Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
File: qR_iZyyPHBKyetoPzLqnwhLL1xw.mft (raw, json)
Hash identifier: KbDhMrpbn+MiSeQQfm3NhiP0bDlzeH1L61Qbv12OlY8=
Subject key identifier: FC:BD:B1:AA:9F:19:8C:3C:F7:B6:FA:87:28:01:80:7F:47:D9:2A:B7
Authority key identifier: A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
Certificate issuer: /CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Certificate serial: 0198D7739C5CED24DB933EBA937036B6E40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 15:02:14 +0000
Manifest this update: Sat 23 Aug 2025 15:02:14 +0000
Manifest next update: Sun 24 Aug 2025 15:02:14 +0000
Files and hashes: 1: 2Q0kx85pwBzfIMwLp9ldarIpih0.roa (hash: D6p/IFbJlNokn2XAUVSHhwdlOMDmGJADmbqv1d/nsjg=)
2: qR_iZyyPHBKyetoPzLqnwhLL1xw.crl (hash: U/AWPtIJLhrHJjuFfAMhNUVIwN0xGBrKGazQbeYOAqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:9c:5c:ed:24:db:93:3e:ba:93:70:36:b6:e4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91fe2672c8f1c12b27ada0fccbaa7c212cbd71c
Validity
Not Before: Aug 23 15:02:14 2025 GMT
Not After : Aug 24 15:02:14 2025 GMT
Subject: CN=fcbdb1aa9f198c3cf7b6fa872801807f47d92ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:73:75:41:9e:e0:a7:09:90:fe:57:f6:78:
0e:88:65:61:92:8f:f5:6e:9c:b7:39:be:71:fa:31:
5e:5f:41:0b:9e:70:4b:21:ef:c2:25:8d:51:0f:c1:
d3:4c:88:2c:68:d2:cc:a9:0d:9d:cd:b6:4b:cf:3e:
93:a0:58:a0:1d:a2:7e:6c:0f:e6:0b:a4:5c:db:1f:
a7:fd:a7:4f:b9:c5:f9:f3:48:16:51:3a:a7:4e:7d:
69:ac:49:d2:b5:a9:bc:f3:1e:de:f3:1c:11:7d:e3:
96:f7:da:e8:e5:a8:21:26:51:09:30:23:82:4b:d0:
aa:99:25:6c:47:76:fa:b5:2a:36:3d:0c:bd:1e:11:
36:28:6c:c0:13:50:42:50:60:2c:d4:b2:9c:e4:22:
f2:7c:b4:b1:df:48:2f:17:26:fe:ed:db:47:40:b1:
ce:12:1c:24:35:80:a6:7d:02:4a:9e:26:98:fb:b8:
6d:0c:50:37:6c:8f:64:2f:67:e3:b7:eb:0a:85:fa:
cc:6d:4b:18:1f:d4:64:59:56:ee:68:b9:bc:89:51:
54:b5:a7:d1:b6:b8:a5:74:69:12:56:2f:4a:c3:46:
ad:cf:b5:39:c4:6e:9e:e6:1e:b5:a3:af:e3:b4:69:
91:dd:0f:b7:a7:6e:40:85:19:75:b5:68:59:37:91:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BD:B1:AA:9F:19:8C:3C:F7:B6:FA:87:28:01:80:7F:47:D9:2A:B7
X509v3 Authority Key Identifier:
keyid:A9:1F:E2:67:2C:8F:1C:12:B2:7A:DA:0F:CC:BA:A7:C2:12:CB:D7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qR_iZyyPHBKyetoPzLqnwhLL1xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6c06c9-3f46-4658-ae89-9bf226402fd4/1/qR_iZyyPHBKyetoPzLqnwhLL1xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:30:51:17:80:e4:2a:21:53:42:d6:87:42:6f:a3:ba:a0:04:
29:76:06:38:ba:a9:c4:a6:f3:eb:2e:fd:c8:fd:e2:ab:21:e0:
4d:29:35:66:70:73:a4:7a:a0:1e:94:aa:79:ce:93:26:42:b0:
fb:bb:96:06:d7:c0:17:4f:67:be:19:9d:96:80:23:59:d7:2b:
99:ec:bf:14:a1:b8:ad:33:fe:11:4f:e7:04:08:20:c0:f4:fa:
46:0f:e9:de:ae:b8:6c:80:ea:cb:f1:50:04:3a:3b:59:06:26:
67:41:13:7d:ef:af:1b:cb:d5:22:ce:33:e9:fa:d7:a4:b3:1f:
11:79:3b:0d:63:3e:e7:be:5f:ce:0c:db:47:43:3b:dd:07:8a:
cd:4b:77:e4:6d:5b:cd:7c:55:56:0c:02:29:f3:df:ba:a7:7b:
5d:58:90:6f:bb:c6:9f:c6:0b:f5:7e:e4:cd:00:88:48:2c:ac:
33:e7:8c:47:df:0d:cb:7a:1d:ac:7d:74:68:94:dc:57:41:84:
af:db:4f:8c:7a:09:8c:03:05:ac:bf:6f:a5:b0:b0:f7:cf:9d:
d4:a5:5c:64:ce:d2:17:5c:eb:9d:ef:11:83:8e:7b:06:0b:d9:
d3:a6:44:34:8b:76:92:fe:d3:00:1b:27:a4:c2:2e:83:ca:fb:
cd:78:47:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:02:32 2025 by rpki-client