Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
File: qD8d69XUeEhD-qKIsuAciFBsHMk.mft (raw, json)
Hash identifier: y0N6q26yDTNisyxznlAqx2JXlmSpM2KbFQ12QhMEOfk=
Subject key identifier: 16:14:AB:87:7D:6D:8A:BC:7E:50:78:68:21:92:58:C2:12:62:99:05
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 0198D6CCED0C4B98ACCC82429A651FF2498B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
Manifest number: 14A7
Signing time: Sat 23 Aug 2025 12:00:10 +0000
Manifest this update: Sat 23 Aug 2025 12:00:10 +0000
Manifest next update: Sun 24 Aug 2025 12:00:10 +0000
Files and hashes: 1: BZ13VNeYDJ675QrTvza6Su89fFQ.roa (hash: 1LD0YSVmtKovTGtmhUY3CjQg1PtKAp7I1QWK9ijZOII=)
2: qD8d69XUeEhD-qKIsuAciFBsHMk.crl (hash: iWPrQI4StL5Fpg631cX4iFsxQUHMf2jTnAXFBf09OkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:ed:0c:4b:98:ac:cc:82:42:9a:65:1f:f2:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Aug 23 12:00:10 2025 GMT
Not After : Aug 24 12:00:10 2025 GMT
Subject: CN=1614ab877d6d8abc7e507868219258c212629905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:77:23:a2:22:7f:0c:cf:32:68:c9:cf:36:
2f:e2:9d:a2:e0:e4:1d:79:cc:60:f9:49:4f:6e:2d:
2f:fa:41:04:89:a8:89:2f:cd:c0:28:69:e0:34:38:
97:1a:7d:2f:2e:77:24:6e:67:b3:a3:fc:85:b5:84:
8a:50:06:0d:f1:f4:c4:96:19:b3:e7:9a:69:78:f9:
39:4b:c4:ed:c5:ed:6e:22:20:0a:f4:a1:1c:31:be:
7a:0a:49:64:87:d5:f3:d8:ae:05:bd:38:e4:1d:36:
b0:34:b4:56:42:d0:3a:c6:6a:92:8d:db:8c:ab:5f:
4f:6a:87:28:de:ed:09:a4:9a:18:f7:fe:0f:74:1d:
47:0e:7a:2b:fa:80:07:9e:0c:33:63:d4:8b:f2:9d:
d0:06:d8:b0:ec:50:0d:64:e7:66:82:25:7c:88:2a:
70:0a:1f:9d:95:50:bb:46:4b:d6:f5:f0:d3:39:50:
00:88:c3:44:83:09:c3:5c:1e:ad:34:ae:25:f4:00:
02:c5:7f:60:05:73:9e:5a:4f:88:6f:c7:80:05:c6:
5a:72:be:ac:40:07:84:1f:4b:a9:97:6f:bd:cc:0f:
af:64:1b:b3:e9:d8:3d:0d:aa:bf:39:e6:67:3c:af:
18:ae:d5:89:3f:77:0b:4b:36:ff:b4:8f:0f:b3:45:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:14:AB:87:7D:6D:8A:BC:7E:50:78:68:21:92:58:C2:12:62:99:05
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:37:0a:55:d6:14:c4:7e:90:9d:77:3f:22:03:f9:f8:1a:65:
32:e1:ac:4e:be:76:53:83:b5:84:73:d9:88:9c:df:24:54:1d:
d1:80:b1:f5:29:e2:f3:5b:90:ba:b6:a0:fd:2b:fd:e1:68:e6:
d6:d8:de:51:93:29:69:de:81:f0:ee:72:6e:87:ce:01:b8:15:
5c:05:71:7f:44:70:cb:7c:13:dc:1c:26:f9:e3:f2:cb:89:7a:
df:da:a3:6f:b6:c8:5b:16:87:f3:bd:41:fe:a9:09:dd:48:31:
8f:4f:1f:b2:9b:9d:9d:7e:5b:5d:90:1a:65:bb:56:7a:3b:6f:
37:f6:fc:a3:24:22:a5:23:45:51:b3:66:f5:8b:8c:3a:e6:55:
ee:c2:7f:7d:6b:f0:2f:d5:53:94:97:46:af:16:44:c0:56:aa:
e0:6a:46:10:9d:3c:f0:e0:3a:eb:17:6d:cd:32:4e:a6:87:e4:
be:0f:6b:74:ed:b4:3c:9e:2e:67:1d:30:21:41:65:ea:6f:3c:
dd:36:89:d4:c5:4d:68:04:97:99:df:4c:99:47:b4:35:3c:40:
2f:12:6b:5f:5c:e3:30:6a:0a:5e:6f:55:7c:9f:57:d2:e9:d1:
70:c7:4b:92:06:71:ac:ec:4d:ab:a0:66:1f:b0:3e:4d:4c:f0:
f0:13:27:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:15 2025 by rpki-client