Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: Y1cFFI4Koz6MDgNgfDkjdczo0MERXIiQ1r5DKgRboPw=
Subject key identifier: 76:91:0E:8B:65:4B:78:35:C9:5C:C1:8E:4F:EB:C7:8F:AD:6D:15:0C
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 0198D54DEF628BACAEAB92A88B4AB5DCED5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: Ioovps5s613OBdQzBzryR2Ja3A0.roa (hash: ATzykv0spHuFN9BLvq9b09tLyJhBjFr/aCEbExY3CKs=)
2: aQTW2xIeYuZvcEH7gsYJNqz73Xs.roa (hash: ga2DmH5h7HfJ0XIXHVbsof3jQ3Sa9KHt/wMuvsxWtEk=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: YdhlnTguvMutberV7hM+Fxx3cYuN3y6kiY3q/XJbg8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ef:62:8b:ac:ae:ab:92:a8:8b:4a:b5:dc:ed:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=76910e8b654b7835c95cc18e4febc78fad6d150c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:f8:65:65:fe:0d:b1:51:92:fa:64:89:54:
69:60:b4:06:fd:0e:ee:a5:2b:bf:0f:d6:04:e8:d7:
1b:4a:12:39:74:fe:fd:80:5a:e5:7f:d3:0a:d1:aa:
07:13:dd:f6:0f:ab:75:57:4f:37:8f:ae:a3:a1:7b:
c8:59:77:35:87:50:d0:91:38:02:27:54:5a:4d:8b:
65:37:34:41:54:6f:04:1a:f0:01:63:8b:18:2e:27:
41:2b:6d:ba:8e:c2:b0:47:e8:58:42:2e:47:ca:32:
b2:08:09:bb:f6:31:01:6c:28:24:a4:98:88:e8:1b:
a3:37:55:ad:06:e5:c5:94:b1:43:2d:02:b9:a7:45:
b2:f1:83:dc:12:0e:0b:a6:42:55:bd:8b:56:0a:92:
44:24:e2:15:50:0e:50:a8:4e:63:ee:cb:7c:f4:28:
5f:d2:5f:95:b1:ad:de:07:5a:de:41:8c:99:b9:1a:
0f:21:6a:fc:ca:46:ab:dc:44:73:b2:86:05:b8:09:
00:97:4d:a6:c4:0d:c9:8e:90:88:16:fa:28:e4:20:
1c:23:69:77:f1:3a:07:ff:66:e5:4f:92:7d:86:ab:
aa:f5:d1:56:a7:66:5d:49:93:15:34:e3:f5:f8:4c:
38:bd:2f:6f:ce:e3:98:03:4e:da:af:6a:be:0e:e8:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:91:0E:8B:65:4B:78:35:C9:5C:C1:8E:4F:EB:C7:8F:AD:6D:15:0C
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c7:14:70:43:8a:ff:7e:fd:d1:2d:e9:6a:7b:14:bc:d8:57:
fd:33:5c:46:f6:9e:60:12:f2:30:b1:0b:e6:36:00:cb:31:1c:
f3:a4:82:e0:44:85:0e:2b:c1:1b:74:2f:27:92:e2:ec:96:fb:
b0:85:2f:a3:51:c4:ac:2d:16:42:b0:b4:cb:42:8b:e3:6c:05:
24:6a:59:0e:78:f9:7e:40:a6:8a:80:f4:f4:f7:5e:b5:38:e3:
42:39:23:ce:53:75:8a:5c:c9:62:6d:74:14:f2:90:d6:28:b2:
b1:46:2d:bd:91:88:db:1b:64:69:94:50:53:d0:00:f2:1f:84:
2e:ac:ed:bc:81:6e:51:52:d1:68:aa:62:95:b8:8f:e8:8b:a4:
56:81:b4:36:4f:6b:bf:fb:c4:5a:2c:aa:ac:e5:e3:42:92:f7:
bb:3d:1a:20:0a:f2:2e:cd:a1:04:06:96:89:b5:61:3e:6b:f2:
8c:a3:23:1b:f9:a3:67:86:03:54:60:73:45:64:a3:b7:08:75:
4a:71:24:07:3f:eb:54:a9:5d:51:e9:d3:0f:98:3f:7e:b7:2c:
7b:df:8c:3a:7e:f2:55:ab:21:f9:7e:6e:aa:dc:ab:0c:ee:59:
4a:f9:92:19:8a:87:77:1f:75:ea:27:3e:65:10:0b:ef:5e:07:
b1:85:cc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:13 2025 by rpki-client