Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
File: qJbB4UyG5u9bFnJPcRdnbschSVc.mft (raw, json)
Hash identifier: j+eaaN4zbwi7KPMnQh9huYetshvhkdaeLToQzn9S0ZA=
Subject key identifier: A1:C2:15:2A:78:9C:83:B0:C2:3D:1E:18:9C:45:F0:D2:CC:C2:5A:B0
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 0198D51593F8E1D1697091222361E7C21646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 04:00:17 +0000
Manifest this update: Sat 23 Aug 2025 04:00:17 +0000
Manifest next update: Sun 24 Aug 2025 04:00:17 +0000
Files and hashes: 1: nHAl3SgY4EfLu7utGVmeJZcr1_s.roa (hash: lrIHVcXwhi/Eq6CWKi+Aq4ByD1FHp2btPHqZK4Ez+BE=)
2: qJbB4UyG5u9bFnJPcRdnbschSVc.crl (hash: eipMW7emaPoFdquJggobpztr0U+DbdLaezY5pwWRdko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:93:f8:e1:d1:69:70:91:22:23:61:e7:c2:16:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Aug 23 04:00:17 2025 GMT
Not After : Aug 24 04:00:17 2025 GMT
Subject: CN=a1c2152a789c83b0c23d1e189c45f0d2ccc25ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:ea:c1:9a:ca:a3:ea:5a:4f:8f:c7:0c:4f:
f1:de:11:4a:f6:0f:63:64:b8:c0:51:f0:a9:ca:6e:
f7:d0:3c:e3:d1:0c:d7:ae:f6:c5:8f:6c:fa:b7:29:
cc:e4:2f:33:17:db:df:ee:22:c6:15:e3:e9:ef:7e:
3b:11:29:e4:76:61:ca:a7:83:55:57:ca:5b:bd:98:
e6:52:b1:0f:73:1c:90:56:a2:b5:aa:73:ed:bb:f3:
e3:8f:07:e7:e5:f2:22:85:f3:43:d9:59:67:be:6d:
dc:fd:de:e8:a3:ed:28:17:72:ce:6f:7d:9d:ef:c7:
8f:b1:c8:68:3d:b6:c4:7b:ad:b6:46:60:d6:15:bf:
57:56:84:1d:2d:77:37:0d:46:ac:36:3c:c0:0e:2d:
5f:27:cb:68:32:d9:1a:a6:55:80:2a:58:d0:fa:57:
21:3b:4f:ff:41:a3:b8:0c:9c:23:33:01:6e:07:16:
91:9a:5d:e0:23:76:8b:4c:a3:61:a3:50:a5:ba:36:
43:97:ad:7a:48:69:c5:88:96:ee:5a:ca:c2:fe:35:
5b:1b:31:e2:8e:c8:69:71:84:68:43:d9:e6:87:3d:
b7:c7:aa:c5:ea:5f:14:1b:0a:a0:2b:6b:42:86:b5:
a5:a2:5f:25:36:ad:45:f5:12:d8:c5:af:72:32:71:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:15:2A:78:9C:83:B0:C2:3D:1E:18:9C:45:F0:D2:CC:C2:5A:B0
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a3:b3:85:a4:0f:2d:7c:70:b9:59:cb:6e:6f:87:21:7d:0e:
ac:71:02:d0:88:66:5b:5a:73:c8:32:a9:7d:cf:98:72:b8:da:
a8:d8:4a:a2:a2:71:50:44:28:2a:68:c7:51:b3:68:b7:4b:0b:
70:34:ce:bb:90:26:4c:de:57:0e:cd:2a:0f:24:dc:e2:aa:7b:
18:6d:b9:7c:d3:05:ec:20:d4:1e:19:32:65:75:0e:85:4a:33:
96:93:78:9c:3d:01:bc:67:37:ac:a7:47:91:e0:5b:78:02:29:
fa:4e:2b:0c:e4:6f:0e:d2:7c:2d:f0:99:43:0a:20:68:7f:36:
55:62:22:43:c5:e4:29:c8:04:6d:30:e3:e3:94:10:b4:87:04:
26:3a:f7:81:8b:86:74:46:a0:f8:65:c8:c7:ee:a1:07:e4:a9:
01:6c:91:7c:1a:a7:91:58:16:da:52:b5:9e:b0:a3:0b:40:c8:
8b:fb:4e:45:6e:0e:be:e0:8c:b3:78:66:2d:1e:0b:c1:37:fc:
1e:9e:21:69:2c:13:a6:f3:8d:7e:dc:89:0c:df:58:4e:02:43:
2f:57:ac:55:33:0e:28:ca:0c:db:fc:39:de:04:3c:be:4b:d9:
f3:3d:29:b0:c9:b1:ec:1c:92:c4:f0:75:29:c3:03:9e:fd:37:
47:5c:bc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:27 2025 by rpki-client