
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
File: rqAyAc2mqK295P6ARuxl-WrGqWw.mft (raw, json)
Hash identifier: ZYYG266fjYQWpQbRy1C2wNkND+nurTXEomyRJRcloNs=
Subject key identifier: F8:D0:EF:DC:2B:FF:B4:8D:8B:41:88:F4:EE:A2:90:AB:21:E2:D3:83
Authority key identifier: AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
Certificate issuer: /CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Certificate serial: 0198D5837E873183C9FF2C9393D9EE7B7D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
Manifest number: 01A0
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: OHSgHk7806-Y3EiMMODqh70dnpA.roa (hash: dwELo2G8zKa9A3mOV9vawf+jeFFyKXxpSg3LwUytDM8=)
2: ZfKmgCC5shqdiJ4oG4WQU2IlAJs.roa (hash: xPdeleCRUgq2S3wQBazj5FbP5YRWDoq9gRuAfQMqJJU=)
3: rqAyAc2mqK295P6ARuxl-WrGqWw.crl (hash: IFnxSsZg+ijqOwF/c8a6dopeEITIQ0cV4sPdsJCQ5rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:7e:87:31:83:c9:ff:2c:93:93:d9:ee:7b:7d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea03201cda6a8adbde4fe8046ec65f96ac6a96c
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=f8d0efdc2bffb48d8b4188f4eea290ab21e2d383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:3f:47:79:dc:13:77:ef:df:38:67:3d:d1:
fd:ff:a2:f1:76:82:2e:a9:97:ee:75:53:40:87:ef:
47:04:d1:2a:cc:69:ff:a9:d6:59:e8:1a:41:c9:6e:
01:05:da:cc:88:26:4b:78:b7:53:e4:be:55:fd:ff:
ae:b4:4c:37:2a:be:6c:8a:83:e9:4d:8a:57:89:50:
af:52:d4:ba:60:86:c2:d1:ed:b8:67:83:a8:d6:2b:
dd:79:b0:19:a9:4c:0b:bf:fa:41:8a:60:f2:fa:2f:
07:20:d0:ef:a9:26:30:a7:95:c1:cb:db:8e:96:50:
c8:2a:78:91:f9:36:e0:b0:8b:0b:cf:75:1e:a9:f4:
f5:bd:6c:b0:e8:dc:e6:b6:1c:ba:17:78:c9:ee:1b:
7d:4e:fd:9d:76:f6:08:68:e6:15:47:42:dc:8a:f8:
60:f8:e6:69:9c:9a:9c:19:b6:72:45:42:92:ed:41:
27:20:9d:7a:c7:0b:7d:50:2b:1d:1c:85:d8:00:4c:
5a:70:8d:e9:ea:e2:64:e1:f3:06:a8:ce:61:18:50:
82:23:e8:cb:da:aa:de:79:19:fe:83:92:a1:bd:7a:
ee:cc:bd:b3:bb:bc:e6:9c:d4:4c:d9:cc:ac:38:3e:
f8:66:a0:5f:65:7a:f5:3e:52:38:44:c8:33:4c:ac:
e4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D0:EF:DC:2B:FF:B4:8D:8B:41:88:F4:EE:A2:90:AB:21:E2:D3:83
X509v3 Authority Key Identifier:
keyid:AE:A0:32:01:CD:A6:A8:AD:BD:E4:FE:80:46:EC:65:F9:6A:C6:A9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqAyAc2mqK295P6ARuxl-WrGqWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/dd09dc-2472-4517-9e2d-ea412f21e230/1/rqAyAc2mqK295P6ARuxl-WrGqWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d1:b0:15:75:ff:5e:54:dd:19:77:a6:04:8d:c9:8a:bb:00:
78:35:e4:fd:99:52:24:71:1c:80:df:32:b4:8d:bb:06:1b:fa:
54:d1:8a:dd:23:75:2a:95:3a:c5:bb:3b:fc:2f:de:79:cd:af:
17:de:d0:78:fb:15:a4:03:ab:9d:90:28:42:95:e1:13:1c:87:
f0:16:75:df:90:b0:86:bb:90:f4:ad:2b:f9:d7:16:ab:4f:cf:
37:ff:6e:9c:0e:20:42:e5:07:7a:80:51:44:be:e8:06:17:10:
6b:15:b3:e0:c3:60:b2:e4:d7:78:40:aa:6c:fb:0a:b6:ec:91:
a7:b7:c1:4d:8d:c9:a5:77:ce:6b:f5:9d:32:dc:23:df:d1:3e:
31:f2:1f:0c:4b:44:6d:f1:42:7f:95:f1:dd:b9:9a:aa:89:8b:
1d:12:0e:2e:f4:ae:e7:d9:1b:0c:bf:b9:1c:2b:16:ef:63:5d:
f6:d3:83:3d:3e:07:f0:c7:78:5e:61:2b:89:b9:2b:e5:26:17:
37:f7:6c:0e:6a:9b:09:24:ed:2f:3a:ea:17:f0:69:2b:94:cf:
8d:43:ec:5a:79:e9:fc:e3:b0:c8:a5:81:33:84:07:01:4c:f2:
bb:8d:cc:34:cd:eb:50:4b:a1:ad:eb:67:0c:2c:2c:da:1c:4f:
d2:fe:c9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:08 2025 by rpki-client