Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier: nrFmkxL6xdMwFW2vSyRH/Iyfj7YKDhACDFd9/yesmRU=
Subject key identifier: 3A:9D:C3:BD:99:9B:E0:A4:3B:C1:E8:96:D4:5A:6A:2C:CA:C0:B2:1D
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial: 0198D4A793365E9F02E822BDEF72D491D354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number: 1093
Signing time: Sat 23 Aug 2025 02:00:08 +0000
Manifest this update: Sat 23 Aug 2025 02:00:08 +0000
Manifest next update: Sun 24 Aug 2025 02:00:08 +0000
Files and hashes: 1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: IJdHq+ktTTuG6oBji42H+MbUihfPJbFBOipo/c8Q7hM=)
2: hOsUXVARCl8NqYdv3cI6OIcfqwU.roa (hash: w1gjvrKQRUt3hmiD9OYkOr05DsegCS6tRj5zStTTlPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:93:36:5e:9f:02:e8:22:bd:ef:72:d4:91:d3:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
Validity
Not Before: Aug 23 02:00:08 2025 GMT
Not After : Aug 24 02:00:08 2025 GMT
Subject: CN=3a9dc3bd999be0a43bc1e896d45a6a2ccac0b21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:17:30:0f:ef:2a:9c:a8:c4:00:ce:5b:e7:
24:d3:a7:b9:a5:83:a0:ef:73:91:3d:51:c2:7e:d4:
2a:89:18:1c:ad:97:19:d8:55:ec:51:62:f8:e3:a1:
61:cc:c6:dc:03:88:67:44:33:b4:4e:d3:b3:7d:d7:
ec:e9:c0:4f:97:38:5c:e1:5f:a6:5b:6c:d6:3d:a7:
e4:87:7f:ac:6c:dc:7a:8a:15:f0:46:1d:e5:17:64:
eb:b0:2a:e7:ed:29:24:38:58:31:bb:30:18:86:27:
ef:67:b4:30:5e:ac:1e:6e:86:d0:c1:b1:72:be:c8:
22:8b:a1:cf:5c:43:6c:e8:fc:7b:40:72:ec:48:76:
62:69:35:7a:9a:ac:7f:9d:82:98:ed:32:bf:62:85:
0e:f8:a5:3f:01:44:ce:a4:15:50:03:19:a8:91:ef:
79:0c:7c:1f:2f:a7:3f:f9:75:14:0c:22:b7:8d:d6:
39:be:3b:91:93:ed:ad:73:28:b7:0a:0c:0b:33:a4:
00:d6:92:93:8a:9a:ca:15:8f:bf:d8:c5:43:a8:5b:
2a:2d:cf:da:21:ee:35:2c:33:12:db:96:80:d1:cd:
80:15:54:ad:b5:b5:d2:80:e7:9a:98:d6:68:34:62:
59:0d:b5:38:86:8b:84:6c:c9:ad:d3:b3:95:f0:56:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:C3:BD:99:9B:E0:A4:3B:C1:E8:96:D4:5A:6A:2C:CA:C0:B2:1D
X509v3 Authority Key Identifier:
keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0a:54:13:d5:d0:a4:49:a8:16:e6:ec:2f:42:4d:33:75:a6:
98:6b:d1:9f:cc:4d:6d:30:84:25:5f:98:b5:f4:9e:5d:98:da:
72:d0:91:ca:0d:ed:4d:f4:fd:9f:53:a2:6e:68:c7:61:b6:8a:
7f:93:3b:ad:cb:eb:b2:fd:e5:21:30:4c:70:da:00:d7:b7:d6:
92:20:3c:f5:5d:71:c1:42:05:5c:ff:4c:e2:ea:5e:49:33:0b:
60:57:3c:ab:fb:35:dd:3e:9f:b6:06:de:09:1c:d3:d7:95:51:
28:1d:b7:95:57:40:22:da:b8:a5:3b:1d:fd:2a:33:82:04:ff:
5c:b2:d5:84:f7:2b:92:e7:bf:ad:9f:77:1f:73:69:21:2f:08:
ad:7f:ac:f9:0a:81:22:10:cd:41:00:ce:a6:83:ee:83:71:af:
7e:4d:7a:91:8c:c2:77:88:2e:61:48:14:e5:b5:d4:1f:62:40:
07:ff:7d:02:fc:92:26:4a:aa:7a:8f:23:fd:6e:37:ce:62:ee:
94:44:3d:99:7f:a5:f4:0c:2d:52:12:ee:aa:fc:b5:09:f9:aa:
17:6c:8c:55:dd:76:b1:0a:da:cb:a7:0c:9f:28:90:4d:b8:99:
0d:89:4f:93:35:8f:f3:16:04:65:10:11:23:2e:d9:63:12:cc:
a8:ab:03:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:35 2025 by rpki-client