Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File: qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier: wREax3urzySQGCo0Seye4UzTV1VqrFmNtMDHI1BAwpE=
Subject key identifier: 8B:2D:DF:EA:5F:3B:CB:46:CD:7C:BA:B2:FA:11:AC:B2:C5:BF:5F:31
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 0198D4E0360DF2E16B10FD541CD20106811F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number: 14A9
Signing time: Sat 23 Aug 2025 03:02:00 +0000
Manifest this update: Sat 23 Aug 2025 03:02:00 +0000
Manifest next update: Sun 24 Aug 2025 03:02:00 +0000
Files and hashes: 1: bqwyrPoxmVXRueWqADmdY3mrGG0.roa (hash: DoTBiSo5d9SpNBc99v9ttgOOUKnC5aTKUP1YPPWUSbU=)
2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: knqZrEM1rF+h+XGwViBheiIbWFjrsQ+h9wb29P0N8Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:36:0d:f2:e1:6b:10:fd:54:1c:d2:01:06:81:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Aug 23 03:02:00 2025 GMT
Not After : Aug 24 03:02:00 2025 GMT
Subject: CN=8b2ddfea5f3bcb46cd7cbab2fa11acb2c5bf5f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ef:49:6d:4f:77:50:82:bb:db:61:49:4e:ee:
f2:65:4e:e1:06:9f:97:bf:5e:46:17:fa:61:a7:b6:
7d:65:67:fd:70:de:69:03:37:29:d6:3e:3d:77:08:
f3:22:2f:77:11:be:f6:e9:6f:17:11:b3:6a:33:3f:
aa:ac:17:06:22:6b:a9:fb:ca:b1:2f:39:b4:4c:4b:
3b:0f:95:31:da:e1:97:5f:39:d6:de:5e:75:b4:6a:
8e:cf:e6:5f:0e:4f:b4:31:c9:be:65:71:79:83:d6:
d8:2c:18:7c:08:fc:29:73:80:3a:b7:dc:8e:fe:5f:
60:9a:2e:b2:e3:61:95:2d:d8:3b:db:83:97:ed:30:
b1:43:fd:3a:f6:46:92:3b:85:81:11:53:d9:87:0b:
93:30:0c:f4:f8:b9:bc:2b:37:97:ae:8d:a8:0b:72:
13:f9:62:94:08:ae:95:50:c8:b7:65:66:4a:04:04:
78:96:c4:cd:d5:30:6a:a2:fc:c4:af:93:ff:f4:55:
30:a8:5b:06:d9:d0:79:34:3e:83:c3:6b:9b:b6:fa:
1c:9f:14:77:1f:49:6d:ac:fb:7b:21:05:ce:03:5c:
cd:f4:e9:cc:c1:00:0c:5e:c3:b5:f0:94:ae:e3:6d:
3a:5a:c9:4b:78:29:fb:d5:53:81:80:46:05:1e:1d:
03:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2D:DF:EA:5F:3B:CB:46:CD:7C:BA:B2:FA:11:AC:B2:C5:BF:5F:31
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4a:e7:d6:d9:e1:e8:8a:64:fd:4e:f8:50:24:07:34:ec:3c:
38:84:0d:23:08:08:51:89:34:7b:e3:43:00:90:ce:c3:c3:1f:
24:5b:0a:81:1a:a4:27:31:7b:fe:f7:1c:99:70:37:2b:c0:24:
93:7e:39:11:91:c9:8b:bd:b7:c5:44:98:44:8e:ce:2d:a1:35:
09:95:6c:d4:a3:ae:53:b3:e5:56:cc:74:6c:71:ab:6c:e4:72:
cc:44:a3:7e:e2:ac:04:43:68:13:00:b5:63:9d:ac:36:f7:b0:
b1:ad:d6:90:40:8a:e3:e3:86:6a:54:13:cd:5e:8b:7d:fa:84:
c4:c2:20:62:95:c5:1f:8a:0c:df:7c:93:04:6e:ba:bf:d9:c2:
62:db:cf:6d:70:a4:1b:cf:67:47:b5:82:0f:a2:e4:8f:fe:fb:
18:66:c4:de:53:f5:fb:cd:7d:db:15:1e:64:9e:af:01:73:e4:
e2:57:0c:7f:d6:68:ca:06:67:30:de:0f:14:89:27:a4:ab:6e:
34:84:9e:be:b8:1c:48:19:0c:39:a9:0e:a4:a1:81:a3:74:a2:
ab:5d:29:37:12:7f:5f:20:a6:5e:48:9b:50:09:2e:9f:0e:5f:
73:fd:e6:9b:eb:8e:61:51:49:29:83:da:28:69:33:43:11:16:
f4:f9:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:07 2025 by rpki-client