Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier: ahUvaQzbOzpiX9ocxMsS+lnMO8F73iwEpLtOzF9/Iuw=
Subject key identifier: 7B:AC:02:BC:D5:54:D2:E3:A4:31:CC:97:E1:25:9D:08:89:C2:A6:46
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 0198D54E1432E3D471CF2E5D42BA81A16517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:00 +0000
Manifest this update: Sat 23 Aug 2025 05:02:00 +0000
Manifest next update: Sun 24 Aug 2025 05:02:00 +0000
Files and hashes: 1: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (hash: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=)
2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: yMcvVXjrSjQt5Hdw3jPRp4vk+7bN0m8o8rYavhVxDfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:14:32:e3:d4:71:cf:2e:5d:42:ba:81:a1:65:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Aug 23 05:02:00 2025 GMT
Not After : Aug 24 05:02:00 2025 GMT
Subject: CN=7bac02bcd554d2e3a431cc97e1259d0889c2a646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:92:67:93:23:85:d1:7d:e7:d5:04:0f:fa:69:
b0:16:55:ad:ba:b0:e4:76:64:d2:7f:2d:40:4d:fe:
96:5d:4c:62:27:dd:f4:07:30:f3:a5:8f:b1:91:2f:
06:41:70:44:66:2b:aa:c8:3c:29:dd:59:54:c2:3b:
42:7f:40:c5:9f:e9:77:90:96:23:dd:87:79:c1:3c:
f8:11:a7:6e:11:ce:dc:89:9a:59:c5:87:82:b3:05:
4c:b9:be:02:70:13:a2:36:76:76:ba:80:3e:d6:64:
c1:63:f3:b7:ca:13:8f:a8:a2:df:f5:45:4a:e5:5b:
b5:7d:81:00:0a:cd:72:92:31:14:30:25:3f:c5:89:
9e:bc:5a:30:91:51:ab:71:dd:1c:76:17:ad:fd:72:
0c:39:b6:09:38:d9:51:40:8a:4a:1b:d3:9f:2c:49:
6d:d6:3d:2d:2c:e3:8e:93:27:a0:28:e3:57:8e:68:
a3:bc:b0:5c:12:27:29:02:d2:06:c5:ce:58:c9:26:
35:19:cc:54:3d:a4:72:c2:10:8b:16:97:fa:b2:93:
8d:ed:7f:5c:d7:ff:b5:74:ba:9c:d3:ad:5a:43:89:
bd:05:8c:fe:7e:4e:29:9f:64:95:c9:b0:c4:d5:15:
b3:5b:f1:7f:05:a9:11:80:0c:3f:20:83:44:d5:9c:
6d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:02:BC:D5:54:D2:E3:A4:31:CC:97:E1:25:9D:08:89:C2:A6:46
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:29:c9:a7:4b:dd:99:51:93:5d:7a:1c:16:50:f9:0d:e2:90:
3f:cc:58:e6:96:0a:f9:d4:72:3e:69:99:db:6d:e4:f0:83:59:
c4:ab:61:88:98:ed:08:56:dd:2a:06:78:a7:6b:5d:96:c9:1e:
ea:a8:59:6f:7f:82:1e:58:ee:76:b4:72:80:be:6a:ed:88:b8:
7d:b2:aa:f1:9d:16:d4:0c:51:4d:15:aa:fc:00:7d:52:03:98:
36:6a:27:3c:77:61:50:4a:e4:f4:63:2f:89:86:24:71:de:b1:
61:4d:fe:48:32:1c:3e:35:26:e9:fb:4d:5c:60:f2:69:fb:3f:
e8:4b:c7:db:08:6b:72:92:a1:6d:5b:63:f5:a0:cf:f9:e2:68:
4e:32:f0:2a:2a:87:6b:dc:a4:44:c3:19:f7:ab:32:f4:ed:f5:
9b:c4:0e:a8:ff:96:78:4e:6b:78:ea:a3:77:a3:59:5c:54:43:
85:0e:df:03:67:17:f8:d0:59:78:b8:6f:5c:fc:fb:af:dc:22:
0e:d5:77:c0:22:cd:24:22:ba:97:55:e4:ed:f7:1f:4a:0d:19:
2a:e9:63:c0:06:7d:79:76:db:c9:4d:13:a1:e6:34:69:c1:89:
60:17:a5:4b:8d:d3:fd:e4:5e:6b:a6:e3:68:2c:32:38:88:97:
c1:c6:73:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:31 2025 by rpki-client