Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: aQB0N3jzziNsKXoJUjss9hkJYeizxMvX6uWKCqTVokk=
Subject key identifier: 7D:19:A9:2E:AD:4B:F2:5F:65:72:1A:F5:0E:67:C8:4F:88:2D:AB:D2
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 0198D7E0F290CD8CF1CF4FB8644782F7047A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 17:01:40 +0000
Manifest this update: Sat 23 Aug 2025 17:01:40 +0000
Manifest next update: Sun 24 Aug 2025 17:01:40 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: GQR1Ls+isr19iOFBbRO6TmarVywIGj62934esGtvzlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e0:f2:90:cd:8c:f1:cf:4f:b8:64:47:82:f7:04:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Aug 23 17:01:40 2025 GMT
Not After : Aug 24 17:01:40 2025 GMT
Subject: CN=7d19a92ead4bf25f65721af50e67c84f882dabd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:84:1c:0e:36:3f:06:cf:ea:f0:55:72:65:
bb:17:f1:0c:3a:eb:4b:27:06:35:05:c7:13:08:5d:
60:85:19:76:d9:c8:33:75:83:94:ee:99:9e:41:e4:
6d:61:70:5a:a8:12:3f:e5:e5:6d:e5:62:bd:d2:79:
63:a6:c7:22:70:b6:2a:52:ba:80:e4:a7:a7:b2:24:
cd:df:0f:98:da:c8:b4:25:a4:5c:f7:cc:43:f2:72:
1b:57:0b:3e:08:0d:10:e2:4a:24:bf:25:fa:23:fc:
14:4a:fa:4b:95:c8:a0:79:d9:4b:7d:a1:3f:37:8a:
38:0c:0a:0d:1f:85:5f:ce:a9:55:1d:04:b5:6f:fe:
8b:0f:56:65:fe:0d:e3:c5:7a:ab:74:ab:e3:ca:3c:
fd:fe:29:d4:1a:2a:1f:4d:ee:32:52:21:5b:36:e3:
2c:65:91:3e:d5:52:a4:1a:0c:e6:9e:61:56:17:9a:
b9:08:84:bd:f2:ea:fb:a9:68:5d:51:65:64:64:30:
ba:fd:c5:df:63:6e:43:d1:24:23:4e:3c:14:3b:ee:
1f:32:8d:fb:c7:82:08:26:74:65:48:9b:76:8a:8e:
ed:19:29:dd:f4:ac:47:c5:fa:af:cb:62:bf:98:5a:
fd:a5:35:af:24:20:11:10:dd:3f:e1:6b:3d:90:c0:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:A9:2E:AD:4B:F2:5F:65:72:1A:F5:0E:67:C8:4F:88:2D:AB:D2
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:57:9f:f2:d7:c7:17:41:43:e6:d0:6b:bd:62:69:d2:55:95:
d7:9b:59:34:44:10:bf:c8:77:32:6e:61:be:d7:bf:7d:e4:9f:
52:ad:e8:df:83:55:6b:3a:cb:3b:1a:69:af:de:60:8f:c9:bb:
62:c9:20:fb:75:aa:27:b3:9f:d1:8d:15:55:58:8d:e8:ba:23:
01:6c:74:4f:58:8f:f8:c2:0d:54:f1:5a:ee:03:13:4a:f0:19:
49:53:33:00:ac:9b:d8:5a:e4:a4:ae:dd:5e:3d:5c:77:b2:40:
59:65:d0:35:8a:5f:dc:f1:62:ae:d7:01:ee:92:69:1c:23:88:
f1:97:4b:52:e1:3f:dd:eb:be:87:02:11:86:05:56:af:5b:3f:
09:14:7b:0a:53:e1:71:fe:3c:ba:d8:44:38:6b:98:33:c7:bc:
d2:66:f7:6a:6e:e8:cc:5a:2a:4d:b9:57:cf:66:f1:11:44:22:
d2:f2:de:7e:3b:41:ca:c4:ca:59:89:1f:69:af:3d:31:4e:3a:
6b:d3:11:f3:c9:fa:bd:3b:3b:fc:e4:8f:34:0d:7f:80:19:52:
c5:f7:f4:7a:df:f3:48:91:ea:96:7e:7b:02:cb:be:4f:91:23:
a1:68:d9:4b:3c:c4:dc:99:bd:94:ef:12:b0:73:0b:97:9d:ac:
d5:d7:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:28 2025 by rpki-client