Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
File: qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft (raw, json)
Hash identifier: KKyMATns71FzTAwOZkHSlcdRZBnKH3Jomt9nQJUF+Z4=
Subject key identifier: A4:2B:AC:DE:02:9E:9A:C2:D7:F2:EA:D5:E5:89:93:87:C6:3E:B6:E6
Authority key identifier: AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
Certificate issuer: /CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Certificate serial: 01987E9C824C96CC74EA801207024D08EF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
Manifest number: 64
Signing time: Wed 06 Aug 2025 09:00:42 +0000
Manifest this update: Wed 06 Aug 2025 09:00:42 +0000
Manifest next update: Thu 07 Aug 2025 09:00:42 +0000
Files and hashes: 1: FeEiiWjAdJKymNjox7n7zCUc9Wk.roa (hash: dzt2dxmN6m2Hyo/H9hlkWWL7XeHHBgERvBsbJJztvYI=)
2: XBjHbo-JikUirnDC9mDO-NUnYF0.roa (hash: Kq6nw7oAp8kgVGJWvOFausntjkcQVXP1uvqCb3Bz6XI=)
3: qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl (hash: gih3Vb2QVUzfKzHdJ/aN4AhcUbFxS+/OIZ53mvueBbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:82:4c:96:cc:74:ea:80:12:07:02:4d:08:ef:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5212958d8e1baa144a82a821f93a890dcba49a
Validity
Not Before: Aug 6 09:00:42 2025 GMT
Not After : Aug 7 09:00:42 2025 GMT
Subject: CN=a42bacde029e9ac2d7f2ead5e5899387c63eb6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:b6:0b:ce:6f:b0:b2:ca:80:6c:cc:23:10:
fe:a8:7e:32:cc:6e:61:47:bc:0d:ef:9e:9b:41:70:
d0:89:86:28:4f:53:b7:d8:20:4a:fc:3b:b0:b2:a3:
5f:41:b4:7a:cf:2a:bb:7a:14:f2:50:4f:d3:37:38:
97:2f:ee:f2:03:75:43:5c:1e:bc:26:68:9b:1e:59:
20:ef:0f:1b:dc:dc:94:a8:5b:10:fb:be:bb:19:4b:
e6:4e:cf:ce:b0:8c:3f:4f:72:c8:9f:a9:7a:a9:c8:
ef:5e:da:8f:c9:18:a6:7d:11:37:fc:9c:6c:0f:4f:
72:25:4c:98:bb:79:bd:38:42:65:59:6a:e2:7e:06:
48:22:96:9a:ca:b4:9b:0a:69:94:ec:f0:f4:c0:a2:
ed:4b:0c:16:35:70:06:8a:c7:8f:e2:7e:7a:03:ea:
2f:57:3e:a0:dd:d1:07:a7:19:63:df:dc:32:cd:5c:
42:85:6b:e2:00:15:4f:34:89:4e:4e:4d:f7:9b:42:
3f:99:5a:b4:13:d9:c3:dd:68:96:94:af:a0:fb:f0:
84:90:46:c1:32:58:62:ea:4e:e0:a3:df:c2:65:0d:
d3:e6:77:ce:83:18:1a:8e:60:5e:3e:ef:41:c1:cc:
75:38:d9:ca:95:59:5c:27:c5:ae:9c:a5:09:78:22:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2B:AC:DE:02:9E:9A:C2:D7:F2:EA:D5:E5:89:93:87:C6:3E:B6:E6
X509v3 Authority Key Identifier:
keyid:AA:52:12:95:8D:8E:1B:AA:14:4A:82:A8:21:F9:3A:89:0D:CB:A4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlISlY2OG6oUSoKoIfk6iQ3LpJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d8e5e3-f897-4da2-9df6-b401a4a04492/1/qlISlY2OG6oUSoKoIfk6iQ3LpJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6a:7a:ff:04:8e:b9:0c:ca:c4:8d:9d:26:c1:bb:a2:a7:b9:
f6:21:7e:04:03:62:c1:cb:e5:23:7a:31:53:6a:58:33:8d:27:
6b:14:e8:1c:77:77:61:52:3b:e8:f3:36:ea:33:23:28:36:94:
f7:cc:6c:88:2f:bd:fb:17:ee:19:15:c8:c1:a9:8d:e9:fa:e4:
e6:0c:a0:c9:56:2b:b6:83:41:69:76:df:0a:43:fd:8b:e5:b2:
19:32:f6:22:d6:0c:48:40:08:7c:b9:5e:d7:27:9e:3a:d3:f3:
76:d1:da:8d:01:ae:d5:0c:89:48:16:4f:7b:bd:81:0c:ff:57:
33:5d:3d:2c:01:cf:2b:3c:88:f5:d7:df:da:86:33:80:54:8c:
b7:ee:1f:d4:2c:42:4b:0e:8b:6a:ac:56:92:8f:01:74:78:ac:
e9:e7:f9:a3:f4:1f:00:9e:b2:6e:80:9c:03:dc:75:a0:75:d8:
4f:83:42:d3:97:bd:f1:d8:94:90:3d:54:b2:6d:85:23:6d:bf:
2d:51:72:33:c6:55:fd:61:00:fd:8a:f0:0a:96:4b:da:a0:a7:
26:4d:cb:4a:d2:04:4c:8f:45:51:a7:3d:6c:48:97:93:33:33:
ff:6d:16:d9:01:2b:97:80:ed:9f:98:09:72:68:df:de:b4:5f:
70:44:5b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:09 2025 by rpki-client