Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
File: RQvGf1SesEkldyCgAOsFtU9dK8A.mft (raw, json)
Hash identifier: I+z3rJ8/RwKO2VnIc8VAM76ggc1/jIyIGmiIhMEq99A=
Subject key identifier: A1:70:C0:F4:2D:19:6D:07:69:94:35:D3:08:9A:92:A8:64:17:D7:DD
Authority key identifier: 45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
Certificate issuer: /CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Certificate serial: 0198D4E01C3F5F507C6433C3A3E342E1575E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
Manifest number: 0E68
Signing time: Sat 23 Aug 2025 03:01:53 +0000
Manifest this update: Sat 23 Aug 2025 03:01:53 +0000
Manifest next update: Sun 24 Aug 2025 03:01:53 +0000
Files and hashes: 1: RQvGf1SesEkldyCgAOsFtU9dK8A.crl (hash: +mxnuZDbW3fprfsJVmrbElIQQbSaEtqXzNg3PZO/WUE=)
2: _YMez48AMFaUyWLbfvnH7KldVDE.roa (hash: 3sepWcNFx6BAgV0N0lNe1VjOZzQwmimdc5bBOyxmzz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:1c:3f:5f:50:7c:64:33:c3:a3:e3:42:e1:57:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450bc67f549eb049257720a000eb05b54f5d2bc0
Validity
Not Before: Aug 23 03:01:53 2025 GMT
Not After : Aug 24 03:01:53 2025 GMT
Subject: CN=a170c0f42d196d07699435d3089a92a86417d7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ae:10:bb:38:fb:75:fa:f3:9f:18:82:77:c3:
56:b6:ad:ca:4a:16:3a:9b:90:3f:8c:d2:5c:27:36:
7e:48:50:8f:b6:2b:58:e9:a2:d1:4d:c3:78:4a:8f:
9a:4b:ef:15:72:83:73:55:1e:26:64:30:b6:fa:aa:
62:03:03:fa:f7:c5:ac:a9:78:bf:e8:2e:70:5b:62:
b5:be:a9:85:d6:b6:5f:3c:fb:59:c6:ca:80:58:44:
bd:4b:3b:8c:f8:25:df:75:10:26:0f:31:c2:53:e4:
f7:e4:9d:67:02:a2:6c:c4:2f:5d:da:16:ea:2a:9b:
b7:e2:0c:7b:e8:f2:1a:83:01:2b:fc:e2:4f:99:3d:
ac:71:aa:5d:a1:91:f6:c2:00:bb:05:2d:f3:49:f6:
00:7c:de:8c:a9:30:99:fb:5c:5e:34:03:35:9c:32:
44:0d:86:8d:6b:eb:a6:ba:37:75:31:7f:78:30:af:
4c:98:ad:b2:d0:b4:e9:22:f5:81:6a:1d:56:69:af:
d9:a0:26:a4:8c:97:24:6d:d2:13:4b:5e:08:f7:2c:
89:04:3a:6c:d0:e2:c4:15:af:61:c8:fd:ca:53:4c:
d1:c5:89:a7:c8:b5:92:ed:fe:54:0a:92:be:ca:dc:
b6:93:e5:38:f8:ac:b0:12:ac:4b:c9:15:b7:ef:4d:
8f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:70:C0:F4:2D:19:6D:07:69:94:35:D3:08:9A:92:A8:64:17:D7:DD
X509v3 Authority Key Identifier:
keyid:45:0B:C6:7F:54:9E:B0:49:25:77:20:A0:00:EB:05:B5:4F:5D:2B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQvGf1SesEkldyCgAOsFtU9dK8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4c6cd6-37a9-4115-8366-24a8d9bf37bc/1/RQvGf1SesEkldyCgAOsFtU9dK8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:75:67:25:36:83:39:c0:5a:13:8c:3c:f4:34:b9:1c:9c:81:
7c:61:97:da:91:20:a3:5b:22:cd:0a:39:d9:94:4a:34:a5:3b:
2c:ec:c4:a4:e5:83:02:5a:d1:72:a8:76:71:6c:ac:b3:39:09:
ca:18:c6:52:22:e0:34:ba:71:dc:cf:38:c5:1a:ab:5f:ad:db:
a4:ff:04:72:73:39:fa:a2:39:fc:bb:57:34:1e:c4:6d:64:fc:
e7:de:e5:ff:ef:d3:00:15:e8:46:ba:bf:84:61:5a:fe:18:70:
86:3b:60:cb:df:02:31:09:69:10:ab:e3:77:9c:bf:e8:d1:72:
79:cc:ae:d2:c6:b7:e5:db:00:cb:4a:71:39:29:9d:12:8e:9e:
c6:a6:a1:ce:bc:0d:04:1f:56:98:20:c3:93:17:b3:ff:44:7d:
cf:72:b8:61:76:19:5e:13:f4:28:60:4e:53:4e:7c:58:ec:0f:
04:be:c8:b4:05:26:07:7e:0d:6f:e0:2b:ed:8f:94:72:56:ed:
e0:99:db:d2:2d:2e:8f:7e:db:b5:41:22:62:22:74:a2:fd:c9:
4e:3b:57:15:87:1a:77:87:19:73:e4:f6:a3:47:d7:b0:2f:7f:
1c:92:b6:2c:10:5a:81:ec:1f:b5:c2:a0:4f:9e:1b:77:0c:fc:
88:6e:51:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:34 2025 by rpki-client