Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: JO16RVq9Pz/CWWtv/YMaPIsdtBR+c264bggTgBOHjPE=
Subject key identifier: 89:06:7A:11:19:FD:65:35:42:F9:FE:BA:97:80:11:4F:4F:98:4F:42
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 0198D6602D17199C57BE2B340F654375E978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0A57
Signing time: Sat 23 Aug 2025 10:01:23 +0000
Manifest this update: Sat 23 Aug 2025 10:01:23 +0000
Manifest next update: Sun 24 Aug 2025 10:01:23 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: K/aVcM7fZc35k8rB3UGRC4xSlZg9FpPneJNSBCmvwww=)
2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:2d:17:19:9c:57:be:2b:34:0f:65:43:75:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Aug 23 10:01:23 2025 GMT
Not After : Aug 24 10:01:23 2025 GMT
Subject: CN=89067a1119fd653542f9feba9780114f4f984f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:cf:c2:98:22:22:c2:6f:a2:e2:bc:4c:48:
27:7b:0a:58:bd:eb:43:3d:b0:a4:c2:06:01:dc:bd:
68:7b:51:b3:df:db:7a:c9:32:31:16:02:18:90:64:
d3:19:d5:e8:ff:cd:f8:88:62:85:be:19:a7:f7:80:
ab:ba:97:44:11:74:c3:64:63:8a:29:fb:b2:1a:ad:
46:1a:50:d4:59:eb:54:84:71:59:0b:79:94:9b:06:
02:6f:c8:97:48:1f:d4:21:c8:27:06:d9:d8:a4:c8:
2f:25:ba:8e:a9:78:76:65:0c:ff:2a:32:14:f6:bf:
c0:03:27:48:3c:d4:aa:f6:8e:3f:d0:85:2d:01:50:
53:6d:02:26:02:4b:ed:3b:2d:ea:f3:0f:55:0c:ad:
07:ec:9b:8c:a3:9e:ba:9a:1c:80:e2:ee:d3:7c:ab:
e6:5e:d5:4f:84:3c:86:c7:79:3d:83:02:6b:16:5d:
24:de:09:b5:5c:9e:cf:6f:f2:fa:85:a3:30:7c:03:
c9:b4:74:ec:91:2c:36:02:ff:6b:a7:d7:1a:80:47:
75:4f:6b:f9:1e:9e:b3:6a:45:e9:b7:bc:a1:ff:e6:
6d:6b:14:56:7a:d0:aa:cf:b8:73:f7:2a:f2:8c:66:
1b:3a:d7:73:0e:41:48:9b:b8:b1:0c:3e:65:80:1d:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:06:7A:11:19:FD:65:35:42:F9:FE:BA:97:80:11:4F:4F:98:4F:42
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d3:6b:03:b3:fa:27:79:9f:cc:b0:9c:e5:d9:35:3d:34:fa:
37:b9:4a:6d:7e:1d:4d:9f:91:78:fc:0e:79:71:48:7a:ef:74:
c9:24:93:bd:88:f2:c5:78:ed:0a:e7:70:0d:b6:d3:de:68:14:
3d:7e:57:25:04:8a:55:15:6d:91:61:7c:f5:18:b6:9a:be:d9:
12:36:54:9a:e2:2b:5e:43:b5:c3:3a:7c:cf:04:27:b8:eb:98:
d8:41:16:f0:11:9b:47:42:3c:5b:9c:1e:d1:b1:76:64:47:49:
47:3e:e3:08:9a:31:0c:fd:f1:b1:8e:32:4e:e7:0b:c4:0e:57:
ed:ba:20:4f:5b:c7:f6:d4:c0:10:17:db:8f:09:95:8e:42:7a:
e3:df:be:c6:bd:78:c9:6a:73:5b:f7:4f:cb:25:70:0c:d7:fd:
28:4f:54:c1:99:81:b5:4c:ee:66:5b:27:1d:4c:f1:a6:d3:14:
a5:60:93:76:0b:a7:d6:02:32:14:e0:e3:0f:b2:20:61:3c:f3:
c4:97:1e:ee:d3:e8:c3:01:2d:25:a9:5e:f1:7f:9d:6e:b2:a8:
99:39:42:43:5a:37:0e:0d:9e:a5:c9:7b:4a:8c:e5:97:36:4a:
eb:66:8c:9e:1c:c2:1d:a6:c9:ff:ad:6f:38:70:ad:5f:da:13:
6f:66:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:46:38 2025 by rpki-client