Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: oM5WT/2YF737FZPKEIydELInh3zTve38iQsejjiEBR0=
Subject key identifier: E1:C6:7E:73:B2:FF:95:B0:9B:D9:4E:C3:74:20:35:C1:B9:06:83:20
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 0198D54E98D6EC2D198A4A3992D69FB492BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 014C
Signing time: Sat 23 Aug 2025 05:02:34 +0000
Manifest this update: Sat 23 Aug 2025 05:02:34 +0000
Manifest next update: Sun 24 Aug 2025 05:02:34 +0000
Files and hashes: 1: 9WCFSNeq3GtWGYrTEMgi1QZ4iF8.roa (hash: i8Np1BwcEIXM1Wv7P+uy0k4NCLXiOZxbaT5Q37bgBvA=)
2: YRj1iGRVMCy4RNf6mBvaYvGJnIA.roa (hash: Jm8MJr8XSRnuve3Kq6+Wn+2PsgepRbJEnsM8Cooldhs=)
3: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: LxVsA2gGkQbWGcWPx8vd9YtaUqlykyJfDb6y0ca0lK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:98:d6:ec:2d:19:8a:4a:39:92:d6:9f:b4:92:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Aug 23 05:02:34 2025 GMT
Not After : Aug 24 05:02:34 2025 GMT
Subject: CN=e1c67e73b2ff95b09bd94ec3742035c1b9068320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:04:ed:13:7a:67:3b:94:73:9e:36:a1:d9:0c:
f6:d3:c8:37:34:4b:1a:76:99:75:a7:aa:5e:80:74:
16:19:eb:51:2e:e4:06:7a:4c:9a:1f:29:de:07:7f:
31:30:41:2b:7c:75:5e:82:cd:9c:a5:41:9a:ff:e0:
ea:b1:c3:22:95:5c:1e:3b:10:cc:09:37:b9:7c:8a:
c0:f4:69:c4:c2:35:04:76:9b:40:38:16:38:73:91:
69:6e:12:d1:b9:c0:85:32:16:18:da:35:c8:c3:eb:
1b:65:d6:3a:1a:28:c0:3d:ae:19:04:bc:54:49:1c:
51:40:86:78:44:5a:41:55:c3:b1:10:72:33:23:a7:
71:a1:31:f5:12:43:b2:01:a6:c8:b5:fd:d3:78:d8:
67:c3:f2:97:f4:fd:ee:84:f8:f3:e1:47:f8:9c:0e:
fd:2a:72:b3:a3:11:a9:63:ea:a5:fd:0f:2d:cb:f8:
fe:fa:cd:03:22:f3:21:78:54:11:d3:c8:4b:d0:9d:
a7:09:38:4b:c4:27:89:47:9f:3b:0e:6f:a6:3a:e7:
19:e7:a3:56:98:c9:40:90:17:a8:f8:0d:ea:2e:40:
84:3a:a8:ec:11:6f:54:f6:79:59:07:b3:8e:57:92:
8c:8a:64:76:52:32:ce:86:1f:b0:dc:61:61:9c:fe:
a5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C6:7E:73:B2:FF:95:B0:9B:D9:4E:C3:74:20:35:C1:B9:06:83:20
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9a:82:73:d6:00:4d:97:d5:b5:87:f6:6d:02:35:ab:7c:86:
53:4e:87:4f:19:9f:7e:9b:52:18:28:3c:f3:d5:46:f8:7f:26:
be:69:a4:4e:b2:d9:ad:27:26:6f:e9:bf:08:cb:36:3c:8a:a6:
d7:89:ef:ad:1f:de:64:1c:bb:7b:a1:93:78:7a:7e:c7:8a:03:
01:45:3a:bd:1b:ae:b9:4c:66:bf:dc:b2:f3:97:9c:88:ec:61:
f4:ef:e9:76:1b:29:05:e5:4f:88:f7:22:0e:7c:bc:1d:94:81:
a1:e5:2f:34:ed:c2:f7:b2:0f:6c:ee:20:9e:e9:3d:e9:23:c1:
59:27:f7:56:7b:3f:44:df:9b:2e:dc:46:85:93:44:cc:50:7d:
68:fb:6d:66:89:84:12:5e:a9:73:6e:2b:ef:18:51:92:9e:ec:
f9:86:05:95:cb:64:47:e5:24:69:7b:be:bb:ae:94:e6:23:eb:
ac:6c:94:29:15:d4:8d:c6:29:73:ca:fb:cb:22:fa:89:91:c4:
a7:e3:b8:75:c8:41:e7:e0:a1:df:61:79:68:4a:55:f2:97:de:
3f:b1:e7:9f:67:aa:95:a8:eb:01:cd:37:23:35:73:d8:a6:e7:
0b:a1:be:53:c7:cc:d6:b6:98:c0:4c:80:1a:07:06:bf:1f:e6:
a4:62:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:25 2025 by rpki-client