Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: QHTrs0jFgfbirzaXUDHeyeogh5SXDnzgK5fsHW23Lmg=
Subject key identifier: 4F:71:A2:AB:BF:20:07:D9:B3:49:00:73:48:91:3E:8A:22:4A:17:86
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 0198D474665574C3353BAA79BF1650D32B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 1453
Signing time: Sat 23 Aug 2025 01:04:14 +0000
Manifest this update: Sat 23 Aug 2025 01:04:14 +0000
Manifest next update: Sun 24 Aug 2025 01:04:14 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: 6i2IOk1tR5NYQFGcv/tPoQcNpxmqqPHfI6GM8j9W1/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:66:55:74:c3:35:3b:aa:79:bf:16:50:d3:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Aug 23 01:04:14 2025 GMT
Not After : Aug 24 01:04:14 2025 GMT
Subject: CN=4f71a2abbf2007d9b349007348913e8a224a1786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:9a:de:d7:f1:06:7e:58:b4:d5:6a:02:0d:
85:8d:5c:91:f9:fb:2e:6e:fd:6d:de:80:68:fa:14:
06:0f:15:3c:ac:12:99:c4:de:a7:83:79:14:0c:3f:
44:8c:9e:c9:92:d7:81:d7:c8:32:ee:12:f6:8a:8e:
49:21:6d:83:ae:04:d5:00:75:27:33:03:d6:0f:53:
b9:28:24:78:ee:20:df:c2:8b:f5:07:26:06:b0:23:
88:14:70:91:ee:b2:39:50:1f:9e:de:2c:37:54:3d:
e0:f4:b2:be:f3:47:50:0f:f3:99:31:28:e1:55:b6:
09:8a:af:b3:f5:0e:b8:01:8f:5d:ef:4a:ca:f7:8c:
ac:8b:a6:57:d3:02:19:07:74:ba:f8:af:89:01:46:
a4:2b:79:17:95:58:e4:53:05:2e:18:9d:b1:8b:6a:
71:b0:21:53:14:89:ec:de:42:0f:e1:53:0f:99:5e:
98:e5:d4:2d:11:c4:ad:cd:e9:60:0f:b4:52:ad:20:
fa:32:87:68:e6:e4:f9:59:8b:5e:d3:d7:f2:0c:53:
09:b7:ad:7f:4d:65:ab:d7:32:d4:ef:87:84:64:2c:
79:f8:9a:dd:3d:20:d5:bb:74:01:2a:54:87:df:22:
2a:91:80:6f:06:92:b0:bb:9c:19:4d:80:d3:67:72:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:71:A2:AB:BF:20:07:D9:B3:49:00:73:48:91:3E:8A:22:4A:17:86
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d3:3c:8d:bf:21:a8:aa:0b:fa:73:6f:30:11:20:ee:14:09:
6e:96:17:25:d4:1c:df:8b:f9:71:a8:d3:a2:eb:7b:ae:17:50:
7e:94:b1:4e:df:fe:20:96:da:2f:54:cb:e9:89:d0:24:1b:8a:
8a:e8:b0:9f:e2:12:6d:5b:7f:8e:d5:15:56:e8:27:1e:78:f2:
e2:b0:83:60:f0:ca:4e:bd:83:ba:ea:0c:dd:18:c8:e8:d8:ba:
70:17:ec:51:e7:12:70:8f:e9:82:df:56:26:f4:01:03:c1:c3:
74:48:70:1b:78:8b:70:31:c0:28:ea:a3:f4:8c:d7:f8:08:d3:
ca:f7:82:22:2d:f0:7e:03:48:fe:84:cf:22:b1:64:bc:ec:ca:
b4:8e:36:b5:8e:e0:0d:a8:88:55:82:c8:aa:70:ca:5b:29:42:
65:20:e6:3e:23:d4:17:c6:1f:8a:59:bf:80:5a:e5:fd:bc:25:
49:72:ec:6b:8c:f0:04:0a:62:ac:cc:00:4f:fe:e0:16:33:48:
47:e1:56:c5:f7:d3:e5:2f:0a:3c:84:8d:8c:e3:61:48:f7:7f:
83:91:7b:4f:44:a0:34:cf:10:3b:07:04:8e:50:00:95:0a:aa:
36:be:14:f5:6a:24:c1:db:30:93:21:7b:9e:cd:bc:56:0f:2e:
18:64:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:25 2025 by rpki-client