Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: AxdvRzHBGxD6/QM57/f3dOJ3vtXihgdEmtHJD3G+3u0=
Subject key identifier: 66:F5:B5:80:2C:EE:B6:54:7E:23:CF:3C:0E:FA:C3:79:E9:36:22:A4
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 0198D472E3B6ACCBF08CAA99ECB1EB08468A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 10CB
Signing time: Sat 23 Aug 2025 01:02:35 +0000
Manifest this update: Sat 23 Aug 2025 01:02:35 +0000
Manifest next update: Sun 24 Aug 2025 01:02:35 +0000
Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: EvSXSWvVBEfXbgu34N5Yzhk6K+l2yYiH9h89WIGsIWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:e3:b6:ac:cb:f0:8c:aa:99:ec:b1:eb:08:46:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Aug 23 01:02:35 2025 GMT
Not After : Aug 24 01:02:35 2025 GMT
Subject: CN=66f5b5802ceeb6547e23cf3c0efac379e93622a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:34:6b:96:18:29:0f:be:7a:6d:d0:19:97:
63:3a:90:78:a2:1e:d4:3e:cb:8f:d5:63:6e:f1:28:
c5:57:9d:bd:85:f0:4d:e3:ff:09:95:a9:6a:07:7c:
31:cc:19:37:8c:20:f3:b5:59:1e:27:23:f2:fd:cf:
1b:16:c5:5a:5a:33:26:11:29:69:78:ad:cd:e0:29:
0d:5d:c1:4b:60:a2:f7:6f:07:92:15:78:bc:7c:d5:
2e:77:38:a7:5f:ef:23:09:e7:cc:34:4d:8d:1c:13:
b9:65:69:fc:fc:9e:0d:1f:45:ae:b9:7f:ca:c5:66:
1f:da:a7:bd:1f:2a:24:d7:ef:31:40:e7:51:88:0a:
41:20:dc:29:c5:07:82:0c:26:68:6a:bc:56:97:64:
f9:57:09:c9:9e:d3:41:38:34:1e:aa:de:9b:8c:e3:
d0:c8:fb:f5:2c:ed:ca:01:2a:47:84:de:6a:12:48:
5d:71:94:af:76:0e:e0:34:7c:6b:41:e1:16:21:b9:
e3:9e:51:54:7a:fc:00:04:78:7d:65:12:d5:d8:9a:
c4:47:8f:04:2a:06:5e:18:c1:8f:5a:9a:3f:cc:47:
b2:02:64:f4:13:8a:26:52:a3:c5:ec:34:26:22:50:
f0:b8:54:16:95:dc:37:75:58:8e:4b:92:f3:f2:4b:
c9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F5:B5:80:2C:EE:B6:54:7E:23:CF:3C:0E:FA:C3:79:E9:36:22:A4
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:37:1c:37:40:8f:08:fa:d7:5a:0b:bf:36:7c:0d:a6:c1:a3:
33:ba:98:e3:64:fa:4d:4b:d8:ba:7e:06:31:fa:bc:2f:01:54:
c5:74:d0:0b:ea:bb:07:e6:dc:1e:76:01:49:2f:7b:07:e6:74:
5f:3f:a3:fd:97:5f:31:a0:12:5d:40:af:53:07:b6:a6:09:d2:
f3:3f:49:8a:85:a1:95:8d:d4:f5:c5:d6:02:e8:53:b5:f0:f3:
4d:bf:85:07:64:de:34:66:2c:81:5f:fb:43:53:59:2e:60:85:
f1:92:b4:78:6b:46:85:a8:9d:2c:e1:76:a3:b9:5d:30:97:32:
78:96:39:f2:64:0c:c7:67:05:c7:22:8d:dd:7b:7e:93:34:f2:
c5:37:8e:3b:2c:9f:d5:68:97:84:1c:03:18:94:fc:1a:dd:76:
f1:21:6b:09:dd:ef:22:97:34:49:1a:fd:8b:e1:4f:09:58:a9:
01:31:5b:93:8c:52:7e:f1:80:00:6d:3c:54:39:66:a0:c5:f1:
a4:27:96:cd:ba:3d:b0:cc:17:d0:71:96:f0:5d:96:f2:d6:2e:
a5:87:6d:69:d8:a0:27:96:fd:45:26:52:eb:a5:5a:06:5b:ce:
5b:bb:b5:2d:24:05:dc:52:dc:f8:d9:3c:c3:14:30:c9:9e:e1:
81:3d:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:17 2025 by rpki-client