Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: UhXgR9ZOoEoHVg9OI0CsO4fOMWcq66FFVSFgp4AG8hM=
Subject key identifier: AC:9B:A4:66:15:D8:0F:E2:03:E0:AB:C2:8F:94:AB:17:91:21:3B:D7
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 0198D4A7EE82837820DAC3DD594E8E0B5C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 0DC4
Signing time: Sat 23 Aug 2025 02:00:32 +0000
Manifest this update: Sat 23 Aug 2025 02:00:32 +0000
Manifest next update: Sun 24 Aug 2025 02:00:32 +0000
Files and hashes: 1: 1VL4lYJptkpi6ZtVoZgmoJ6ksn0.roa (hash: f1kBG9NlxREDPNdWOkJs8Cv0Ij2AV1IHOO/Hc9KsOpQ=)
2: eWIsK00nv-TBVtwDZCA3scOHg9s.roa (hash: y147gGaB8bkjz0BvOSbEDQ7Eu45dIgspzGe/6ZKyCR0=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: 0UYfoxAFgoWEivKjiBz+cN0CNN7cOFX+AEZLM868eQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ee:82:83:78:20:da:c3:dd:59:4e:8e:0b:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Aug 23 02:00:32 2025 GMT
Not After : Aug 24 02:00:32 2025 GMT
Subject: CN=ac9ba46615d80fe203e0abc28f94ab1791213bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:77:68:5a:a0:fc:c5:31:04:1a:e4:66:8e:
d9:c4:e9:2c:19:7d:7e:1f:0f:0a:f3:ec:1e:00:62:
a7:b5:b5:96:5b:c7:dc:00:b0:fa:31:e4:b3:a3:d3:
4a:70:17:dd:dd:5a:fa:b4:1a:2a:d1:48:7e:d4:b2:
6b:96:0c:5d:02:24:a2:a7:16:70:04:76:32:e2:db:
eb:46:60:9a:2f:31:7a:55:30:f5:ac:12:62:00:55:
cf:ae:51:f1:65:dd:b6:29:26:bd:7b:9b:c0:75:f8:
70:d8:5e:a3:96:cb:5f:9a:65:be:7e:bc:bf:4d:db:
0c:49:f9:ed:61:b3:9f:26:88:00:7b:bb:fb:a9:f1:
6b:66:0e:45:b4:98:f1:18:9a:fc:84:e2:0b:5b:f9:
df:ae:c5:54:d5:10:9e:98:26:87:92:02:95:7b:dd:
ad:1e:74:5c:b7:77:00:cb:dc:83:09:72:63:78:1b:
93:cc:48:16:06:6d:27:2a:98:97:67:59:02:6b:b7:
45:2d:9f:fb:0a:00:45:21:38:c2:c9:f0:4e:08:0f:
db:41:1c:7f:a0:2c:6d:29:4a:a8:9b:29:9a:88:d7:
d3:23:24:fc:02:cd:d6:7f:ef:28:12:b5:12:56:94:
1c:9f:91:2b:69:a4:7a:7f:f1:f1:75:3d:0d:92:2b:
cb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:A4:66:15:D8:0F:E2:03:E0:AB:C2:8F:94:AB:17:91:21:3B:D7
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a2:93:64:a0:00:49:55:9c:25:e2:ea:86:6c:00:df:eb:89:
01:2c:b4:3f:9b:89:ed:e4:af:95:e3:08:9a:a4:2c:68:84:d3:
d2:99:03:3c:76:77:69:02:c8:63:34:e2:af:c5:42:59:92:24:
84:03:db:5b:ff:2a:7f:2c:5a:36:5f:8d:1f:a1:10:a9:7c:48:
09:c9:41:84:6c:9f:b4:be:2d:47:29:79:d8:fa:d5:48:5a:20:
8e:60:69:01:87:d9:0e:02:c3:4f:57:eb:72:65:d6:30:e9:2e:
e0:83:c7:ac:32:28:5f:62:29:17:06:43:a0:b9:2a:e7:62:28:
c3:4e:21:68:1c:23:97:c9:8b:02:9e:e2:da:47:52:5f:dc:d3:
b9:2e:86:33:69:8a:5e:52:1d:2a:31:17:6c:25:d9:68:e3:e8:
b7:25:e6:77:06:de:7b:04:6b:17:77:bc:7a:87:18:ed:72:72:
56:17:ae:2f:93:45:42:c7:8b:71:ce:9a:fe:fa:67:f7:e6:ab:
5a:c4:f6:e9:35:59:bb:7e:1e:09:c0:78:b5:ce:56:f5:cd:3c:
56:42:ca:f7:c7:a0:78:71:cd:ae:c8:f6:2c:1d:de:4b:76:16:
be:12:6f:e3:37:67:99:fa:d6:52:83:dc:72:20:4d:82:43:08:
e7:73:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:11:07 2025 by rpki-client