Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: GmDN596bU85YJJ3NJGx4Ifo7Ap6Iij9ny+w92PnDmyM=
Subject key identifier: 87:CA:81:F4:47:74:69:7B:A4:44:90:19:DA:B4:69:C0:E6:FA:18:20
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 019889577071DF297399FD29A3F837844A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 0639
Signing time: Fri 08 Aug 2025 11:01:05 +0000
Manifest this update: Fri 08 Aug 2025 11:01:05 +0000
Manifest next update: Sat 09 Aug 2025 11:01:05 +0000
Files and hashes: 1: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: h8PtJNYYi58Rb1lOCFgKhtLMiQ+obFGh9U0I92HcrWI=)
2: bEqgtrspfIQ8XBKsdOXgQ2Xyvsk.roa (hash: RpGyhN37kiaHNLFfnHAUkc7DrZnN6EVEiWZPE+rzTPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:70:71:df:29:73:99:fd:29:a3:f8:37:84:4a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Aug 8 11:01:05 2025 GMT
Not After : Aug 9 11:01:05 2025 GMT
Subject: CN=87ca81f44774697ba4449019dab469c0e6fa1820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:cb:0c:b0:0d:8e:68:9d:dc:54:cd:b5:b0:
2e:66:ae:50:59:e1:1a:4b:be:92:42:b5:01:11:12:
cf:81:ea:19:9d:cf:36:af:83:18:90:3c:f6:fd:0a:
75:90:32:3f:bf:b2:61:05:0d:32:8a:f0:50:70:7c:
f5:83:43:c2:97:25:5a:80:06:eb:8c:31:b1:bd:2f:
c9:d7:63:b8:7a:3a:79:1f:0f:18:70:ba:d6:77:5c:
b9:1d:e9:63:7d:1c:56:ac:c8:b4:ab:3c:e7:57:bb:
b5:69:38:78:c4:83:d4:06:d0:b6:5c:a0:9a:68:dc:
3b:4c:9e:ed:5b:25:09:8e:f4:3e:66:22:02:ec:0d:
e0:bb:2d:0b:31:8c:03:ed:0f:d3:5c:54:bc:30:69:
b2:9d:78:83:ac:c5:cc:b9:80:92:0f:84:e4:86:78:
ad:7e:4d:76:3f:7f:aa:45:72:49:b5:71:21:21:52:
79:70:0f:b4:6f:ef:31:c3:f7:5a:63:2c:f0:ab:2f:
c7:bc:e2:2c:e7:67:07:4a:d6:38:86:5d:8f:99:0e:
ec:a7:3e:e4:14:23:15:9e:34:c5:bc:8e:5a:f9:f0:
81:fd:a9:eb:28:35:96:3f:47:75:7d:09:8d:47:e6:
ad:0b:e9:59:f7:54:2b:9f:87:7f:9f:07:5e:26:bb:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CA:81:F4:47:74:69:7B:A4:44:90:19:DA:B4:69:C0:E6:FA:18:20
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b8:2c:12:41:d8:9e:3e:e8:bc:49:b9:30:72:d0:f0:2c:28:
e7:b1:02:8b:3e:f0:55:05:06:52:66:1f:fd:bf:c5:ff:3b:75:
d9:ef:89:43:e1:8c:b0:3f:c8:c8:fa:fa:48:c1:57:93:ab:bf:
21:5f:f6:61:38:09:40:7d:52:f1:9e:da:fa:48:63:aa:07:e5:
c6:cf:e2:a7:8a:a7:69:13:e8:44:7e:bf:6b:c0:b7:8c:9f:52:
5f:2b:42:ba:56:61:9b:55:7e:cf:57:bf:c8:ff:84:6d:d2:69:
cb:2e:53:d5:ae:91:46:04:e7:39:b1:3f:86:5a:88:5b:23:ca:
a6:91:3f:2d:b4:b1:cf:fa:35:d1:b8:2f:06:f2:61:53:45:a9:
90:7c:0c:77:b7:5b:97:ec:5e:6f:b1:ea:d0:97:c7:8f:32:61:
46:2e:fe:bd:d6:f7:75:e3:b4:d1:0d:29:3b:a2:53:c1:ef:e9:
b4:78:b5:9e:e6:ab:6e:3b:2b:0d:17:9d:18:c2:75:d3:96:14:
a0:c5:b4:07:95:ad:f7:da:41:c2:3d:c5:73:4d:b2:b8:9c:9d:
67:f0:b4:2f:e5:7a:95:13:5e:96:b7:88:08:cb:6a:4c:31:2b:
af:56:d2:c9:95:7e:29:d6:fe:c3:54:45:77:d0:e4:c0:3b:b9:
3d:e3:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:15 2025 by rpki-client