Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
File: qIXNvd_X0TFoRb609zmPPOZPrNA.mft (raw, json)
Hash identifier: iwlkcEgrr2cyWZiaysUTDvkkA/iYiUyc6FEvdk1XmcU=
Subject key identifier: FA:9C:2F:97:EF:47:83:9E:EC:83:47:71:44:11:A4:11:4F:DD:E9:2C
Authority key identifier: A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
Certificate issuer: /CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Certificate serial: 0198D5BBA824B838B3B0C2C1B4EE65F59F33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
Manifest number: 138C
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: qIXNvd_X0TFoRb609zmPPOZPrNA.crl (hash: NRARBEgvBWlQp8UJhpdL1pd0y33N2ymDwbU1A0HPsgM=)
2: xtTCfWlyctb3-ZIARtvZc7gD2_c.roa (hash: DoO5FfFnFM++vEGajImQDDKEPB+yqs7BrAr2CdTgfGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a8:24:b8:38:b3:b0:c2:c1:b4:ee:65:f5:9f:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a885cdbddfd7d1316845beb4f7398f3ce64facd0
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=fa9c2f97ef47839eec8347714411a4114fdde92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:7f:e9:1d:6c:62:8e:1a:bd:fb:67:c8:28:
77:71:82:e8:55:0d:6a:81:34:35:74:b0:8c:1b:f7:
ec:4b:a4:61:bb:04:cb:b9:98:c6:55:68:48:9e:0a:
b7:05:ac:78:d5:0e:2e:8b:89:85:63:ec:4e:c6:9c:
8d:72:db:4b:a1:ff:75:79:05:5e:ca:6b:57:35:0d:
15:e9:57:8c:45:ac:12:f2:84:75:ee:c8:72:b9:4f:
0e:8e:e0:93:f5:e8:15:93:36:b2:58:09:90:6e:6d:
13:e5:aa:af:b0:f4:f3:ee:28:81:33:4a:ad:0a:6d:
f3:f8:95:66:2a:e1:a9:ea:85:0b:00:ce:67:e6:11:
2a:ef:0b:1b:9e:8a:2a:d8:98:a5:7b:5d:1c:d3:3c:
5f:43:1f:50:a3:ab:f1:14:07:ed:13:aa:8a:1c:b8:
a7:43:a9:a2:0c:aa:49:ae:fc:b9:b6:7b:59:97:6b:
c7:8c:6d:f0:82:db:7f:ea:0e:03:49:87:ef:18:c7:
9e:0a:0c:ed:a4:2f:b5:a4:48:07:87:a0:a8:e3:16:
f7:6d:64:12:d7:96:de:21:08:5f:c2:2b:fd:8f:ca:
d5:8e:fa:90:3e:96:f7:d8:a5:95:d9:a2:1a:07:12:
69:6f:a0:cf:fb:71:b3:63:39:a9:f2:70:26:b5:68:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9C:2F:97:EF:47:83:9E:EC:83:47:71:44:11:A4:11:4F:DD:E9:2C
X509v3 Authority Key Identifier:
keyid:A8:85:CD:BD:DF:D7:D1:31:68:45:BE:B4:F7:39:8F:3C:E6:4F:AC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIXNvd_X0TFoRb609zmPPOZPrNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b3a576-50cb-4866-be81-f4827800b0c8/1/qIXNvd_X0TFoRb609zmPPOZPrNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:99:0f:ae:28:79:6e:16:c4:6a:c5:7e:9d:df:4e:d1:38:39:
61:4e:c9:a3:66:a0:44:1b:2f:06:2b:61:be:29:e7:9a:a5:aa:
53:35:10:1f:a0:50:2d:96:1e:98:89:a8:0c:eb:27:af:32:23:
14:bc:c1:3d:cc:39:d6:59:c3:a0:00:40:ef:88:8f:a4:39:1d:
57:be:a9:4b:57:54:4e:79:0e:3a:fc:a8:e8:74:55:a7:6f:d2:
79:d4:56:f2:dc:20:ab:5c:ea:78:71:e7:34:81:bc:6d:bf:bb:
80:e9:df:bb:a3:44:66:5b:c0:4c:b2:3e:7d:d5:cf:ca:da:13:
ef:85:a8:9e:73:97:6f:4b:1d:11:4d:ee:0c:c1:48:df:43:8a:
bf:ae:b4:51:12:04:2d:68:87:a4:01:07:20:c1:0d:fe:1d:9b:
f6:35:a7:8a:db:78:b4:d6:c6:58:6a:7f:aa:48:9e:99:f9:f6:
c6:e4:62:14:2d:f5:d6:07:8b:57:fa:23:00:26:ff:c6:6d:c3:
2a:80:71:29:57:74:f5:f1:8f:ec:a5:1d:ba:79:9a:b8:23:1c:
d4:94:35:ed:c7:04:c6:d5:02:21:db:c4:52:4f:d2:06:5b:c4:
ed:3e:54:df:dc:f7:c0:69:b2:32:02:06:8c:22:ca:d0:3e:da:
a5:bb:4b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:57 2025 by rpki-client