Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: ZrxkYE31LDp3Cni/277MDphx7KpY0PLQdR5T5VFCI/Q=
Subject key identifier: 90:68:9A:C4:ED:E7:C4:1A:B8:28:94:ED:EE:47:39:A7:3F:86:5A:6E
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 0198D7E14BA8D0FA6B33AB288F7334A70FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 0FF7
Signing time: Sat 23 Aug 2025 17:02:02 +0000
Manifest this update: Sat 23 Aug 2025 17:02:02 +0000
Manifest next update: Sun 24 Aug 2025 17:02:02 +0000
Files and hashes: 1: Y18PuvKbRb3I33NFZERrmAggZBw.roa (hash: ulNop87p1OPj11wBSOeR/0XOStdPoDj14N+Cgskicec=)
2: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: gkMdeZikVyQKyhwUje4JDvRE0BQngWf2xX6GIp6nB/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:4b:a8:d0:fa:6b:33:ab:28:8f:73:34:a7:0f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Aug 23 17:02:02 2025 GMT
Not After : Aug 24 17:02:02 2025 GMT
Subject: CN=90689ac4ede7c41ab82894edee4739a73f865a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:2f:34:41:96:a4:af:37:90:a5:4e:3d:68:
4a:06:6c:6b:41:fe:23:74:c5:63:d7:55:9b:4d:03:
cc:52:95:fc:7a:88:c7:1a:9c:6b:fc:21:c9:30:9c:
67:a6:13:ae:bc:d7:62:19:6d:83:44:33:3b:08:a2:
60:bb:57:f0:f4:c7:7e:de:06:dd:b4:0a:b1:f4:35:
74:cc:3a:11:84:3c:01:40:cd:b5:1e:de:8e:ed:b7:
1e:63:1c:32:ac:64:13:8f:d9:59:1b:a2:81:c2:eb:
eb:19:1f:73:6c:53:08:2a:2f:51:47:bd:a4:60:ee:
34:3e:74:38:6d:87:a6:2a:2f:20:18:6f:b2:e0:32:
9d:a3:50:ed:cd:e6:00:cd:46:a4:e8:06:61:d6:63:
1d:36:e9:b5:0f:40:8b:9f:33:6a:4e:58:82:e5:f1:
9e:9b:49:5e:3e:bf:78:b9:ac:40:f8:c1:3e:93:c5:
93:47:13:54:0f:4e:29:41:13:6d:cd:16:26:93:26:
d3:0e:a7:5e:85:6c:30:6a:9d:e0:7d:fa:c0:ee:6b:
a4:71:20:84:0e:44:b7:bd:a5:ec:51:4f:84:c3:72:
c4:ac:16:5a:8b:48:49:a5:41:77:51:4f:2a:49:c7:
62:83:24:16:20:c3:fe:63:9d:cb:bc:cd:8c:aa:f9:
d4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:68:9A:C4:ED:E7:C4:1A:B8:28:94:ED:EE:47:39:A7:3F:86:5A:6E
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:d5:08:54:a7:9c:31:21:fa:99:18:8f:a9:85:30:6a:e2:
a8:f1:f7:0c:36:3d:44:64:ca:b7:1b:18:71:2f:71:2b:75:80:
90:fe:76:0c:f8:f1:5c:a0:db:92:d0:ce:dc:24:89:6c:ef:8a:
9b:ca:e4:04:3d:50:21:ee:a2:82:4e:fa:61:91:64:b7:fe:ad:
6b:2a:50:74:55:35:6b:bb:30:23:c6:79:8c:44:8a:e3:87:d9:
1f:d2:5b:73:01:f9:d5:e0:92:51:cb:43:72:75:4a:71:61:22:
e8:fa:d4:26:69:dc:77:18:b9:d4:6b:85:1e:86:10:a9:e1:d5:
06:bc:5a:6b:31:54:64:8f:dc:e4:c4:b8:12:91:80:a8:f1:74:
3e:88:92:9a:01:db:b2:e0:35:3c:06:f8:2d:78:37:95:71:08:
03:2f:d0:c6:76:aa:a8:01:4f:9c:36:27:88:0e:65:c7:0e:90:
18:1b:e1:1d:cf:02:f6:5a:c5:af:37:ab:00:c3:4c:3d:ee:00:
e3:af:80:29:18:dd:d7:9c:41:d4:87:8c:56:39:06:57:ba:9a:
03:bd:85:7a:74:0c:7d:90:50:c7:80:b9:93:12:94:57:cf:ce:
de:88:ef:7a:6b:fa:19:46:7e:e7:b6:f5:96:31:00:13:28:6f:
38:79:7c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:57:46 2025 by rpki-client