Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: 1VHHZ1IgPNw7hbTsNXo73M4cOaHHOp1Wl70Nujqr/Nc=
Subject key identifier: 45:2D:62:A3:A2:D8:06:00:13:06:F6:36:F0:F9:33:39:AB:AA:BF:28
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 0198D66017B4D403D059971D29E2B1DA183E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 10:01:18 +0000
Manifest this update: Sat 23 Aug 2025 10:01:18 +0000
Manifest next update: Sun 24 Aug 2025 10:01:18 +0000
Files and hashes: 1: 6fJ4zkF0Wp752Gh82PiGV0cycFs.roa (hash: zmN/ZdPf9fmMKW0I3LZoD4w3jrap740/mP6rHx2Dkzc=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: 5rmI+8Zh5obYMraS4JQJrLRM5IMpEfm3xn7tmGzIhtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:17:b4:d4:03:d0:59:97:1d:29:e2:b1:da:18:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Aug 23 10:01:18 2025 GMT
Not After : Aug 24 10:01:18 2025 GMT
Subject: CN=452d62a3a2d806001306f636f0f93339abaabf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:19:23:c6:4c:e7:32:e0:fb:8a:8f:36:6e:
1b:5a:33:5b:1d:89:59:ab:f4:56:89:25:74:18:4b:
7e:09:a9:fb:e5:43:80:b7:48:f0:1c:f9:bb:fe:d0:
34:6c:42:f9:b6:04:c8:a3:a8:b3:6f:2f:00:c5:12:
9c:d2:3d:06:0c:c3:89:fd:f8:cd:a4:0b:47:73:29:
d4:d5:f9:c2:d1:85:a9:11:9f:c1:1c:50:b3:38:0f:
e7:1e:0a:0d:f8:37:0a:68:e7:7d:ad:f1:75:09:0c:
99:75:ff:9c:78:63:f0:c5:ce:1d:94:39:02:77:88:
fc:4c:4b:29:84:c3:a5:cb:60:68:35:01:2d:74:b4:
e6:1c:58:8b:f1:93:e4:16:15:bc:17:ff:b2:69:65:
98:c6:f1:35:7a:d4:08:3e:db:18:c0:03:2f:99:c0:
64:8a:7c:37:16:98:b7:01:c0:62:00:e0:74:7c:bd:
5a:0f:15:e1:fe:77:a6:49:04:9c:d1:14:83:0a:bf:
f1:1b:31:03:18:9a:8a:41:d7:4c:3b:8b:46:f3:26:
09:ac:e8:52:aa:26:91:9e:1b:73:8e:86:a0:db:30:
21:08:5a:36:49:e6:4a:1b:b2:d2:68:94:35:7d:5e:
9f:0c:22:63:85:58:3e:1a:8f:29:b1:77:10:19:29:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:62:A3:A2:D8:06:00:13:06:F6:36:F0:F9:33:39:AB:AA:BF:28
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:ea:8c:48:ee:1f:ad:2d:94:e2:15:3e:b3:1e:82:e6:30:
20:e2:23:5f:1c:2a:0e:9d:13:46:76:17:84:01:3a:9f:41:e7:
0c:9b:7a:9f:0f:24:03:a9:df:95:d3:59:6a:03:93:e2:96:f8:
cf:12:1b:41:a6:80:1b:c1:23:f8:35:28:23:59:b3:c1:a5:4e:
19:90:e8:b2:cd:8c:39:46:ec:b2:91:7a:5a:2d:b3:44:7d:d4:
94:8b:d5:3f:5c:92:2a:e9:6e:a4:3a:0b:01:c2:f8:92:b9:67:
d2:47:ab:56:dc:6a:94:2e:f2:c4:f1:db:7c:b6:86:fd:f0:97:
9c:0d:77:b3:c7:1e:d0:21:29:ef:e8:87:8b:7a:95:bb:f8:24:
2c:f8:e8:8f:b2:37:a2:f6:87:7d:8f:a9:17:ad:49:0c:1f:6e:
b3:54:8f:69:0f:46:a3:f6:0a:3a:da:82:88:c9:12:60:4c:b6:
ab:6a:60:f0:ff:83:45:7f:b1:d5:da:11:72:4d:aa:49:fe:d4:
ee:9a:fa:04:c6:af:99:e9:9c:64:30:21:00:20:2f:33:86:73:
e2:53:09:57:38:05:f6:db:4c:1c:78:c4:39:12:cd:a3:eb:0c:
87:61:c2:9a:0f:9f:98:25:1c:d2:12:da:7a:d8:41:3f:4b:bd:
de:1f:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:57:28 2025 by rpki-client