Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
File: qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft (raw, json)
Hash identifier: F7OBBzwt5v1n5/AEmnJSf3Y9sh2UHpj5BSC5HgR6hCo=
Subject key identifier: F3:B6:71:0C:A5:DB:DF:27:D4:7B:44:92:D3:41:3C:CB:DA:7A:B5:4F
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 0198D583BD16D324BD26CF8ECF06EC65BBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
Manifest number: 0B89
Signing time: Sat 23 Aug 2025 06:00:37 +0000
Manifest this update: Sat 23 Aug 2025 06:00:37 +0000
Manifest next update: Sun 24 Aug 2025 06:00:37 +0000
Files and hashes: 1: eZOZdw0xvypBF51rN4RfpY5h6vA.roa (hash: Rrqkszl7rnzrAJTcRtFLjvZXJPc9ZovjcSYFWUvutzY=)
2: hefvQQC5HBlbQ-EPV5xNwJ9mr8s.roa (hash: Ud9jnh2NMlpw3d8NsGfrdGK8oljkEFrFbqnJTHG6eJE=)
3: qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl (hash: w1OfddepWk3jLAxLJ9s/gZYmG+NSFmlXXDXBEMYHDEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bd:16:d3:24:bd:26:cf:8e:cf:06:ec:65:bb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Aug 23 06:00:37 2025 GMT
Not After : Aug 24 06:00:37 2025 GMT
Subject: CN=f3b6710ca5dbdf27d47b4492d3413ccbda7ab54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:08:12:b9:e4:25:cc:a4:4a:d8:dc:87:47:
b3:b8:a3:7c:07:ac:81:cf:d5:c6:59:80:0c:4f:c6:
78:0e:31:55:fa:43:4d:a6:2a:d7:30:1d:23:e7:63:
0e:a6:7d:32:28:7b:8a:ed:c8:3a:ec:d1:d4:e0:42:
18:64:6d:be:84:fe:00:b1:44:34:c3:89:e2:6c:e7:
40:5b:31:e8:94:4d:7f:43:3a:8a:36:65:1c:bd:24:
76:58:a2:0d:4f:eb:80:8a:06:d9:ac:9e:89:b8:2d:
3b:b5:a3:e1:e5:28:bb:11:fc:84:89:ef:c0:59:41:
34:b4:31:43:be:bc:31:0d:1b:2f:c6:c6:bc:08:b8:
28:ed:b8:82:89:e2:2a:57:0b:63:be:5d:58:e9:2b:
22:ac:30:7b:a2:25:91:9d:d5:ea:a6:13:8e:4b:da:
37:81:5d:ee:cd:ec:e6:6f:90:69:12:6a:be:a0:91:
53:24:35:48:e9:f6:46:03:82:49:79:19:66:d6:7e:
38:3e:b6:8f:b9:1f:75:2d:f8:38:b7:43:b5:e1:2f:
08:c9:dc:2f:42:10:67:e1:be:71:5b:65:c2:5c:c3:
b8:ce:0a:9d:d5:3b:1c:75:5d:67:7c:dc:84:24:ab:
74:20:cc:3a:82:7a:5e:a5:bf:e5:cd:c7:b7:46:3e:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:71:0C:A5:DB:DF:27:D4:7B:44:92:D3:41:3C:CB:DA:7A:B5:4F
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2e:aa:76:d1:50:69:d6:05:62:39:63:c6:68:87:d3:0c:ca:
4c:de:8f:7b:fe:f8:61:8e:ad:9a:1b:ce:db:d3:21:eb:5f:5e:
21:ae:64:c2:a7:60:07:b8:31:61:da:e4:14:7d:9f:d9:1e:0d:
79:9a:54:27:a2:2c:a2:ef:89:d5:5d:97:44:7d:fd:6d:83:d6:
b3:65:22:95:48:97:4b:5c:08:0b:31:3b:75:63:ee:31:1d:8e:
53:d4:f8:3f:a9:23:ea:b7:2f:fd:bb:22:a4:17:0e:b8:9a:81:
f7:ce:fe:3b:31:69:f0:b3:9c:7f:4a:b1:62:47:8a:d1:3e:cd:
c2:d8:71:41:43:8e:34:bc:cd:f8:7d:e4:ab:68:07:85:f1:47:
0f:a3:b1:72:a2:5c:7b:f3:85:08:b0:fb:b4:6f:01:02:1e:45:
51:8f:84:65:7f:40:6f:c2:79:0c:74:90:df:af:62:ce:4c:0f:
eb:4c:27:a2:1a:6e:31:d8:fe:76:1c:f8:a6:6a:2a:95:2d:bc:
0b:24:76:22:73:cc:90:dd:bf:2a:30:9f:f7:82:bc:2f:76:38:
27:bb:0a:97:57:31:a9:7c:68:54:57:39:68:90:ed:d4:98:94:
7c:85:50:61:8c:2a:76:61:7b:65:80:2b:61:ee:58:d0:71:9b:
1d:77:fe:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:55 2025 by rpki-client