Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
File: qPAjGPLOly5yQIzMx9MgrzDNKw0.mft (raw, json)
Hash identifier: 7Xp3GzPDLQjpmdvPSLg2lrPFmwZQuUYVXONG1OdXZR8=
Subject key identifier: A9:F4:37:49:2C:BF:EF:B9:EC:0A:01:5E:A2:3A:DE:82:22:16:7A:70
Authority key identifier: A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
Certificate issuer: /CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Certificate serial: 019883FA3319D1D9AA8FB0B71DBDD8925E71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
Manifest number: 1514
Signing time: Thu 07 Aug 2025 10:01:09 +0000
Manifest this update: Thu 07 Aug 2025 10:01:09 +0000
Manifest next update: Fri 08 Aug 2025 10:01:09 +0000
Files and hashes: 1: _RYA60WhNQpChcuS-ZhpeHNn3Ro.roa (hash: /o7/5SeEgngQyysQsPfhFgp/4dtDLAhE3JTXwNG/WOo=)
2: qPAjGPLOly5yQIzMx9MgrzDNKw0.crl (hash: Njmma7J3TLLDlnLAUTqR0sFJcNpu1PLxBZx3f8hTdCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:fa:33:19:d1:d9:aa:8f:b0:b7:1d:bd:d8:92:5e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f02318f2ce972e72408cccc7d320af30cd2b0d
Validity
Not Before: Aug 7 10:01:09 2025 GMT
Not After : Aug 8 10:01:09 2025 GMT
Subject: CN=a9f437492cbfefb9ec0a015ea23ade8222167a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:68:2d:67:b2:19:c2:fc:3a:55:e3:ab:07:
02:33:70:62:30:86:c4:3d:4c:00:f4:b8:bf:a1:4f:
64:b4:8b:67:3d:ef:aa:77:50:00:0c:2d:ad:97:de:
24:e8:6a:9f:c6:34:cc:53:3f:0c:38:c7:c2:da:c6:
53:be:c0:ea:72:35:25:c2:42:b0:db:62:6d:72:0b:
20:32:e5:7a:d0:76:ee:8a:57:af:74:d0:6a:6a:82:
f8:5a:38:3d:2c:72:d0:9f:f4:3c:c9:33:26:4f:cc:
c5:26:52:7d:c2:ec:6c:90:3f:aa:78:b3:92:5c:9c:
ec:89:66:92:2b:25:6a:78:5e:d3:08:34:0e:7a:7a:
d9:6f:80:b9:e8:6e:81:a6:98:42:da:a2:56:ea:ff:
9a:fa:6b:5d:b7:54:cf:c9:11:55:66:cf:55:50:08:
72:1f:f7:3b:c1:b5:94:e0:5f:dc:c4:9a:cd:21:d9:
6f:8c:d0:60:a1:fd:3c:01:76:bd:39:de:af:d1:42:
b9:ba:07:cb:82:79:c4:81:cd:4f:a5:56:18:bc:e1:
81:c2:d3:db:33:b2:62:77:cf:15:76:d1:79:48:de:
ce:db:d1:c0:62:ba:b2:96:cc:c4:9d:63:e8:8d:bc:
16:5a:81:41:5d:76:ab:31:9f:d5:64:db:84:7c:5d:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:37:49:2C:BF:EF:B9:EC:0A:01:5E:A2:3A:DE:82:22:16:7A:70
X509v3 Authority Key Identifier:
keyid:A8:F0:23:18:F2:CE:97:2E:72:40:8C:CC:C7:D3:20:AF:30:CD:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPAjGPLOly5yQIzMx9MgrzDNKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b44a03-4472-4315-8758-7544df3004b2/1/qPAjGPLOly5yQIzMx9MgrzDNKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:98:f4:d9:ae:c1:a0:36:ee:3e:e2:1e:d8:14:0c:dd:82:c1:
3a:6e:59:cf:dd:b4:33:04:38:57:46:1e:aa:a8:58:15:fb:f9:
28:37:b6:d4:6d:59:25:cf:17:76:b1:99:d2:60:e7:96:01:d1:
2f:ba:f3:3c:0b:92:64:71:e0:21:49:c8:1e:54:dd:f0:d1:7e:
ef:81:06:78:98:35:cc:c7:ab:6d:6a:79:b4:4e:7a:75:78:f4:
d1:aa:68:c2:2f:d4:1e:18:e4:19:22:bf:39:39:2b:84:85:24:
eb:78:1e:01:a8:26:54:45:82:23:f7:22:58:fe:69:7e:c9:94:
f1:82:64:ed:8a:8e:bd:d9:26:a1:a4:8e:63:0d:d2:66:f8:91:
86:a8:34:af:29:b3:d0:32:e0:15:cc:2f:9f:15:50:af:f1:82:
05:92:30:84:6b:bd:09:af:36:32:03:e0:85:47:e7:ed:40:7f:
80:8c:c1:de:73:13:ab:97:3f:a7:e5:4c:9b:80:07:47:46:80:
62:86:56:dd:22:38:33:18:ac:58:b1:db:f2:ca:71:56:f9:24:
75:d4:9b:46:13:ea:10:3e:7a:ca:83:ec:7d:dc:db:55:60:87:
cc:03:79:33:b9:70:64:e9:04:91:6b:6c:91:9d:34:ff:0e:d0:
93:31:0c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:10:24 2025 by rpki-client