Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
File: zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft (raw, json)
Hash identifier: aRmER3aVb4VUBTxI6st7BzgkWcJpYrL8ukoof7M1b4E=
Subject key identifier: E8:32:16:C2:03:BD:C4:EF:B1:CB:4C:06:0D:17:35:B5:E8:D2:10:7D
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 0198D73B8C6E3B184141A41CAFE08797914B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 14:01:00 +0000
Manifest this update: Sat 23 Aug 2025 14:01:00 +0000
Manifest next update: Sun 24 Aug 2025 14:01:00 +0000
Files and hashes: 1: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (hash: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=)
2: pdwDWOzc3QzXOsiEO7HIgZ0hQdQ.roa (hash: m/RIMhJds2RFVXbpbtSSU1vxyz5pEJiQgY8y39qh5vk=)
3: zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl (hash: EoQnwBFPXS9hF6FU27dn6HWVi4qIRSMHR/mjrVuoGn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:8c:6e:3b:18:41:41:a4:1c:af:e0:87:97:91:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Aug 23 14:01:00 2025 GMT
Not After : Aug 24 14:01:00 2025 GMT
Subject: CN=e83216c203bdc4efb1cb4c060d1735b5e8d2107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:66:34:c6:0a:18:97:c9:02:0b:54:73:bf:89:
89:47:e5:c6:7f:01:68:1b:68:65:37:ec:4c:d9:9e:
4d:59:ea:b8:1b:43:be:ef:92:38:4f:d3:6c:af:cd:
db:e9:ee:7e:05:9e:1e:23:03:71:7e:d0:b9:d1:e3:
2b:cf:5f:15:69:2f:66:4e:d1:e6:8e:71:2e:18:94:
e6:96:7f:66:f0:29:86:66:a6:29:b9:56:3b:cf:4d:
c1:ff:8b:c8:5a:83:39:d0:06:16:84:d6:a2:cd:8e:
01:e6:49:7a:d8:d7:d8:00:f5:94:93:e8:0b:40:d9:
a3:a1:bd:23:18:cd:f9:9a:5b:24:06:ff:85:24:fa:
1d:57:59:b8:30:1c:c6:df:cf:9b:11:2e:20:11:8c:
11:38:75:63:6b:28:42:7b:61:25:a5:b5:34:47:e6:
66:5b:bf:bb:a6:33:01:6a:13:27:96:be:af:19:7c:
ed:16:44:ea:43:7e:50:af:9d:ee:7d:07:08:7c:fa:
2e:fc:0f:c5:ba:cd:e6:3d:a3:ca:1a:99:c2:20:11:
05:2e:98:58:70:f4:16:4b:4c:f5:98:04:23:fb:11:
38:85:32:f9:85:96:bf:c9:a8:6e:44:d3:47:47:38:
47:32:02:bf:89:3a:0d:a1:c4:67:48:db:76:1d:56:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:16:C2:03:BD:C4:EF:B1:CB:4C:06:0D:17:35:B5:E8:D2:10:7D
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:20:21:64:7c:8b:a2:5b:9c:06:9b:1d:96:3a:6f:4d:c8:6f:
32:82:03:a7:54:4d:0d:d9:33:68:9c:70:38:2e:8f:6a:7e:4c:
99:a3:70:b8:96:a2:44:04:5f:8d:de:ae:2a:df:aa:33:1c:8c:
c0:e9:83:6d:76:44:b5:6f:57:1d:3f:7c:55:e8:3c:61:3c:69:
a5:c7:96:9e:c5:06:03:f8:7a:76:98:e5:1b:1c:aa:a8:a5:e4:
36:02:57:61:b3:1a:4b:d7:9d:59:b7:49:aa:37:ad:ee:e3:f6:
7b:dd:3a:88:42:86:d4:88:35:10:aa:98:62:45:60:a1:55:04:
ef:28:44:05:01:94:94:68:f0:41:6b:6c:d8:47:33:89:d0:7d:
65:a1:ca:be:db:cf:3b:1a:da:5a:c6:9f:bf:c5:9d:03:a4:2c:
34:f3:2a:68:bf:09:d7:28:4b:81:ba:67:5f:6f:d4:7f:69:ef:
3b:ea:dd:36:ec:55:d5:2a:e4:20:d5:04:f5:32:ec:1b:28:78:
0b:1a:d3:2d:ce:71:89:4f:3f:49:af:12:03:5c:f1:0c:87:04:
05:5d:c8:7b:cb:d0:fd:7a:49:c2:01:dd:9f:42:76:06:2c:46:
48:d7:f6:86:2c:d6:d5:69:bf:8e:7e:49:ec:b2:99:b2:f9:31:
85:3d:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:25:17 2025 by rpki-client