Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json)
Hash identifier: iZxxliuDzBIdsu7vc8bUVRbYT0wlRmd8vst3iQ1+M20=
Subject key identifier: AD:99:DF:0F:C1:34:4E:D4:D4:A2:DD:D2:2A:9D:7B:A4:71:75:DB:A9
Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Certificate serial: 0198D661372312967CD437747AC26578BF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
Manifest number: 0A58
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=)
2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: xUy9Juq8GEsk8rMD2gmgZK1lsVEIpCM++Oi5OmTAqLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:37:23:12:96:7c:d4:37:74:7a:c2:65:78:bf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=ad99df0fc1344ed4d4a2ddd22a9d7ba47175dba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:d5:48:b5:70:df:26:3a:73:1b:0e:60:de:
5f:ff:41:3d:84:90:c8:53:25:b0:ce:60:cb:2c:cc:
dd:b7:8b:90:f1:73:e6:4a:7a:87:04:99:6a:12:4b:
b2:5b:c6:2c:2e:0c:83:b9:95:e1:b4:ba:26:a8:de:
e5:e9:29:d0:cf:f2:5d:51:4b:a9:d9:9f:14:22:30:
ec:ce:04:c8:3c:2e:81:6b:cd:17:95:07:90:44:ce:
80:75:49:b7:0b:da:d0:37:ea:6d:7c:7f:bc:3e:aa:
2b:f0:74:aa:3b:c0:e2:d0:f5:51:de:91:f1:8f:d4:
52:fc:22:38:0b:a7:18:98:48:03:e4:9a:81:cc:a5:
28:f3:9a:0d:8c:c4:48:89:c9:34:74:18:4d:75:df:
21:b6:89:00:69:39:70:74:be:a8:6c:a5:15:3c:6c:
53:ef:d8:f8:54:a0:f1:02:48:a4:50:ee:c5:5e:13:
99:b5:8d:22:a7:fe:e8:b1:4c:e3:9b:65:63:84:96:
a9:f8:a0:5c:f8:be:aa:35:10:10:09:7c:53:11:67:
a5:fb:f9:ce:aa:a7:46:23:83:c3:2e:50:f4:0a:59:
e9:10:69:f2:15:07:26:90:e0:18:af:1c:54:a0:ad:
0f:1a:11:04:b3:f6:8f:29:bd:6d:e2:2f:93:9e:ad:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:99:DF:0F:C1:34:4E:D4:D4:A2:DD:D2:2A:9D:7B:A4:71:75:DB:A9
X509v3 Authority Key Identifier:
keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ac:0d:81:6b:8a:36:7c:bf:df:34:de:59:0f:21:67:41:bd:
fb:cf:a8:71:be:b2:81:b0:ad:fe:1c:9f:76:ba:a6:83:51:ab:
45:42:f0:d5:49:5a:29:34:8d:bf:8c:d0:ec:5d:e6:6b:a8:2b:
a5:33:6f:f8:cc:f9:fa:3c:1c:0b:ec:00:39:57:b3:bb:1c:4d:
aa:bb:8f:be:ea:5c:93:16:95:a7:05:24:08:85:92:35:ff:7a:
b2:5c:1b:c4:e1:5c:8a:14:74:dc:6a:14:65:fc:49:4b:fa:17:
93:8e:7d:49:d3:b1:2c:93:69:59:1c:24:1d:6d:b5:90:b7:79:
22:54:b7:d7:58:ba:17:bb:04:38:9f:8c:dd:89:73:15:c9:dc:
e9:c8:bc:e7:7d:fe:58:64:40:6e:90:b7:a2:42:9b:5e:3a:28:
8d:de:f5:e9:97:79:47:2f:b9:7e:90:06:38:19:b9:6e:23:64:
cc:39:ef:0a:37:c0:96:b5:59:87:05:52:41:2f:67:e6:e1:1c:
7c:77:86:8e:ff:98:30:c1:59:8a:83:86:69:10:3e:46:b3:89:
65:45:89:82:56:a9:f0:02:57:b8:aa:92:1d:00:62:90:1c:c9:
bc:ff:45:8e:e6:98:b3:8d:b8:5f:43:e1:27:16:ab:80:24:f4:
cf:d8:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:44:23 2025 by rpki-client