4:
85:81:bf:5a:96:d1:0f:2c:6c:d4:71:6d:96:a4:f7:4a:c4:65:
d9:0c:60:f0:10:c9:67:3a:45:e2:5c:ef:ee:aa:77:8d:9e:4e:
28:34:ea:29:31:71:e2:fd:8d:55:ce:f3:a0:3a:5d:4b:56:6b:
8a:6e:45:e2:4d:02:ac:bd:b7:fb:69:d8:3a:96:49:b1:23:53:
71:72:81:05:a6:41:c3:3d:fb:3f:a1:8f:8e:54:8d:36:06:9f:
38:a5:a1:3b:42:5a:4a:2f:7b:cf:6a:a0:68:ef:a3:db:70:59:
0b:26:ee:91:32:02:1d:1f:6f:63:0e:59:c1:76:38:70:4b:37:
21:25:7d:7b:20:c4:b4:90:6e:83:a8:f6:fa:4f:91:cf:36:f9:
a5:5b:b5:0b:5a:2d:b5:31:fb:dd:18:43:80:86:fd:a7:a8:98:
6b:15:fc:04:dd:86:29:90:97:76:5a:19:fd:27:07:69:f1:b5:
07:c3:d4:8c:2f:e5:8c:ff:99:ea:92:3b:1d:4d:ac:d5:fb:5d:
e5:c2:e5:8c:05:78:19:c2:ac:a0:93:1e:a9:c3:c8:55:fc:81:
2d:4f:89:ba:2d:e7:20:a1:70:db:59:22:b2:5e:af:93:97:69:
46:65:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:14 2025 by rpki-client