Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: CMBgxNLwP31m5RobmYLJMGUDpVIu10aYn6gNXzrsbQw=
Subject key identifier: E2:A3:F7:70:68:1A:B1:CC:66:1E:A1:7A:D2:86:CC:98:75:04:AC:90
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 01987AC01665611F8C97356B20E113D2FFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 0171
Signing time: Tue 05 Aug 2025 15:01:05 +0000
Manifest this update: Tue 05 Aug 2025 15:01:05 +0000
Manifest next update: Wed 06 Aug 2025 15:01:05 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: rqNlpl+yXOQMeKfYzUFN+mXh/Jd0i5LtMCwLtkvohrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:16:65:61:1f:8c:97:35:6b:20:e1:13:d2:ff:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Aug 5 15:01:05 2025 GMT
Not After : Aug 6 15:01:05 2025 GMT
Subject: CN=e2a3f770681ab1cc661ea17ad286cc987504ac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:f9:79:20:05:d6:e8:0f:a7:61:fd:3f:0b:
26:b1:58:93:09:5d:26:8f:fc:52:fa:d8:b9:e2:02:
21:8a:d6:ad:e2:e9:fa:be:8f:51:21:7a:3b:0e:af:
b6:a7:ac:86:b4:26:f5:33:ee:b3:89:b1:50:cd:a6:
bf:d2:ca:7c:6c:32:92:e2:50:77:ba:c7:82:21:30:
88:d3:25:05:41:b5:cb:14:8d:59:c2:be:99:77:aa:
36:e2:5a:87:75:d0:17:9b:cd:49:e4:44:d9:e2:b0:
76:e0:c8:dc:7a:e0:41:e9:01:73:ac:f7:5a:29:c1:
ee:04:52:f1:4e:ec:5d:d3:e5:8f:72:9f:63:31:3b:
b9:bc:0a:7a:4d:6a:fb:c9:86:5e:a3:58:57:55:07:
b2:0b:17:79:26:2a:17:0e:58:7a:0f:38:d2:40:a9:
55:a1:98:11:5d:6b:a2:86:8e:e8:5f:8a:84:9e:6e:
4d:61:90:1c:3f:24:48:65:07:d6:da:7d:aa:5d:71:
78:20:34:40:49:ba:dc:4a:98:6d:f0:3a:bc:af:d5:
6d:1f:3e:c3:1c:9a:29:6c:1a:68:3e:fc:7f:b0:0e:
00:52:e2:7f:12:a9:fa:eb:87:aa:4d:98:83:40:69:
64:6b:ee:90:cf:9d:76:9a:88:c2:c4:a3:20:db:74:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:F7:70:68:1A:B1:CC:66:1E:A1:7A:D2:86:CC:98:75:04:AC:90
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:48:a0:9f:c0:a6:80:af:77:13:f3:01:11:45:76:e6:0d:9d:
5b:c0:47:b3:be:07:39:9b:29:0e:9e:b6:02:ae:2a:01:30:a3:
d6:8f:8a:38:59:5d:82:03:42:ea:9e:39:13:8f:58:12:30:d5:
e3:4f:86:e8:5b:53:ee:7d:45:6d:a0:cc:1d:f9:52:c3:8e:87:
14:62:0c:80:f2:66:45:c2:58:86:f5:3a:46:73:18:a2:55:72:
62:57:60:eb:ed:81:0b:72:0b:87:b9:50:06:b2:d1:fd:4f:ef:
93:bd:19:0c:02:a2:f0:51:41:3e:18:38:d6:66:65:8b:a8:82:
ec:ac:f7:40:93:78:96:d5:32:00:62:ad:59:da:2a:10:f2:86:
49:26:1b:9b:75:d6:13:e9:a0:4b:b4:5f:59:23:47:60:5e:40:
bd:92:4d:55:85:5f:31:5b:96:88:5f:db:d8:73:85:b3:d1:7f:
f4:77:e5:54:09:d0:ac:ba:d9:14:1b:0f:eb:9f:20:fe:13:e1:
63:68:6e:ae:24:28:0d:40:7b:08:43:bd:c8:c6:1c:36:d0:16:
cb:76:92:44:e1:cd:a2:4b:29:37:b1:24:2b:93:c7:dd:3d:2a:
22:0c:e3:76:75:f9:2f:83:a6:f1:71:4e:d8:86:73:1c:3b:4d:
c4:8c:4e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:53 2025 by rpki-client