Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json)
Hash identifier: jasXxDpp9w6z1QIX11bU1xugIiTpozxY/IzO381DkaI=
Subject key identifier: 94:C5:07:42:49:72:9B:6C:D5:B3:D3:04:47:E7:5A:94:03:FD:C9:9E
Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Certificate serial: 01987418EF5B2FE6D463DC5AFD175D11F239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 08:00:47 +0000
Manifest this update: Mon 04 Aug 2025 08:00:47 +0000
Manifest next update: Tue 05 Aug 2025 08:00:47 +0000
Files and hashes: 1: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (hash: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=)
2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: CICr6EkTYkbTdUx9iBaMSoeCAoD5wt3nFbNxe/pH+YA=)
3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:ef:5b:2f:e6:d4:63:dc:5a:fd:17:5d:11:f2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3
Validity
Not Before: Aug 4 08:00:47 2025 GMT
Not After : Aug 5 08:00:47 2025 GMT
Subject: CN=94c5074249729b6cd5b3d30447e75a9403fdc99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5b:e8:07:cf:b0:2a:3b:02:d3:31:34:7c:15:
5a:a1:a9:d7:e9:27:83:8d:48:83:a5:43:d8:48:79:
54:96:4d:1a:96:ae:cb:a6:b1:a8:19:45:57:5c:79:
dc:b8:be:1b:1c:a5:af:71:8a:ef:27:6c:f5:1e:45:
81:af:c2:b4:58:87:52:2a:e4:4a:c7:ae:5e:54:80:
c0:f0:81:91:7f:ad:b6:93:07:28:ea:13:f6:8d:bd:
6b:a6:26:61:b4:f0:72:08:84:40:12:4d:2e:48:e1:
85:f6:8b:59:bd:6c:76:cd:2a:81:8d:ac:f4:43:82:
25:e5:ee:8a:7d:ae:08:bd:96:45:97:f8:3d:ec:af:
55:d9:b6:9e:04:cf:da:bc:60:11:6e:28:fe:d1:50:
62:08:78:c5:97:8c:2b:80:b2:bb:b5:3f:21:fb:c5:
53:5e:18:a7:8b:3c:a2:e9:b0:59:13:90:76:f4:d2:
59:5f:1d:71:d4:6b:93:50:fa:7e:7e:62:d2:16:e2:
9e:ca:7b:5f:d1:98:ca:07:77:75:67:c4:ac:2f:f4:
5d:f4:17:eb:ed:fd:7e:86:03:54:6b:71:e0:0b:dc:
ad:4b:49:6a:27:a1:cf:4b:ab:f1:41:45:ec:57:54:
f6:31:3c:26:2f:85:6d:21:69:a3:ae:f0:df:f3:6b:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:07:42:49:72:9B:6C:D5:B3:D3:04:47:E7:5A:94:03:FD:C9:9E
X509v3 Authority Key Identifier:
keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:76:0c:07:37:ee:5a:c6:62:bf:2c:68:56:8a:fc:4a:43:00:
4b:b0:c2:86:04:5d:64:13:e6:3c:fc:da:f7:c9:d2:8c:b6:3b:
05:21:d1:69:ce:ef:2f:86:eb:18:1d:ec:8f:50:c0:e1:c1:c3:
5a:88:e1:d8:db:80:0e:27:33:89:09:cc:57:c0:1f:c5:c8:ae:
3c:e8:c6:ce:41:98:05:db:4c:44:4a:b2:0f:a5:cf:5f:77:ca:
d3:d9:c6:a2:c4:13:45:1c:e4:16:23:ae:f5:9f:d1:03:25:1e:
84:08:48:85:ec:6f:a3:b3:2e:91:13:bf:da:7f:2d:37:f3:a0:
1c:dc:b4:3a:38:6a:c7:e5:a0:a0:e8:34:73:0f:25:0a:23:ed:
b5:15:21:d1:1e:5f:32:86:96:da:ae:25:bc:c3:14:78:9a:9f:
0a:b1:ed:57:89:74:3c:be:e1:bc:78:9b:fd:51:2d:47:01:e5:
33:59:af:c1:4d:16:6b:8f:c3:d2:b2:8c:0a:7a:06:77:f3:04:
87:c8:ac:10:4a:9c:16:0a:49:8e:0b:a6:77:df:80:cf:a1:a6:
b6:88:71:54:6d:a9:d7:3e:8d:b8:74:b1:4b:88:38:5d:75:9d:
6f:4a:64:34:44:44:79:b0:1b:bb:a6:f3:7c:9c:fe:b2:d5:2c:
4a:39:21:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:13 2025 by rpki-client