Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
File: qQ35UgJATbHy5A7D3n7sON1qn-4.mft (raw, json)
Hash identifier: G3UvNUe3Qm4PvmJ6KhqkBv1ESz6MgNfdCE7vJxKF5gA=
Subject key identifier: 1C:54:78:40:B9:BB:10:48:1D:F4:CD:50:E6:97:E6:E8:44:C6:6D:DA
Authority key identifier: A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
Certificate issuer: /CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Certificate serial: 0198D697EFFE4F91FAC9E26C148F7C451BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
Manifest number: 01DF
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: qQ35UgJATbHy5A7D3n7sON1qn-4.crl (hash: UXEgGzH7ag+NFx+Ke/dQTSKRuN94zwDzqgxe/HuKMhg=)
2: xDaTSU1r08U3icbYzh9eT36EBN4.roa (hash: AXlgpTaBb24aHDSoXt8sy77THaBujLte6mCP+q3Zt1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ef:fe:4f:91:fa:c9:e2:6c:14:8f:7c:45:1b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90df95202404db1f2e40ec3de7eec38dd6a9fee
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=1c547840b9bb10481df4cd50e697e6e844c66dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e9:fc:c5:d3:f1:d3:90:11:9a:9e:5e:7e:fb:
e4:1d:67:46:3a:20:c0:50:65:78:c0:56:5d:f9:15:
cf:b5:63:6b:74:88:fb:54:ce:3d:a7:fe:6c:08:c3:
df:a8:65:1b:8a:d3:b3:6a:92:89:32:b1:22:cf:cf:
ca:9e:ab:e7:28:05:e3:de:ff:86:4f:ec:5d:dc:f6:
f3:93:d7:23:05:ab:f0:44:0a:ab:a4:4f:2c:fa:33:
d7:83:0b:e4:fb:45:78:51:71:27:b2:15:df:b5:79:
89:ac:55:66:42:80:40:b1:7a:6e:b5:86:04:3b:2e:
47:72:9c:01:7e:9d:6e:86:2a:a7:47:89:af:a6:ae:
9d:72:a8:f7:01:ea:1a:dc:00:64:74:9d:b4:b4:d3:
69:5b:1c:b7:4e:f4:16:6b:8d:a8:0a:d4:c4:7e:99:
04:c7:0c:ef:e1:d6:8e:6f:93:d0:e3:a5:99:6c:01:
9a:3b:1a:3c:ed:d2:6a:31:ed:68:46:a4:18:b1:cb:
69:f1:14:cc:0a:77:c9:da:4b:35:fa:93:d3:0e:91:
07:5a:b0:c3:10:db:5d:42:b9:83:e4:48:82:f3:4c:
21:6b:60:14:a7:bc:e2:bb:57:f8:75:78:07:4a:40:
3b:b2:6b:e5:da:a9:29:ce:e9:d5:6e:e3:c1:85:06:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:78:40:B9:BB:10:48:1D:F4:CD:50:E6:97:E6:E8:44:C6:6D:DA
X509v3 Authority Key Identifier:
keyid:A9:0D:F9:52:02:40:4D:B1:F2:E4:0E:C3:DE:7E:EC:38:DD:6A:9F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ35UgJATbHy5A7D3n7sON1qn-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d8e320-a555-401a-80ff-bf731fe99d3a/1/qQ35UgJATbHy5A7D3n7sON1qn-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d6:20:88:76:b0:21:96:e9:35:f6:d7:65:d4:d1:62:c8:81:
f9:d1:c3:31:7d:b9:07:80:d0:98:b6:6d:09:ed:35:06:a1:0c:
70:eb:79:cf:2d:bc:0e:54:c5:9f:9f:b3:b5:3f:5b:77:c7:b2:
b1:fd:e3:cf:c6:ac:8d:4d:9f:6d:f7:93:fb:d1:8e:48:0b:c2:
6e:e9:38:34:6e:72:30:8c:a2:72:6f:4a:ba:87:db:d5:5c:3a:
cd:77:7b:5c:a7:18:0e:03:c2:97:52:e8:a7:fe:f0:85:07:75:
77:93:92:72:c1:bd:4a:e4:63:c3:70:1a:12:1e:23:e2:15:78:
ee:b8:9b:cc:d4:19:4c:5e:99:9b:29:85:4c:30:d6:a1:7c:5b:
c5:3d:8b:3b:1e:40:d7:37:81:8a:06:1a:d1:e9:2a:d9:5e:98:
e3:9f:4b:63:6a:c9:a6:a9:b3:f8:d0:d8:e1:9b:b1:52:f0:41:
85:76:d1:a2:8c:17:2e:4c:35:c5:b4:d3:70:b8:f3:61:e4:a9:
5f:f2:24:a3:95:33:49:1f:fe:67:7c:8d:4b:18:7e:c7:16:26:
53:a1:0e:22:5d:78:a3:d3:2b:6e:cb:3d:a6:f1:bc:0c:66:c0:
57:0b:8d:7a:6c:1f:88:71:c5:aa:70:e5:88:08:ef:8c:78:fc:
a8:86:92:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:13 2025 by rpki-client