Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: yYDsHzeflzZRC6w0x2cJd/k6oERna49K5zBClrHQt0g=
Subject key identifier: 35:5E:8A:E6:83:EC:07:1E:E0:C8:0B:8C:1B:23:E3:6F:FC:F1:1D:8A
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 0198745025B44A028D2F654A9CA081764AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 1474
Signing time: Mon 04 Aug 2025 09:01:06 +0000
Manifest this update: Mon 04 Aug 2025 09:01:06 +0000
Manifest next update: Tue 05 Aug 2025 09:01:06 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: iu8n8CGkjIas+V/IuJ35k5G+ntW7SfDDuT2hChLn9b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:25:b4:4a:02:8d:2f:65:4a:9c:a0:81:76:4a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Aug 4 09:01:06 2025 GMT
Not After : Aug 5 09:01:06 2025 GMT
Subject: CN=355e8ae683ec071ee0c80b8c1b23e36ffcf11d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:07:e6:83:73:c1:6c:b5:3d:ad:4f:20:07:
15:82:aa:98:52:45:8f:95:db:85:a4:d1:e6:4b:36:
2b:14:fb:4f:e3:05:8e:73:e5:4d:53:64:98:88:14:
da:c2:a0:56:42:2e:77:bf:48:60:d5:91:51:f3:78:
c7:4b:4b:67:2e:08:ab:4f:d6:f7:98:ef:7a:ff:13:
9b:02:40:6b:e4:14:11:3b:44:af:81:45:77:aa:df:
8d:e2:c6:36:1e:44:1a:4c:d3:f0:74:3f:92:b5:82:
85:91:21:f6:4e:27:51:fb:43:e1:a1:93:9b:65:96:
34:23:8e:5b:1d:3b:b9:81:af:ba:df:9d:98:be:eb:
c8:8d:be:1a:94:b7:c8:4b:cc:a7:5f:a0:11:61:84:
7e:3a:ac:51:e6:82:08:ca:0c:50:98:1e:97:25:bc:
9f:c9:d7:81:66:5a:a6:2a:3b:af:2c:ef:af:34:7b:
f5:63:d3:8c:6c:43:1c:b8:61:3d:61:fd:cb:99:66:
41:a6:95:2a:c6:9e:92:d3:fa:f4:eb:b7:fb:bd:a8:
e1:2b:cd:d7:b5:12:82:70:50:c5:b1:db:c3:67:4c:
87:46:b5:bf:38:69:2a:1c:0a:b5:6a:89:c5:4e:b3:
3e:b5:42:40:0b:a6:af:25:35:c8:21:e3:4f:41:f3:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5E:8A:E6:83:EC:07:1E:E0:C8:0B:8C:1B:23:E3:6F:FC:F1:1D:8A
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f8:0c:81:18:f6:a3:b8:a1:5e:b4:a3:c2:e7:54:ce:f5:23:
fb:38:c1:4c:5a:cd:e9:c0:6e:7d:00:6d:3d:b3:8d:4c:e2:9f:
42:b8:54:34:1b:be:02:47:ba:4e:de:5f:8b:38:8a:76:7d:6f:
5a:3a:c9:b5:a1:52:03:b4:e4:95:fa:05:a4:bd:d7:f9:69:5d:
d2:5a:18:f6:b2:73:ee:f8:33:ca:97:2c:4b:f9:f7:a1:85:2f:
50:ce:a4:96:12:61:4c:cb:c3:41:b4:d7:4f:02:25:43:99:0b:
56:19:a0:43:ec:0f:e4:ab:53:6a:1e:fe:ca:8e:fd:cb:c5:d4:
44:92:73:a0:6b:05:8c:9e:4b:29:8f:68:44:82:e8:ed:8b:63:
e1:62:9d:fb:5a:4e:b3:2b:9b:f1:d7:e3:e0:7f:95:82:a9:d3:
ad:f7:8a:fb:34:a6:a8:15:d3:f4:12:e1:51:2d:2c:dc:a5:45:
93:e1:ac:a3:f3:f3:d1:a3:51:e5:23:09:40:35:d3:7b:6a:12:
6d:3b:fe:e7:94:9f:1e:8f:9c:2f:95:ca:2b:0a:07:19:ee:e3:
20:a2:28:58:de:56:25:7b:d4:3b:fb:aa:3f:55:2b:6b:3c:15:
8f:1f:7d:f8:62:ee:45:c7:ae:73:8b:e7:a9:e8:28:ec:13:be:
46:15:58:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:36 2025 by rpki-client