Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
File: qipYxpehRJl2sNEdbxJgJeFAicY.mft (raw, json)
Hash identifier: Gm6eZ0WH6ciTGnJp0DuytzFqUD4ELxTTk8tx3JjBh8c=
Subject key identifier: CE:75:70:0E:32:97:C8:7B:00:ED:0D:BA:70:4E:D6:55:15:47:77:01
Authority key identifier: AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
Certificate issuer: /CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Certificate serial: 0198D66105631ABC2559A6324925334BFB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:02:19 +0000
Manifest this update: Sat 23 Aug 2025 10:02:19 +0000
Manifest next update: Sun 24 Aug 2025 10:02:19 +0000
Files and hashes: 1: VAOvYC0rpjyTuLuRBfTKmUOuh7I.roa (hash: 0vjmq1kF1TMQbQcMXUeFVD45hSzNPAtogdVXVCWqxwQ=)
2: iBm_nleUbu7zG2yhTM8e6MdS9CM.roa (hash: 6E9IJHdRNDgzTSIdwSFE5QhmL7tpMyjTB0okAPytvXs=)
3: qipYxpehRJl2sNEdbxJgJeFAicY.crl (hash: HMr+kL/DObWVvyIsYTGIlLpn337JlPibv4vdGOIF0ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:05:63:1a:bc:25:59:a6:32:49:25:33:4b:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a58c697a1449976b0d11d6f126025e14089c6
Validity
Not Before: Aug 23 10:02:19 2025 GMT
Not After : Aug 24 10:02:19 2025 GMT
Subject: CN=ce75700e3297c87b00ed0dba704ed65515477701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:7e:15:c5:3a:68:07:98:95:fe:b1:14:6d:
93:8b:0c:20:38:1b:9b:41:08:67:83:59:43:e7:ee:
6c:07:fa:b0:99:04:f9:1d:cc:bb:e3:c2:6a:ef:6b:
eb:11:64:eb:8e:e9:3e:9b:37:1c:d2:da:e9:de:84:
a8:2d:72:26:94:95:34:32:e7:20:4d:49:1e:48:cd:
46:c4:d3:48:11:7e:e3:de:ee:43:5f:71:88:7f:4c:
5b:ef:9d:61:f0:3f:49:43:ff:6b:71:2e:ed:ab:d0:
44:3c:a6:87:79:68:21:f9:34:ab:cc:e1:5f:a4:f0:
3c:06:59:83:5e:8e:8c:82:ed:a9:02:21:ee:77:fd:
95:de:2c:4c:e5:fd:4a:7a:55:96:9d:ee:48:29:08:
6c:4c:3c:3b:98:40:40:44:b9:45:6f:b9:ef:02:b6:
d4:78:77:92:88:2a:de:f8:ac:b0:fb:ea:0a:4a:62:
4d:a2:8e:f5:d4:ba:4f:d9:bf:84:35:f5:d1:d8:20:
a5:d8:ee:ad:aa:60:dd:2f:73:46:e4:32:b2:99:67:
03:2c:a5:79:73:2c:88:5a:41:bb:da:f9:b0:d5:55:
19:06:7b:4b:a7:73:c7:52:8d:90:a0:9a:f1:cf:6a:
3f:98:f6:db:df:91:39:fd:22:9b:ba:16:1f:a3:0f:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:75:70:0E:32:97:C8:7B:00:ED:0D:BA:70:4E:D6:55:15:47:77:01
X509v3 Authority Key Identifier:
keyid:AA:2A:58:C6:97:A1:44:99:76:B0:D1:1D:6F:12:60:25:E1:40:89:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipYxpehRJl2sNEdbxJgJeFAicY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3142a5-d92d-4d06-8228-be622c3132df/1/qipYxpehRJl2sNEdbxJgJeFAicY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:65:1b:84:2e:ec:d8:18:4b:c2:53:5b:3e:de:0c:b5:a4:07:
ec:16:53:4b:6c:39:ac:b5:46:4c:f8:72:49:19:4a:91:2c:a1:
e5:78:82:28:e5:25:46:40:27:58:e9:27:a5:8a:1a:48:0b:8f:
07:79:a5:9a:69:92:57:f1:e1:f8:cd:8c:c7:78:9e:04:12:d9:
28:1b:ed:38:d8:fc:80:6e:4e:a9:49:3d:46:ad:6a:c4:dd:9b:
31:ec:ca:6e:7d:bc:ca:5e:e4:11:bb:70:b7:6f:55:b3:72:69:
93:1f:2b:fb:3b:59:1c:a0:a9:4e:c5:71:12:e8:25:34:e7:72:
27:0f:95:43:9e:59:54:c0:cd:cd:ac:6f:d2:92:b9:9e:71:60:
7d:ee:9c:f5:67:13:eb:b8:8f:30:ca:f3:e9:ee:70:2f:b2:19:
83:7d:bd:e5:2c:80:b4:d3:bd:3f:6f:66:67:cb:2c:f0:23:f2:
71:eb:51:49:77:1f:c4:c5:e7:68:ed:13:40:e5:e2:1c:36:a3:
63:9a:3d:db:7c:7a:6e:0b:57:64:9d:51:6b:76:aa:9d:1f:fa:
cf:18:ac:15:6b:4f:e5:b2:d9:35:8a:bf:52:a8:ee:59:83:cf:
e8:71:f3:9a:17:13:55:a2:6a:62:a7:3a:02:ac:77:5d:35:4d:
de:8d:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:36 2025 by rpki-client