Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
File: qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft (raw, json)
Hash identifier: ZEZXeK+cM9HA5+icdMgwCY4aMH2aqz5h9W0j/UCm5Cg=
Subject key identifier: 4E:13:FD:48:73:9E:C9:6C:D8:70:F8:0A:9E:F4:91:48:A1:45:74:E2
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 0198D54EB871198EEA104AA85B3B76B059DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
Manifest number: 112C
Signing time: Sat 23 Aug 2025 05:02:42 +0000
Manifest this update: Sat 23 Aug 2025 05:02:42 +0000
Manifest next update: Sun 24 Aug 2025 05:02:42 +0000
Files and hashes: 1: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (hash: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=)
2: JyKT5t-tp9Ns-zQBDf52afbSU90.roa (hash: vZDex2xJzEBhdxg8YwQEm5MoYizntTQWWZeFLfZB0Ls=)
3: qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl (hash: nUsZ2jV7tQYLwExKMm9pNvgiTTtSnyPw708OV67SdF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b8:71:19:8e:ea:10:4a:a8:5b:3b:76:b0:59:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Aug 23 05:02:42 2025 GMT
Not After : Aug 24 05:02:42 2025 GMT
Subject: CN=4e13fd48739ec96cd870f80a9ef49148a14574e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:be:b1:28:a8:7a:91:80:e5:34:00:50:85:13:
10:b9:6b:cb:8b:97:60:c8:24:cf:de:de:87:14:a3:
d1:66:02:63:9e:75:09:51:08:17:c5:82:14:e7:c3:
a5:f1:75:7e:1d:f0:58:dd:85:a3:0f:c1:f4:f6:90:
ed:59:c6:5d:a7:ae:54:37:1a:c5:30:15:10:2d:d0:
4d:59:e1:93:e0:79:13:4c:ef:ba:03:13:d3:0c:cf:
29:45:5d:40:49:c6:55:70:ac:b2:19:88:ee:c6:72:
e5:99:6c:31:17:f2:7c:59:25:0b:b4:18:64:c1:1a:
ba:0d:39:64:00:55:69:30:04:a3:54:c9:e2:78:4f:
f3:df:6f:96:7e:c4:48:27:24:c6:70:74:1e:1d:a0:
34:42:9b:98:6d:59:8f:db:f8:82:c6:d7:eb:f7:78:
9a:08:8b:a3:31:3a:26:91:dd:39:8e:eb:f2:33:21:
c7:8b:82:29:14:5e:db:e8:ec:c3:c1:de:47:e5:e0:
ed:57:cd:5b:7c:1e:37:40:f2:71:21:48:21:40:c4:
47:25:1b:a8:f3:d1:4c:83:54:b0:e7:8b:99:1b:1b:
ed:a5:1d:45:24:ea:2b:04:66:35:9c:7f:7d:64:e7:
e4:1e:d3:5e:53:3f:86:11:21:84:7d:0a:bf:ff:40:
0f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:FD:48:73:9E:C9:6C:D8:70:F8:0A:9E:F4:91:48:A1:45:74:E2
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6c:cc:e5:81:dd:c4:9b:7d:91:14:f6:65:1c:0c:2c:a8:01:
32:d5:0a:c6:00:54:93:f1:cc:e3:8d:a2:d9:2b:19:4b:f3:0e:
d4:5c:24:ec:71:97:f5:2b:b2:4a:d2:2c:0f:24:dc:f3:5b:ae:
e2:cd:63:7e:63:10:fa:62:bc:59:fd:d8:c2:b7:ed:6d:c7:40:
38:69:1a:a1:65:2b:70:26:a1:f4:a8:c2:97:2d:07:c1:13:46:
8b:a5:90:81:71:15:d4:e6:dd:c9:c3:56:c4:a8:b0:ef:c0:bf:
b3:34:b7:5e:e2:d2:83:48:31:c0:33:fe:65:b2:c2:2a:1f:e6:
34:1a:82:3b:90:37:83:97:92:55:36:07:ac:a5:d5:cd:fc:9f:
6d:50:a6:c5:fd:e5:9e:58:2c:44:97:a4:67:be:77:a8:d4:09:
e1:ee:e2:0a:a3:e2:1c:44:8d:15:86:56:e2:88:b6:fb:6b:1f:
1f:9b:0e:11:67:97:62:56:db:83:ad:0e:3c:8e:3e:be:00:84:
3e:c5:a8:15:bd:8a:95:44:b2:2f:48:75:97:9b:36:81:e6:f3:
be:6a:fb:27:f6:66:c5:3d:29:de:85:80:9e:10:ae:1d:ec:49:
f8:6b:3f:a8:73:ab:9e:30:c8:09:94:65:23:32:fb:cc:60:53:
e5:da:e9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:59:15 2025 by rpki-client