Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: OADuYtlMNErnsrmf2Tigs4doOvRK1JNZleiUGkQ0htM=
Subject key identifier: 33:A6:9B:66:F7:0B:AB:E1:1A:DE:87:19:15:8D:AC:A5:AE:6C:F9:E0
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 0198D4E0E92BAD834155E3D91AE91339A7BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0CDE
Signing time: Sat 23 Aug 2025 03:02:46 +0000
Manifest this update: Sat 23 Aug 2025 03:02:46 +0000
Manifest next update: Sun 24 Aug 2025 03:02:46 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: l+U/otYhEFdiKrIiiicA3hmMe0BZP4Y5RZJdLa/1ayg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:e9:2b:ad:83:41:55:e3:d9:1a:e9:13:39:a7:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Aug 23 03:02:46 2025 GMT
Not After : Aug 24 03:02:46 2025 GMT
Subject: CN=33a69b66f70babe11ade8719158daca5ae6cf9e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:1f:60:40:c7:6a:8a:ae:75:32:fe:7d:ba:
8d:af:26:98:6d:67:2e:03:c0:f8:1f:d0:f0:c3:6d:
32:42:df:73:cc:bd:5b:0b:33:0e:4d:f3:5a:cd:f8:
d0:b8:cc:d0:ad:af:77:2a:44:a7:c6:88:1e:7a:05:
b2:97:14:2e:86:5b:8a:3e:36:20:56:0e:6c:4d:f1:
3d:af:08:03:5b:53:18:dc:38:df:f7:51:66:f5:74:
94:ef:60:ce:35:e7:5e:1f:db:6f:aa:ab:83:a4:61:
25:53:d4:36:06:e5:34:7c:32:19:d5:1a:5b:b8:01:
a8:03:b5:42:3d:2e:08:45:ae:7e:e1:3d:3a:23:33:
74:a3:7c:ad:b6:cf:43:7f:2b:bc:4d:34:e8:8f:d7:
6a:22:35:47:45:5f:5a:cb:78:54:62:77:03:14:c4:
27:a7:54:37:83:b0:85:53:54:7a:4a:b2:43:7f:57:
55:c8:79:7c:fe:83:2a:64:ca:06:f3:46:fa:51:a6:
62:d7:25:3b:a4:fc:f3:46:02:26:2d:80:f3:71:99:
38:5d:c0:50:d9:03:bc:78:2d:a8:30:00:39:bb:02:
0d:bc:5b:90:96:79:58:e3:b1:79:3b:79:41:ba:28:
83:2f:80:f2:c2:c2:3a:56:ce:3d:9d:b9:46:4b:3e:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A6:9B:66:F7:0B:AB:E1:1A:DE:87:19:15:8D:AC:A5:AE:6C:F9:E0
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:96:46:be:fb:c2:31:d7:0b:63:f2:19:1d:94:53:74:90:e7:
6b:72:43:73:33:0a:c1:c0:df:44:67:14:f4:21:4d:d7:47:6e:
c4:43:9a:10:26:8a:08:e6:72:b8:42:a9:d2:ae:4d:7f:79:51:
a7:1e:54:55:da:22:c5:c6:31:97:91:7e:94:4f:23:8a:ef:a7:
59:75:cc:10:e5:0e:7b:bf:1f:45:ed:2b:84:11:2d:b2:26:43:
e5:90:91:5a:27:6c:1c:ed:ab:a3:b4:25:5e:69:e7:40:7d:0b:
6c:5d:7f:87:06:e5:0e:ab:73:b7:fd:c3:87:4b:b4:81:6a:fe:
ae:f3:05:a8:f5:45:25:c0:fc:e1:3d:25:e3:ab:4c:9f:e8:72:
50:fb:48:e4:23:76:8c:c9:12:88:b3:58:53:dd:ea:d2:b4:a2:
c6:4d:b4:aa:b4:4c:26:c8:89:97:a2:ca:7b:45:60:ae:02:db:
34:e6:59:7c:b8:f6:63:ea:55:37:86:a1:b4:e6:af:d0:cc:b1:
f4:4d:36:4c:b0:4e:04:22:32:f3:b2:61:36:5b:75:78:0c:82:
63:9a:e6:73:fa:1d:79:29:28:90:f1:c2:c7:89:0f:bd:21:09:
12:8e:8e:1d:1a:f4:e5:6d:bf:28:f1:fd:b5:22:3b:91:f4:2f:
49:7f:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:36 2025 by rpki-client