Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: Q9cOv5NMFmfOBau+mIcv0vo5L+VMiH4VT1RapV3FQmk=
Subject key identifier: AC:A4:8E:B0:D1:3A:BA:8C:00:90:BE:BF:8D:2D:B3:7C:E1:86:71:2C
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 0198D54E7F1A129F6DF9FFF1D9209BAAEC0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 0292
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: QhiXI4D7+bFdMKV8u0mvGso6sCzvIDPXRMMe34Y+qd8=)
2: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (hash: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7f:1a:12:9f:6d:f9:ff:f1:d9:20:9b:aa:ec:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=aca48eb0d13aba8c0090bebf8d2db37ce186712c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:31:3c:60:78:37:46:a2:f3:6d:03:02:98:
ee:a2:a1:3e:e4:f6:c0:88:2b:09:27:d0:e2:5b:f1:
45:f6:83:b6:a6:f1:ee:a9:cc:0b:ce:1d:06:dc:98:
b9:41:ad:09:00:66:8d:8d:54:15:46:93:4a:d0:2a:
ec:2f:c6:9a:a4:37:ef:15:41:39:76:68:56:ff:cf:
ec:e4:ec:14:2b:90:04:b3:31:27:9c:90:0f:61:18:
1f:4c:bb:50:53:f0:20:fe:e7:5c:3b:55:ee:e3:09:
9e:d9:e5:e7:ac:e3:93:83:0e:cf:ec:92:1d:69:df:
02:61:a1:b9:df:5e:b5:b7:60:a0:cd:ca:07:ec:04:
a8:09:24:91:96:f7:30:8c:5a:94:2e:38:df:9c:9c:
0f:3b:3e:81:25:22:a2:4e:f8:7f:84:b9:15:b5:76:
af:2d:f1:1d:f9:11:ac:81:b0:19:5e:2f:5c:9b:2f:
ac:24:07:cb:4b:91:ad:4c:17:30:50:08:a4:1f:1e:
27:66:d5:25:c6:98:08:b6:2a:95:4b:57:17:3f:46:
1a:0f:e4:21:8e:41:c6:44:55:08:ff:c3:a7:eb:4e:
ce:4c:c2:c5:fd:cd:67:67:87:16:50:83:fd:02:aa:
34:ba:fe:80:8e:6e:76:d2:56:b7:f6:20:32:78:2c:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A4:8E:B0:D1:3A:BA:8C:00:90:BE:BF:8D:2D:B3:7C:E1:86:71:2C
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:d3:38:90:c2:2f:f1:f1:7a:4b:fb:89:9c:0d:e4:5d:fd:
c9:ff:f2:98:5a:59:ca:47:1d:7a:3a:b5:57:e8:9d:79:e0:cf:
43:b3:24:dc:67:a8:21:28:17:53:f2:49:73:a9:e1:eb:8c:3d:
91:d1:34:7e:b1:3f:b4:b4:e7:e3:5d:ac:08:67:0f:10:80:96:
47:af:17:dd:f6:82:e7:f2:50:97:78:10:49:a3:7a:16:87:4f:
76:dd:6d:9d:be:b5:28:ff:bb:01:90:ca:ef:c8:72:1f:4a:e4:
82:b3:f4:a3:4f:0d:1a:ce:e6:7c:3c:9b:5f:72:8b:85:08:7e:
ab:38:24:47:93:52:97:3f:ad:8b:37:27:2d:f0:12:d5:3a:0f:
0e:5c:f1:47:e1:8f:1d:58:2a:21:e0:51:ab:01:d8:3f:a9:22:
6a:4d:7b:f6:ab:c8:71:44:2f:2d:b6:91:cf:5e:cc:47:c7:fd:
7d:f2:bc:55:c9:4b:71:e4:b7:98:1c:ae:ae:40:13:56:7c:2e:
fa:8f:a7:a0:dd:55:33:81:96:50:be:cb:fd:60:86:db:e1:43:
85:b6:50:dd:76:d2:20:5b:f9:b3:a4:d2:69:4d:d0:7c:4f:aa:
97:3e:05:5b:2a:36:d1:b3:7a:ca:bd:04:05:d9:7f:b1:da:85:
ef:ad:1f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:00 2025 by rpki-client