Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: Dd9YTy2a6aUgyFaLyqp9wTHhAFljvBeu9B4qk3jhfL8=
Subject key identifier: 1C:D9:9C:3E:AA:A1:6D:2F:6C:DD:43:B7:70:62:FD:D0:B8:C4:80:0E
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 0198D5837685CB6AD0D2D5E5274E51D3AD0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: gCUCKmnVG5QRW22Mm6iVYLBDv8KfRucQShAZmeIvJTM=)
2: _k0OxqJ8CNa2nq6tzt4bUNoG6Sg.roa (hash: TBT+FD53tM1tzuAflJ2lZOj8tykRjtKXY5Xc3IXyQAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:76:85:cb:6a:d0:d2:d5:e5:27:4e:51:d3:ad:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=1cd99c3eaaa16d2f6cdd43b77062fdd0b8c4800e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:d2:74:04:a3:b6:a6:d1:98:d6:4b:02:03:
1e:de:bf:e6:05:5a:38:1f:4d:c2:54:79:4a:fc:66:
9f:ca:ea:38:e1:23:d9:80:02:3c:26:3d:81:43:34:
15:38:d0:0c:ff:2a:9b:d3:be:f2:ad:9f:bf:54:16:
1c:0e:d5:1a:6a:85:45:fd:c2:6d:b8:69:6d:69:99:
6f:7d:d9:52:bc:c4:6c:6a:69:d0:f9:ee:c9:33:a3:
12:7b:14:4e:e7:36:d2:e3:78:33:fe:88:16:18:57:
1f:95:18:e5:e3:ad:1b:c3:7b:d2:48:f2:2f:19:74:
55:9b:b5:f0:c9:d6:88:85:ab:d4:06:cd:23:fa:c7:
6b:5f:d1:02:20:ff:7a:e9:02:0d:56:e0:49:e3:f7:
3b:fa:ef:fa:ff:5b:a0:61:47:34:81:dc:32:03:ed:
09:50:25:3e:8f:ba:67:32:53:ea:6b:76:c9:0e:44:
73:c9:93:83:05:de:ca:dd:a8:48:35:af:38:94:6b:
0c:49:dd:69:13:8d:ab:d9:e4:9e:89:f0:1c:4b:6d:
09:84:93:07:db:f6:c2:59:f5:d6:2d:fd:fe:9f:7b:
22:24:94:01:35:9d:e1:85:f6:fd:43:5b:fc:e6:f1:
96:c8:f8:97:b9:c7:b9:42:03:68:8f:2c:0a:e1:cf:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D9:9C:3E:AA:A1:6D:2F:6C:DD:43:B7:70:62:FD:D0:B8:C4:80:0E
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f6:5a:4e:8e:0f:d9:ac:aa:20:83:16:e0:4a:e8:4e:ff:2b:
fd:ed:c1:42:74:43:c3:4c:bd:40:90:9f:07:ea:aa:0b:73:68:
fe:b4:d0:a6:08:06:ee:bc:f5:37:27:f5:e9:fc:71:16:46:69:
fe:07:f2:dd:48:e1:72:64:05:5b:bc:a8:19:b0:8b:4a:b3:cb:
39:a3:52:0b:50:95:ea:a5:fc:3c:37:86:bb:0a:02:66:de:16:
d1:0d:cc:8a:0e:c8:1d:dd:6c:7c:68:bf:be:4b:c8:ea:95:91:
93:b0:eb:e8:de:02:de:61:d8:e7:71:82:19:fc:00:c2:84:0d:
ce:d5:16:b9:c8:d6:64:30:88:3e:98:c0:bf:2f:ff:64:d0:d1:
e7:6d:91:01:4a:ed:62:be:c2:7c:c4:1a:91:fd:cb:9c:39:1f:
6b:74:f9:4d:e4:32:27:b5:8e:e2:f5:fe:2e:66:26:e7:bf:27:
bc:d3:f2:43:74:bc:16:5c:d8:9c:5d:80:6a:d1:55:79:90:d8:
30:60:4a:88:a4:84:84:24:8a:82:f0:c9:0e:53:ea:78:c4:e0:
c9:f9:6a:0f:34:c0:7a:3c:8c:2e:e6:f7:67:25:15:be:0a:d8:
c6:02:47:20:54:81:45:97:0e:4f:42:a5:d1:bf:83:23:d6:a2:
e3:fc:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:38 2025 by rpki-client