Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: 9WQjY40xKF0SVBmAVqO/byxWiEpdzgijV5NBaFR/aGk=
Subject key identifier: A9:74:1A:34:21:B9:28:EA:A9:18:C2:EF:9C:78:49:3D:39:B4:DD:B9
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 0198D5F1B0F6685AF2C53AFB49D70B86D8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 158F
Signing time: Sat 23 Aug 2025 08:00:43 +0000
Manifest this update: Sat 23 Aug 2025 08:00:43 +0000
Manifest next update: Sun 24 Aug 2025 08:00:43 +0000
Files and hashes: 1: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: J9Q9WQPxr8G5ASGM+9UvySXSnUcWAFx7d/SYP2zj6ow=)
2: aTnDDG7156iJH1B7VtXl45Lxz4c.roa (hash: uqmE7u3SyyyiP9Dvg82dGi927wLVOacs75i5/YZ4Qho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:b0:f6:68:5a:f2:c5:3a:fb:49:d7:0b:86:d8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Aug 23 08:00:43 2025 GMT
Not After : Aug 24 08:00:43 2025 GMT
Subject: CN=a9741a3421b928eaa918c2ef9c78493d39b4ddb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:05:55:f9:35:8a:14:bd:08:94:54:c5:d3:
2f:1b:c7:2c:c3:5d:2a:be:85:e1:58:de:9e:05:2a:
4c:3f:a6:8e:2b:06:12:73:73:7a:44:df:35:51:82:
90:da:b8:2e:10:97:b6:7f:9b:08:d9:81:9a:2a:68:
43:6f:41:5f:df:7d:62:a7:da:15:bb:4d:71:97:76:
17:cc:69:55:7a:b0:5a:5d:70:56:8d:9c:8a:ae:bf:
8e:8c:01:07:71:d3:d9:18:a9:5c:d1:a8:45:73:a5:
3e:5d:a1:4f:cf:44:82:06:79:2e:00:99:1f:c0:a0:
ff:2e:3c:85:ca:67:0b:0c:d8:c5:4f:15:44:63:16:
24:d0:70:f4:28:13:2b:71:ff:0f:18:21:32:cb:18:
91:9f:1d:76:23:2b:59:41:40:cb:94:cf:89:5a:63:
1c:07:b8:24:84:5d:e5:be:e8:61:c8:23:e6:42:36:
46:eb:41:da:0e:90:d1:ad:b0:b0:99:85:51:db:60:
6d:b6:cd:86:57:20:4e:72:1f:d2:e0:a5:d5:3d:61:
0d:b9:52:25:72:27:27:96:cc:26:e9:06:4f:fc:bb:
6a:c5:19:f0:38:93:11:5b:3b:bd:24:9d:39:f1:94:
b7:c2:78:96:ed:f8:62:36:db:1a:f7:b8:f0:55:c8:
a8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:74:1A:34:21:B9:28:EA:A9:18:C2:EF:9C:78:49:3D:39:B4:DD:B9
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cd:4e:4d:07:90:e3:77:91:3c:71:9d:7f:51:ca:25:94:e5:
76:70:04:26:4b:a0:be:4b:52:c0:17:5e:29:c8:ac:df:de:9e:
af:de:ed:67:ae:c5:d5:bc:b2:63:be:ac:ed:35:5e:b6:db:e4:
bc:93:65:77:6c:5d:9d:84:54:6a:9b:9c:83:a0:cc:34:dc:3c:
0b:a2:78:47:31:8a:89:8d:df:f9:30:a0:ac:d0:f7:21:fa:e0:
bf:dd:ab:18:3a:3d:39:0c:9b:12:59:e0:93:63:12:1b:4d:e6:
4f:9e:ae:c0:66:ac:18:eb:8e:1c:4d:a0:aa:7e:56:e3:ee:60:
d6:45:35:3b:09:45:41:0e:0c:d3:d2:52:69:f0:19:74:a9:8c:
e3:81:75:b1:da:51:61:e5:da:1b:60:38:a6:6e:05:dc:66:95:
5f:a7:d8:97:4d:47:da:02:02:69:21:93:89:c3:08:bd:f7:0b:
ec:a4:49:5f:f3:db:06:54:8c:f3:c8:a9:97:46:bf:4a:db:f4:
6d:20:d8:f1:84:c3:82:07:51:d3:43:f6:15:92:aa:44:0b:3e:
42:46:a4:06:2c:f0:e4:f0:ce:d0:4c:dc:40:87:f7:f4:81:a8:
24:aa:ee:8e:64:1d:d4:41:87:84:34:6d:39:3d:3d:46:4a:ae:
26:1f:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:31 2025 by rpki-client