Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
File: qKp6dXaxsilZDAkP01bDgt_zFbc.mft (raw, json)
Hash identifier: 0g/zs6+jy607U9xWmqQmv0DaBquwczO4nj+G3GJ9YyY=
Subject key identifier: 81:6D:86:B8:98:5D:87:2A:BA:BC:64:1B:A5:F8:53:B4:72:89:57:FB
Authority key identifier: A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
Certificate issuer: /CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Certificate serial: 0198D6984573C4B7A90D64FB95758CF2EC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
Manifest number: 1413
Signing time: Sat 23 Aug 2025 11:02:40 +0000
Manifest this update: Sat 23 Aug 2025 11:02:40 +0000
Manifest next update: Sun 24 Aug 2025 11:02:40 +0000
Files and hashes: 1: YiH83ySN13U92VHOYGZ1qNFCvj0.roa (hash: B8hbjbe1F86HPut31UQL0FZp1i37mwSF9nd5leIYsNo=)
2: qKp6dXaxsilZDAkP01bDgt_zFbc.crl (hash: 1CjoiK2BngDrSNsn4IkREhENeir1bIuiu32pO/hrLbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:45:73:c4:b7:a9:0d:64:fb:95:75:8c:f2:ec:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aa7a7576b1b229590c090fd356c382dff315b7
Validity
Not Before: Aug 23 11:02:40 2025 GMT
Not After : Aug 24 11:02:40 2025 GMT
Subject: CN=816d86b8985d872ababc641ba5f853b4728957fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:ac:e0:46:36:df:b3:6d:df:ac:c3:f9:b9:
4e:86:6d:b3:ae:85:67:e5:77:5e:87:19:ce:9e:c1:
46:14:4f:42:04:07:44:72:e6:64:6d:00:d2:dd:cb:
f3:a0:dc:d3:8e:d5:65:20:36:bd:6e:01:77:91:46:
68:d5:f1:4d:95:84:88:02:5f:de:80:0a:84:0b:6e:
c1:23:d0:a1:75:0c:29:32:b1:b4:eb:88:c3:b8:14:
b3:7e:d1:a6:39:91:98:51:1f:3c:d3:22:5e:84:f0:
8a:eb:b4:66:a3:5f:ee:3d:a4:00:67:99:c5:22:5f:
98:d8:bf:ff:5a:91:b2:ef:2b:6d:e2:52:3a:a0:db:
72:4f:e4:e7:a6:98:2e:b9:eb:43:de:9d:93:cd:53:
0c:96:17:3f:fc:68:b8:b4:fd:18:93:d1:1b:58:1e:
d4:1a:2b:d2:4b:3e:17:17:5e:f9:ba:78:07:55:22:
43:8b:59:d6:8a:2e:f3:d3:ac:e6:b4:f7:70:f1:51:
77:45:6e:88:2c:1c:2f:6f:f5:70:1b:ed:cd:4c:5d:
0f:57:6b:ee:6c:1b:7f:65:92:cc:00:87:01:80:c6:
fb:59:30:95:96:fa:e0:39:4b:5e:f8:de:e4:0c:3a:
fd:42:1e:8c:e2:73:3f:ee:cd:36:01:a3:0d:e3:90:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6D:86:B8:98:5D:87:2A:BA:BC:64:1B:A5:F8:53:B4:72:89:57:FB
X509v3 Authority Key Identifier:
keyid:A8:AA:7A:75:76:B1:B2:29:59:0C:09:0F:D3:56:C3:82:DF:F3:15:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKp6dXaxsilZDAkP01bDgt_zFbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5edb3-0ea8-4422-b175-f75345848e3f/1/qKp6dXaxsilZDAkP01bDgt_zFbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b9:43:47:0c:7a:67:79:91:1a:15:32:f3:3e:5f:72:4c:2f:
0e:66:f3:83:79:be:f7:02:50:af:e0:3a:3d:e6:b5:3a:fd:42:
d3:c2:2a:1a:fd:16:fa:58:e3:8e:fb:3a:ad:57:66:76:d3:ad:
11:cf:e8:33:ed:b2:00:e6:5a:5d:22:6c:a1:03:a7:8c:05:8f:
62:df:ca:5d:9c:95:3b:98:4d:0f:a2:6a:e6:5f:c3:c7:bc:49:
b4:27:98:53:c2:bc:53:ab:c5:63:c4:1c:22:c6:93:79:1a:6f:
5f:4a:f0:dd:69:5a:fe:50:16:71:28:78:90:17:36:7d:89:f3:
4f:21:63:ef:38:45:b1:57:7d:d1:cf:50:ad:17:38:c8:fc:4c:
a0:a7:12:fa:5e:6e:5c:1b:3d:30:36:d5:5b:e9:fb:93:b8:bb:
3a:ed:c2:61:a0:11:62:16:16:f1:c9:31:53:ea:1a:31:c1:1a:
c5:05:72:90:7f:95:24:7d:71:60:76:ac:40:3f:10:21:2f:8b:
2e:ba:65:5a:f6:17:9d:9e:af:c8:fb:92:32:ad:2d:25:90:b3:
e0:d1:25:62:75:c7:f2:23:28:5e:9a:29:a5:48:79:48:3f:83:
c8:45:f2:5f:46:4d:b1:2e:b6:ff:fd:19:ca:f6:bb:7b:e7:81:
db:a0:a2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:49 2025 by rpki-client