Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: 3JKqcJ+0r0uGC6CDS9CbrGZ/4yNdQQ6E44OqMoLBSus=
Subject key identifier: 71:5E:40:51:61:A3:BD:87:96:F4:CF:D0:04:C0:F1:A6:33:CF:1C:FA
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 01988920AC3DB5BD9CA59E8D4E43E2FA96CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 10:01:16 +0000
Manifest this update: Fri 08 Aug 2025 10:01:16 +0000
Manifest next update: Sat 09 Aug 2025 10:01:16 +0000
Files and hashes: 1: NApugC31V5WK63Ny4-racw1twJY.roa (hash: bVtlfHYisvNWIzitGovNgNsC2+/TaBl7fpGIvEq6gaQ=)
2: OI4m2d90B9xfmwLaDwu0RLIhyHI.roa (hash: 1tPpSMdOXEc4uC4QEVA58ahEFZcfSMXztb+GTkRhAk8=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: fbPgkdfQ9qpoOVQR5TncWNBVfwSpr2lKisUQT04/Uw4=)
4: i4v6AZ8AjCY-DaijxXBLxpCWr-o.roa (hash: IzqUiUJUiq+h6Lhm9373nMFr5yy8oOrsxUoRI4smlK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:ac:3d:b5:bd:9c:a5:9e:8d:4e:43:e2:fa:96:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Aug 8 10:01:16 2025 GMT
Not After : Aug 9 10:01:16 2025 GMT
Subject: CN=715e405161a3bd8796f4cfd004c0f1a633cf1cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:3c:07:7f:92:77:db:f2:f2:9d:c6:5b:88:
05:00:ac:3b:79:e1:9d:1c:c6:b3:4e:77:22:8f:81:
ac:0e:a0:16:21:b7:22:4c:16:e4:36:fe:fa:48:39:
f3:33:04:0a:d9:f5:0d:ec:dc:87:37:a4:07:b1:e0:
ca:ba:44:e7:53:9f:f4:7e:8a:c7:44:be:9d:5e:8f:
5a:aa:f6:86:82:68:24:28:b5:3f:bb:ba:6a:dc:cb:
69:6f:53:54:da:38:df:91:af:0a:e3:4e:12:9b:c3:
6b:47:2b:a9:c1:21:5e:b1:09:d4:bc:62:f4:07:78:
7f:6e:1c:70:7e:68:6b:e1:16:45:a5:aa:7f:b7:28:
22:67:7c:88:37:31:89:5c:30:37:87:ee:bc:42:d2:
dc:fb:28:56:35:9e:3a:92:e6:54:57:e3:1b:29:0d:
5e:9d:0b:48:dd:0b:ca:3b:9e:15:93:cc:97:5d:a7:
89:dd:0d:19:4f:29:12:9a:c2:5c:1f:c7:a6:0d:cc:
f7:4e:05:1f:6a:03:5b:1a:a6:43:09:d0:af:e6:ea:
eb:37:98:f1:2f:92:c5:74:23:5f:db:af:f3:d7:a3:
6e:63:a6:c7:bf:22:2b:a5:83:2d:9f:58:5c:d1:0b:
c3:ca:b8:4b:54:d2:69:dc:27:66:cb:89:b5:8c:a3:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5E:40:51:61:A3:BD:87:96:F4:CF:D0:04:C0:F1:A6:33:CF:1C:FA
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:40:ae:1c:97:83:55:24:5b:ec:ce:b8:5e:f7:32:87:a0:e3:
79:e9:e4:c6:5e:2b:39:09:d9:bf:85:be:09:c4:7c:f5:02:9b:
b8:f7:f9:a7:f4:42:9e:5f:63:ee:9b:73:b5:03:01:5a:e3:7b:
98:65:02:a5:c7:47:c7:eb:cd:7e:2b:17:d0:4d:b7:3a:37:cd:
9b:45:50:10:a0:e7:21:88:97:74:b0:f6:e3:f0:b0:b9:7d:31:
d5:3b:65:7f:7f:ce:8e:04:ed:1e:a5:b1:c8:dd:2b:9a:ea:c3:
8a:f6:59:96:c8:5f:ba:9f:25:59:bb:47:f8:07:0c:35:b4:cb:
2e:b3:3c:8a:46:e1:9d:d9:49:aa:7a:b9:aa:d0:f9:0a:8f:88:
04:5e:c6:0b:f1:d1:57:77:9b:67:5c:aa:90:80:13:ab:d2:2f:
34:c0:67:59:6d:f8:68:27:7b:82:81:88:64:d2:59:98:45:a2:
fb:6a:9b:ac:08:d1:f2:53:b6:82:95:0f:16:02:fa:9c:c6:96:
1d:b3:12:4b:35:87:8c:b3:fc:d6:b9:64:e4:65:11:25:fb:46:
81:a2:a4:a9:0b:2d:f6:ac:5e:a0:b8:c9:f6:2e:15:aa:7e:b8:
a1:90:b6:69:9e:a2:88:44:02:c7:76:3f:2b:6c:6c:1a:db:97:
dc:43:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:52:04 2025 by rpki-client