Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier: 4EDuU54B01C6p/Tq3TEpXQlqPKA7OolQESv/r/MUHdk=
Subject key identifier: 22:DF:3D:42:9E:45:E0:72:2D:29:F0:CA:75:5F:78:B4:B5:7E:E1:C6
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial: 0198D7A8E34AC45BFB1736C247F327477FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 16:00:26 +0000
Manifest this update: Sat 23 Aug 2025 16:00:26 +0000
Manifest next update: Sun 24 Aug 2025 16:00:26 +0000
Files and hashes: 1: jdn52CanAogysSSsHvxl8oKYqEU.roa (hash: nA6uVwF0uVARnhrLjCGdNBrWcovmnCAcVghKvtj+qwk=)
2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: mH61Q2e0D1y05YPQbTcAhi/iUnA5d956KTrhB3YfyD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:e3:4a:c4:5b:fb:17:36:c2:47:f3:27:47:7f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
Validity
Not Before: Aug 23 16:00:26 2025 GMT
Not After : Aug 24 16:00:26 2025 GMT
Subject: CN=22df3d429e45e0722d29f0ca755f78b4b57ee1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:0f:44:f3:ec:32:f7:80:89:2d:31:c5:7e:
6c:4b:08:8a:f2:b8:16:1f:da:ec:84:1d:f1:77:1e:
4d:c0:9e:b3:16:ad:fa:12:4e:b8:3a:b2:69:4f:dc:
41:f2:b0:68:cf:73:0d:37:2c:21:37:89:6f:6d:2f:
d4:13:6d:dc:ce:cf:18:52:71:c4:0f:a4:a0:98:2e:
33:bc:cd:90:6a:d0:d0:d0:42:f8:65:1f:0b:e1:95:
be:94:36:f8:8f:80:01:9c:23:3f:4c:fd:59:3e:af:
d2:06:ca:61:2e:9b:db:a6:a9:95:7c:9a:aa:2b:12:
69:15:d8:3e:c6:b0:2a:a8:d6:90:d6:64:d9:48:1d:
0c:48:50:99:c4:76:77:c9:2b:b1:11:95:1a:1d:ee:
f3:da:2f:eb:08:94:27:66:84:b5:7b:90:03:27:b4:
6f:4d:e6:01:60:a3:ba:01:b5:e0:50:c7:57:08:18:
4b:66:00:b4:06:fa:5b:c7:38:ce:8d:9d:48:ba:d6:
2e:0f:12:da:34:0e:13:13:5e:d6:74:70:f0:c8:04:
0d:44:93:9c:ac:c9:4f:4d:9a:94:ab:9e:01:81:32:
f9:14:fd:25:5a:0c:40:78:51:89:c6:b7:4c:2d:cc:
07:a2:c9:7b:d8:38:0f:f1:3b:66:e8:5b:a1:ab:0c:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:3D:42:9E:45:E0:72:2D:29:F0:CA:75:5F:78:B4:B5:7E:E1:C6
X509v3 Authority Key Identifier:
keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:78:03:9c:11:0a:e4:dc:c0:58:47:ed:c8:34:c0:83:ef:9c:
ef:a5:c5:46:27:ae:8e:13:5d:03:d1:ac:6b:e2:af:21:64:f6:
13:f3:ef:ee:34:36:61:57:2f:23:ce:ce:45:81:e6:f5:ff:83:
08:ed:d7:45:12:b1:c5:ab:88:29:ba:6b:f6:a5:82:e0:74:11:
3e:b1:9f:77:be:52:2a:23:e4:24:f7:25:2e:37:6b:42:7d:92:
b5:30:10:a0:4f:f1:22:f3:b7:9d:f0:1e:b9:79:be:d2:53:27:
49:3b:6c:e5:47:ed:1a:a7:b1:40:4b:94:1c:1b:e2:0c:b1:37:
cd:a8:be:fc:a6:ac:38:50:15:51:51:6e:3a:73:f3:cf:c0:3c:
c0:1d:52:ce:2f:2b:e7:58:16:78:87:b5:30:f4:fc:c2:96:1d:
c5:c5:c2:92:e7:7a:75:0f:42:08:66:31:d5:2a:d1:19:54:af:
93:2b:27:2b:09:83:9e:fb:6d:68:47:89:20:4d:74:3e:1a:43:
70:15:2d:f2:87:40:c2:0f:bb:81:16:82:63:5c:67:77:41:70:
87:1e:17:41:9b:89:b7:00:87:0c:e1:ae:44:ea:6c:7a:ff:21:
09:e7:55:aa:cf:57:6f:c6:51:3c:a9:2c:ab:a6:23:7c:b9:b6:
e8:0a:ec:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:45 2025 by rpki-client