Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
File: qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft (raw, json)
Hash identifier: Xw2bJiI32BlLD/eFw1N8ONSBRsRkBsM/J+Vn0X5Jtoc=
Subject key identifier: F0:62:1A:52:30:9F:57:80:6D:0C:8E:BD:69:80:0B:AC:5D:B0:40:B5
Authority key identifier: A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
Certificate issuer: /CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Certificate serial: 0198733D42623B6487664E24145E0BADC446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
Manifest number: 0502
Signing time: Mon 04 Aug 2025 04:00:51 +0000
Manifest this update: Mon 04 Aug 2025 04:00:51 +0000
Manifest next update: Tue 05 Aug 2025 04:00:51 +0000
Files and hashes: 1: EIr__RLMMt-7cOeUxPceAyVLfLA.roa (hash: I7nOwl/EmoWFHPn01B2Q9SwyfzZiNKdHb9+3iK0TA1M=)
2: qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl (hash: 4WksVbeMlTs6/T+EIqv2fwFTSnXX2I/O8HCe5wUeyfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:42:62:3b:64:87:66:4e:24:14:5e:0b:ad:c4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bbd4d9858ab5280700ef7e95c04160f3d2cb48
Validity
Not Before: Aug 4 04:00:51 2025 GMT
Not After : Aug 5 04:00:51 2025 GMT
Subject: CN=f0621a52309f57806d0c8ebd69800bac5db040b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:27:63:65:30:a6:93:e1:69:64:60:da:ce:
e2:cf:c2:31:49:76:29:bc:55:ea:c1:7e:46:20:30:
e7:91:43:d6:12:4a:0a:11:c4:9a:3d:0f:46:81:d6:
cd:2b:9d:fa:35:be:5f:8b:09:b3:38:b4:25:a4:79:
a9:87:37:92:8d:fc:14:b0:2b:67:3f:ca:8a:05:a2:
49:7a:a9:24:53:84:99:af:57:aa:a1:15:10:d3:c6:
e0:29:2d:77:8c:fe:23:91:94:4d:30:40:a5:17:33:
b5:5d:90:e8:d2:e9:5c:c7:47:0e:2d:2b:af:82:51:
d9:17:ae:82:9b:31:bf:17:bf:71:3a:ca:b5:42:37:
9f:ad:e5:7a:8b:d5:12:d3:8a:22:a0:71:3e:59:a7:
f6:cb:82:1e:5f:2f:c8:a5:ec:64:1b:7b:5f:51:19:
d8:67:f2:6d:9d:29:28:98:13:ef:2f:9b:d2:20:b2:
76:d0:89:2c:e8:68:04:a7:11:86:cd:23:8a:65:b5:
f4:a4:17:ef:6e:b5:e4:6f:75:83:3a:b5:56:66:52:
6f:a9:89:57:b6:26:63:46:62:2c:5c:69:cf:bb:12:
57:ca:19:e9:0f:c0:d9:51:f0:67:21:dc:de:92:66:
13:4c:0c:79:ed:ef:4a:15:33:5a:15:3b:bd:53:73:
38:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:62:1A:52:30:9F:57:80:6D:0C:8E:BD:69:80:0B:AC:5D:B0:40:B5
X509v3 Authority Key Identifier:
keyid:A8:BB:D4:D9:85:8A:B5:28:07:00:EF:7E:95:C0:41:60:F3:D2:CB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLvU2YWKtSgHAO9-lcBBYPPSy0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7aad9c-d657-45bd-b016-18b2fd4320f5/1/qLvU2YWKtSgHAO9-lcBBYPPSy0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e4:2d:db:bc:88:1d:a6:2b:98:f7:06:7e:7c:cc:3b:44:db:
cd:47:e2:f9:86:63:49:db:6a:79:f7:5b:8c:da:8f:3a:fe:ef:
41:6a:4b:33:c1:d8:ab:7a:15:ee:24:02:ef:57:c3:94:32:e7:
fb:e1:09:60:11:52:b0:17:42:8d:37:e2:fa:58:b6:ef:4e:d4:
68:22:1c:ba:0b:3e:3b:4e:4f:d3:c5:50:d3:83:c2:10:9f:08:
c7:68:31:90:f3:76:5e:96:7c:7c:22:7e:a5:6e:c9:85:48:ab:
cd:a2:3d:5c:84:01:b4:d2:06:10:60:d3:eb:13:1a:d3:a8:b6:
6b:d6:cb:f8:a0:72:12:26:e7:b3:31:fc:ef:9a:24:38:89:79:
db:fd:53:3d:da:95:d6:54:ee:af:7d:90:1a:76:b2:18:27:3f:
f9:b3:1a:79:f8:21:d5:9f:f5:68:db:42:d9:a4:06:c6:1f:20:
15:7d:27:f4:fd:e6:0b:98:17:9d:40:3a:a5:f2:bc:b3:20:1b:
b7:be:42:12:7d:a2:37:7e:ea:10:69:1a:63:8e:19:77:2c:fa:
3e:79:66:5b:82:d6:04:6a:c0:ea:ee:ee:00:f8:45:55:7f:4d:
09:42:a4:a2:c1:36:e8:e5:0c:4a:d6:9c:ce:25:0b:0b:ba:4d:
32:de:3f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:29 2025 by rpki-client