Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: PE9vGmUK6Bx5feJph6+qPOUpWEnu2DzlnyQB1IpY1hk=
Subject key identifier: 32:EF:01:28:DA:4A:71:0A:27:E3:BA:CE:D6:35:A2:4A:68:D1:FB:A3
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 0198D6980DCE8B82C8184927833BD184D3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 1213
Signing time: Sat 23 Aug 2025 11:02:25 +0000
Manifest this update: Sat 23 Aug 2025 11:02:25 +0000
Manifest next update: Sun 24 Aug 2025 11:02:25 +0000
Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: //1jQC/n8LXEEzE35kgipxfDwTsKGqitEOaauBzAId4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:0d:ce:8b:82:c8:18:49:27:83:3b:d1:84:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Aug 23 11:02:25 2025 GMT
Not After : Aug 24 11:02:25 2025 GMT
Subject: CN=32ef0128da4a710a27e3baced635a24a68d1fba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d1:80:fe:d0:23:68:95:2c:3c:ea:b2:4b:54:
06:af:15:46:9b:9e:ba:33:df:98:1c:f0:a6:30:2d:
14:8e:7f:39:2c:63:2c:6c:06:d2:e3:1f:73:6e:97:
a6:0b:34:e0:8a:1b:0e:5a:ec:31:67:cb:fe:55:57:
85:b6:f5:b2:dc:b2:11:30:32:0f:a6:58:47:06:39:
ed:9f:b8:6a:1f:5a:e5:e6:60:1a:89:f8:77:ff:dd:
81:1b:7e:fb:25:c6:5a:8c:c8:18:cf:a9:7f:a2:2f:
56:16:b8:4e:bb:98:8e:0b:ea:e8:5a:1b:28:4b:d3:
7e:d1:c9:2e:9d:e9:58:17:57:48:95:10:6a:9a:d2:
40:54:2a:cb:34:b8:54:c2:fd:f8:b8:f1:4a:dc:0a:
f2:ac:a5:60:7f:bc:16:ab:ea:28:c0:3a:f7:a3:59:
d5:d9:c9:db:e0:ad:7a:36:2c:00:af:4c:b4:06:3f:
e7:4a:b3:e4:6a:ef:b9:32:2f:b6:3d:52:44:ee:9d:
1c:b2:4b:71:87:c9:b6:d7:16:8b:b0:21:b0:bd:03:
c8:5e:6f:52:28:9c:ce:b4:40:fa:7e:0c:b9:64:f9:
da:c4:e4:27:53:a8:c1:72:ca:9f:b1:39:a6:6a:db:
36:76:74:92:cf:64:71:a4:9e:12:5e:c6:5f:5a:04:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EF:01:28:DA:4A:71:0A:27:E3:BA:CE:D6:35:A2:4A:68:D1:FB:A3
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9e:cf:74:fb:8d:24:86:52:12:3b:9e:2a:27:87:35:8e:c4:
55:8b:55:38:e4:33:d0:f4:41:d1:4e:ee:e7:dd:2b:29:f3:f3:
b2:e5:d0:66:16:0d:55:94:f6:d9:e8:2b:86:46:d3:a5:b8:79:
d6:20:c6:fc:f5:0d:cf:a1:47:0f:5d:22:f6:38:93:b7:53:bb:
78:02:09:33:07:e0:a7:7b:17:fa:28:58:33:04:f0:b4:85:2a:
69:3f:b5:8b:2b:ea:86:2c:d6:6e:89:8a:df:62:f5:b8:b2:f8:
4b:62:81:14:9a:15:d6:44:c9:78:e6:20:d1:44:75:45:d2:b2:
9f:7c:52:f2:13:c5:71:48:eb:3a:8c:f0:f9:6b:20:81:f8:4f:
63:68:8a:d5:fc:8d:dc:eb:0b:38:a7:b1:ce:ea:cf:8c:12:d8:
02:56:58:1a:72:c5:16:55:06:e3:6c:3a:4e:90:0d:4c:43:5e:
07:83:0a:3c:e0:55:80:c6:1c:5e:88:a2:92:07:1b:ed:54:db:
2e:83:35:42:37:85:87:ef:99:7f:72:84:20:eb:7b:a3:e0:81:
19:40:12:99:38:8c:91:70:c8:89:c2:f8:96:d3:df:a1:18:e8:
95:93:09:62:be:2b:54:f9:3f:84:3d:76:56:fd:17:81:51:a3:
39:d9:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:43:23 2025 by rpki-client