Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: GVYI0vtCnoJ6Cjx6ZplU3GbSet21JhRsTrCJ/6as3Fk=
Subject key identifier: 3F:97:DC:98:DE:3D:E5:53:93:23:B7:D1:C5:99:23:1F:A2:56:15:07
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 0198D404B50CF064C1BE29035149A13F2C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 11E1
Signing time: Fri 22 Aug 2025 23:02:14 +0000
Manifest this update: Fri 22 Aug 2025 23:02:14 +0000
Manifest next update: Sat 23 Aug 2025 23:02:14 +0000
Files and hashes: 1: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=)
2: d03ojnbuBeIJ-lnd7OihnLWEVxw.roa (hash: XlMC0ZRLbmiqoXJQRP7mRdNP4FsXpGfEzY9nYp5h2sg=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: 5vpUr5AgKhjxgc1zONKhCq7ByS1i5EiVo90NS7ICnoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:b5:0c:f0:64:c1:be:29:03:51:49:a1:3f:2c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Aug 22 23:02:14 2025 GMT
Not After : Aug 23 23:02:14 2025 GMT
Subject: CN=3f97dc98de3de5539323b7d1c599231fa2561507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:6a:0c:0c:8a:99:0c:eb:0c:86:d7:98:18:
83:3f:12:d5:c8:10:2f:91:56:3c:e5:15:a5:9c:15:
4d:63:65:02:49:bb:6f:00:88:4c:ea:c2:6b:21:1f:
70:11:53:da:5c:55:1c:39:5f:fe:56:66:f5:a6:8e:
79:b6:a7:34:02:28:0d:50:d6:b4:f6:77:b3:0c:a4:
b2:97:b6:35:f8:86:ca:92:a9:4c:8e:5d:32:af:b9:
45:ba:e7:49:5b:e5:c3:3f:49:a3:b2:32:7c:18:c0:
72:51:e8:38:43:3d:e8:69:30:0f:4b:94:5e:18:f7:
d4:9c:ea:15:0b:b6:cb:5e:90:b4:c2:35:f8:02:59:
b0:a9:13:9d:0d:3a:26:2d:04:56:aa:cd:ed:f8:ad:
de:28:8d:00:51:55:45:77:1d:9f:18:a7:c3:6b:4f:
40:b6:34:c3:35:a2:15:b7:f7:4a:df:ba:a0:9c:3b:
6a:12:cb:8c:06:05:c6:ab:e4:7f:92:8f:95:9e:fa:
ff:21:51:90:2c:e3:8d:a9:db:39:5e:b8:af:70:38:
a0:bb:8c:65:78:5e:4a:e6:ae:28:17:97:b0:6a:3a:
f7:c3:f7:57:a4:79:e2:1d:23:34:e6:78:c2:06:af:
d9:dc:fb:e0:af:04:72:48:2f:ce:7b:fb:72:73:8a:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:97:DC:98:DE:3D:E5:53:93:23:B7:D1:C5:99:23:1F:A2:56:15:07
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0c:48:cb:61:5a:50:92:07:97:b1:19:77:33:dd:a2:ef:f7:
b4:6e:a5:8b:5c:ca:04:c1:c6:39:c7:bf:bc:ec:f7:54:67:71:
a2:16:b0:64:98:0d:83:ad:70:cf:62:a4:1d:2e:a1:83:13:fc:
81:63:10:be:a5:e7:51:94:21:dc:ae:ce:7c:ca:69:cb:76:74:
36:56:c1:4f:2b:b5:6b:8d:15:99:25:28:df:e4:17:0c:cf:53:
f8:c9:66:15:05:43:7c:e9:1c:a9:2d:9d:2f:a4:ec:36:f5:9d:
13:9c:01:72:c5:25:69:37:59:bf:fc:99:56:cc:6e:f3:7c:e8:
86:49:69:ff:5c:d5:d9:ce:44:a1:84:53:03:5e:80:25:ae:36:
be:89:eb:f1:c1:2c:84:b9:0f:74:48:d4:74:cd:9d:34:e3:e5:
21:c0:be:81:61:63:bb:28:4e:39:b4:cf:30:dd:31:cc:3e:99:
fa:21:44:34:0c:a6:36:20:28:b3:04:78:c6:74:d1:66:f0:cb:
5c:77:de:0c:8c:27:32:be:6a:d2:d3:71:65:c4:0c:44:4e:a3:
38:53:3e:52:d8:3e:28:11:23:67:86:cb:48:45:7b:3a:bb:aa:
d5:23:a9:e1:5f:ff:6f:84:46:aa:f3:9b:ea:66:cb:29:33:8f:
df:32:a9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:50 2025 by rpki-client