Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: eI/ztNt+NrPxyep3avn87Crtc3s9Qfhpss9nd/Q0RHw=
Subject key identifier: B1:C5:C4:C9:F7:2F:64:AD:22:D6:19:66:58:07:C2:82:96:0C:9E:DF
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 0198D472A67BD17FB7A94A7B35333F6598C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 07FB
Signing time: Sat 23 Aug 2025 01:02:20 +0000
Manifest this update: Sat 23 Aug 2025 01:02:20 +0000
Manifest next update: Sun 24 Aug 2025 01:02:20 +0000
Files and hashes: 1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
2: ga4DK68qwsMkTd-ni1B6iXRQTdQ.roa (hash: H3sXkj62Xj83aypXZVaDV2Gzb10/TmB5L1/CDA3jxj0=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: kb+QNIrDpLABLdcFmYZ0SL3/aLzuPnt9cpIrAJAvv1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:a6:7b:d1:7f:b7:a9:4a:7b:35:33:3f:65:98:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Aug 23 01:02:20 2025 GMT
Not After : Aug 24 01:02:20 2025 GMT
Subject: CN=b1c5c4c9f72f64ad22d619665807c282960c9edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:c5:eb:da:73:20:dc:64:4d:ab:61:80:b5:
03:87:d5:f5:12:58:7a:63:38:48:4b:20:b6:e3:25:
e0:70:44:8d:9c:fe:60:de:c0:f9:a1:8b:d7:d7:c0:
3b:df:23:c1:ba:45:a1:08:39:8f:51:db:99:b5:7b:
e9:28:c9:ed:d0:6e:23:9f:37:55:7e:a9:b3:a2:9c:
1e:e9:6b:55:2b:0a:7b:7c:43:f0:10:8e:cb:e4:bd:
07:66:17:83:40:ef:88:e3:eb:14:2d:3d:1a:88:3a:
a6:d7:06:86:44:b6:c0:67:cf:17:2b:3e:bc:e3:a5:
2d:15:4a:4e:fa:23:fe:8d:d0:ab:5b:67:dc:c6:f8:
00:11:e0:b3:79:ac:50:dd:b8:b3:77:70:30:e7:f5:
b0:35:a2:4b:66:b3:3d:42:b8:45:45:e8:23:e9:54:
6a:2a:bb:a5:e1:d3:ec:94:fe:49:b1:5e:bb:60:db:
eb:77:37:9f:10:59:3b:a3:45:69:d8:fe:93:f0:75:
de:50:47:85:31:9b:35:dd:14:56:60:f0:a1:b8:f2:
8f:d0:9c:13:d6:23:c7:27:e5:19:2d:f6:fb:2b:76:
e1:25:1e:51:1e:cf:bc:76:17:a9:dd:79:30:97:0b:
51:42:93:32:07:b5:e9:a7:92:44:1b:2b:35:73:6f:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:C4:C9:F7:2F:64:AD:22:D6:19:66:58:07:C2:82:96:0C:9E:DF
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:60:ae:2c:d7:d8:05:d8:30:06:ee:4e:64:cb:ea:c3:b2:d3:
84:fe:11:a2:66:86:b6:a3:74:b9:de:08:1a:46:e9:2b:90:1e:
a7:f2:70:fe:f3:73:ab:02:07:b5:51:3e:fd:9c:ab:1b:11:64:
71:b4:95:e4:59:e0:d9:31:f9:92:1d:2e:47:1c:5b:31:f9:71:
ec:fb:d7:65:b2:da:3c:ec:48:cc:fd:29:16:5b:17:28:3d:24:
3b:65:8c:71:d7:84:47:2f:04:bf:8d:5c:9f:a5:6e:ee:9c:52:
82:3c:d0:82:51:03:a9:30:c8:9b:49:2a:ff:75:34:e2:4a:cd:
50:e0:54:e8:e0:a8:ec:46:53:ce:79:c8:5b:02:b7:55:98:0e:
8b:d4:6e:8c:8d:bc:6f:2d:88:da:52:6b:5e:6b:7b:30:69:8a:
62:29:6f:7f:2b:3b:3a:8e:b8:18:b0:7c:85:26:11:b6:79:21:
ed:db:e3:47:12:7f:04:5d:e5:69:4d:83:e2:01:fb:43:68:5e:
05:54:55:df:58:12:24:72:27:b2:69:88:5b:b0:4a:73:99:64:
99:12:2d:97:a7:cf:c5:cf:c8:52:51:f2:a4:07:17:01:81:90:
7c:b5:b2:64:06:89:c5:cd:ac:64:c2:83:9d:cb:ac:d2:60:fa:
f2:e5:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:57 2025 by rpki-client