Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: NeOnA5epZLGy8eFHrMC+5hMasQsQBpmTk+u5OJXpUe8=
Subject key identifier: 54:E2:29:86:30:53:27:A0:CB:EA:FE:D4:25:56:2A:BF:D9:B7:67:A3
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 0198D583B3B52BEBFD5C4AD8B3EE5C4DBEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: 60OuH53sbW0w+PEuT5VwetBCBtY1oz4fOIOfy0KYVt4=)
2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b3:b5:2b:eb:fd:5c:4a:d8:b3:ee:5c:4d:be:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=54e22986305327a0cbeafed425562abfd9b767a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:ec:9c:ea:b0:7e:fa:c5:3c:35:71:0b:2e:
1a:f5:aa:a9:c8:a4:21:7b:cf:40:36:38:5a:9b:cb:
6e:7a:f1:64:18:35:86:4e:5a:82:35:22:24:22:52:
2d:cf:f3:74:50:d8:a3:d7:87:a7:2e:26:c9:a0:85:
30:5b:87:6e:9b:2e:a4:02:dc:df:2a:3b:a4:2d:0b:
6c:ba:ce:f4:87:9b:9a:48:fa:42:7f:4a:21:ac:37:
17:6e:63:cd:68:40:5c:60:0c:58:ed:50:1b:85:7e:
72:1e:94:0b:a9:2b:7f:ae:44:fb:a1:67:9e:53:00:
52:c5:58:36:91:30:67:33:83:6a:e4:71:01:62:4c:
ce:b0:09:47:5e:4f:e8:d7:e1:a3:fb:6e:a9:f5:e0:
fe:b5:35:5e:24:57:54:a4:01:82:28:18:cc:71:93:
e8:21:b5:59:3b:80:3a:a7:d3:6a:a3:3a:0b:78:6d:
f7:71:7c:7f:54:e1:57:4e:f3:d3:38:10:00:f0:82:
f9:9f:dd:cd:ed:99:a3:69:26:e0:4a:f0:4f:81:2d:
23:76:4f:65:35:ba:91:35:0c:10:b8:88:f9:fd:c4:
c3:11:00:88:2b:7c:2e:30:8f:78:f0:a9:cb:8c:ca:
99:a8:13:f5:83:47:fb:33:e7:97:62:c3:ee:a5:7f:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E2:29:86:30:53:27:A0:CB:EA:FE:D4:25:56:2A:BF:D9:B7:67:A3
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:31:bc:6c:de:e1:2d:7c:6a:11:e5:93:c7:d0:db:c0:73:cf:
64:50:be:e7:26:54:ff:ad:cb:0c:61:7a:79:53:92:3d:c9:41:
53:69:da:43:54:29:42:39:24:c2:88:0a:78:45:16:a1:22:10:
c4:b8:c7:f4:d0:0b:01:b1:14:aa:f7:89:a3:e8:14:43:40:d8:
d4:58:2e:da:13:6d:be:dd:36:a8:42:6e:e8:b4:bc:c0:b7:3e:
72:f6:f7:cf:d0:19:a5:f9:bc:e2:06:90:21:00:19:e7:86:34:
28:97:7d:66:35:04:c8:9a:bc:c3:e4:ef:73:5f:d5:37:93:45:
ed:9a:9c:db:ce:58:2e:5f:3b:50:7b:0a:ff:ce:6b:92:39:33:
8e:1d:f5:ea:2f:6b:77:28:22:a0:b9:02:d8:c2:f2:ed:29:a2:
d9:92:ee:a7:2b:32:9c:43:a4:1e:34:70:9d:f7:be:f8:88:e1:
91:fa:d1:2a:a5:a9:a2:9a:46:ff:3f:ab:c8:3c:d9:bf:20:ea:
c4:8b:ca:fd:3b:e1:e4:ca:c7:d8:10:a6:cd:6f:11:19:56:ed:
14:80:fe:79:7a:ac:d4:28:ce:b8:b4:6d:a1:3d:fc:fe:a0:c2:
91:84:0d:49:7d:bc:86:2a:1b:e4:21:15:b7:cd:e5:9b:3c:27:
d4:59:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:12 2025 by rpki-client