Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
File: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft (raw, json)
Hash identifier: AXfLtiqQ+piFGljx1pcHvB6uc9bHalMihfh1gNt7jUE=
Subject key identifier: CB:0A:3F:75:83:91:17:9D:FC:6F:05:01:D7:47:1C:60:57:F8:99:E2
Authority key identifier: A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
Certificate issuer: /CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Certificate serial: 019875D1347A3F0CF258E4FCD3DAF7996E24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 16:01:41 +0000
Manifest this update: Mon 04 Aug 2025 16:01:41 +0000
Manifest next update: Tue 05 Aug 2025 16:01:41 +0000
Files and hashes: 1: N5E83UpLjMoi8mpIjadF8EBEZHc.roa (hash: cZc2s8T64g7zUGVGUfnt3YLhqIDpL+dicIuuj0vLjiE=)
2: qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl (hash: UPddubBzF7DhbO2F59oJE0Iz7VXIRMxkOUMSJIh0y5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:34:7a:3f:0c:f2:58:e4:fc:d3:da:f7:99:6e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8847f64567e4aa4ad5cb7fc22f22df4e2bc6978
Validity
Not Before: Aug 4 16:01:41 2025 GMT
Not After : Aug 5 16:01:41 2025 GMT
Subject: CN=cb0a3f758391179dfc6f0501d7471c6057f899e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:73:85:88:57:03:8a:3a:16:0e:bf:35:b6:
e7:6b:5e:11:35:93:96:44:17:d3:e0:f9:61:53:82:
d1:25:a3:b2:1d:52:d3:95:4b:98:d7:a1:30:97:3f:
1a:5b:bc:a0:dd:38:86:7f:89:85:97:fc:48:f2:19:
fb:e3:8e:0f:c9:e8:81:f5:d3:43:c4:1d:43:b2:25:
c4:f9:ab:c5:3d:8b:91:d2:1d:9a:0b:d6:49:10:8c:
dc:86:b6:77:92:a5:96:59:1b:a1:33:a1:84:d7:a4:
e5:33:c0:5a:8d:79:4d:c7:86:bd:4e:d7:61:29:39:
78:f8:8a:9a:1f:1f:71:aa:c1:53:13:44:09:82:b8:
50:30:da:aa:b9:8e:d4:40:07:94:60:ca:f3:b5:38:
ee:4a:1e:c7:3f:24:d0:82:54:53:42:51:01:b5:b5:
eb:cc:20:60:23:02:95:d2:43:32:c8:a4:4f:47:bf:
d2:e8:91:88:af:ab:14:4e:3b:27:be:c9:4f:f5:15:
30:f5:94:33:74:3c:ca:14:92:fe:af:58:a5:8a:cc:
c2:ec:2c:87:18:77:ec:c4:73:d4:0f:cf:a9:86:32:
46:6d:6a:5d:d9:3c:c6:d9:a5:9d:34:99:fe:fa:9d:
ac:70:58:a1:c0:53:5b:91:b5:48:bd:5d:80:37:f3:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0A:3F:75:83:91:17:9D:FC:6F:05:01:D7:47:1C:60:57:F8:99:E2
X509v3 Authority Key Identifier:
keyid:A8:84:7F:64:56:7E:4A:A4:AD:5C:B7:FC:22:F2:2D:F4:E2:BC:69:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/17af94-7214-4adb-b304-10255718a185/1/qIR_ZFZ-SqStXLf8IvIt9OK8aXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:96:c3:2c:ea:de:7d:96:cb:0a:22:ba:ed:a4:68:59:ca:ec:
0d:e6:72:b5:cc:32:9f:9e:21:97:c9:a8:20:50:56:8b:b9:94:
d4:40:cd:c4:20:71:da:c7:03:61:72:bb:00:4a:33:09:f3:13:
cb:e3:51:03:3e:6e:1c:9d:0b:b0:ad:02:28:69:2c:61:75:be:
44:d0:e2:16:98:37:92:1f:23:7d:c0:4a:74:82:3f:90:97:2e:
b8:68:05:28:99:e8:85:01:42:be:06:ad:6e:76:da:49:67:35:
0d:a3:2b:a7:44:a7:d6:bc:91:17:2c:1c:e0:07:21:c7:ec:9d:
c6:39:fa:19:e1:42:0e:45:bb:aa:25:72:c4:2f:28:36:59:b0:
46:eb:e1:f4:db:82:3c:7d:95:e3:08:bb:63:d0:f9:10:b6:92:
80:73:af:a6:e9:13:ef:f7:49:a5:b0:52:10:87:16:56:85:2d:
3d:f5:44:94:7b:13:1f:25:ce:50:88:ee:a7:87:6f:97:0a:f2:
ed:6f:99:51:71:38:ac:4b:b6:e6:74:70:ae:44:a6:9a:5d:10:
b2:c6:dd:0c:ed:c0:6d:7b:e4:3b:e0:27:14:a7:d1:42:99:15:
05:11:06:63:9f:0e:5d:8c:ef:0f:07:56:5f:76:20:f6:dd:3b:
54:7b:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:18 2025 by rpki-client