Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
File: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft (raw, json)
Hash identifier: qjonc1aRHGe6sHgrxZLjE+UaPf3fH13+Vq+KZrMs8CI=
Subject key identifier: 18:ED:C3:28:06:56:C7:1C:02:54:AE:41:2B:EC:5C:2A:CC:C7:02:9B
Authority key identifier: A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
Certificate issuer: /CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Certificate serial: 0198D473788535D86C97FAC957233E4F4E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:13 +0000
Manifest this update: Sat 23 Aug 2025 01:03:13 +0000
Manifest next update: Sun 24 Aug 2025 01:03:13 +0000
Files and hashes: 1: Uebp0JIuP3hxZnZ2gSrGEbFlcC4.roa (hash: ioWjN07GA9Wdsf4jPQTmSsjSBf+lcaQHQxBmquaB1Tg=)
2: qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl (hash: lXWbxZOGVNjtkl8Y8pkiL5L25IwMjYFL3+5mc2K1wl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:78:85:35:d8:6c:97:fa:c9:57:23:3e:4f:4e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86e257c32d9dbb819d517d55054f767d7161d2c
Validity
Not Before: Aug 23 01:03:13 2025 GMT
Not After : Aug 24 01:03:13 2025 GMT
Subject: CN=18edc3280656c71c0254ae412bec5c2accc7029b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:c0:25:9e:16:35:70:91:3a:11:29:0f:84:
28:0c:01:3e:b2:45:4e:8f:aa:76:18:a2:8d:ea:b1:
84:48:85:05:ca:77:93:13:63:b1:23:16:f7:f6:1b:
6d:94:33:fc:7e:27:af:63:ab:79:6f:25:6f:b7:f0:
aa:52:b8:b4:f0:18:6b:dc:2b:5a:f6:65:fd:66:b1:
1e:1a:fc:d9:c5:06:df:83:12:78:0c:96:1a:61:1b:
a1:31:4a:7b:fd:a4:d7:dd:37:c4:e6:2f:9e:ff:63:
13:3c:26:dd:5f:36:cc:83:e7:6b:f2:2f:66:33:19:
3e:c5:69:d4:fe:b1:31:b3:2f:bc:a6:e6:24:c2:90:
b7:65:41:84:b7:27:e0:b1:ab:49:01:37:f2:fd:2b:
5a:31:9a:d0:23:bc:09:14:28:1c:1d:55:d7:bb:79:
25:42:0a:62:d2:9f:cd:d0:27:98:b4:74:6a:8c:08:
09:a0:96:72:a6:c5:9f:3b:43:4b:30:5c:6a:a0:9d:
21:68:36:a8:09:e1:37:24:75:95:0f:c0:48:5f:02:
1b:0c:a0:92:64:42:7c:9e:ee:fb:fa:92:61:fd:0f:
aa:96:ba:91:2d:a3:05:40:dc:c8:d9:dd:ea:ea:56:
2d:14:ad:48:75:c2:1f:bc:64:c9:59:d5:33:6f:66:
62:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:ED:C3:28:06:56:C7:1C:02:54:AE:41:2B:EC:5C:2A:CC:C7:02:9B
X509v3 Authority Key Identifier:
keyid:A8:6E:25:7C:32:D9:DB:B8:19:D5:17:D5:50:54:F7:67:D7:16:1D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/596fd5-6e44-486e-82c2-487f034c4727/1/qG4lfDLZ27gZ1RfVUFT3Z9cWHSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7a:63:91:7d:0b:81:bb:21:89:34:d2:c3:92:f5:db:81:b1:
f8:be:c8:1b:18:1f:66:30:50:01:6f:43:eb:49:37:51:22:00:
02:6f:3d:f4:52:3f:4d:c4:f8:3b:55:77:53:7c:34:03:a8:01:
e0:91:a5:d5:0e:4a:ee:72:38:0e:09:cf:86:b2:b5:95:fa:65:
b7:94:15:68:b9:54:db:8c:5c:62:35:52:15:0e:c6:26:a5:ad:
14:80:7c:a7:0a:25:69:3d:09:1e:3d:ea:18:6c:9d:c9:1a:60:
14:0e:fe:f3:b4:0d:76:f6:e7:d9:12:27:f0:77:89:ae:bd:01:
64:e5:3f:b8:02:b3:5a:d9:50:d2:08:18:64:a5:3a:2c:52:fd:
6a:19:fa:0e:40:13:0a:24:6d:0e:db:ea:dc:71:90:f7:96:ea:
1e:bb:f4:a8:4d:31:8c:15:f9:d4:00:c4:22:91:2d:3b:e5:6b:
a1:17:13:3c:57:9b:94:5d:75:e5:2b:5e:b1:ae:58:dc:7a:17:
0b:fa:9a:ca:59:fe:e6:8c:66:0f:e9:91:9b:41:73:98:40:2e:
69:d0:bc:6c:af:97:8d:e1:c6:fb:9f:2b:6e:d6:65:79:65:73:
6c:52:8f:fb:20:6b:6f:e2:8f:70:2d:86:dc:17:b5:af:04:c1:
f0:48:b9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:35 2025 by rpki-client