Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: Vaobt9+4MSaqkpVP1XpMZYrDabun3aB5Yn+Y4ZeTRh8=
Subject key identifier: 7A:FF:8D:C1:02:E1:61:7D:EF:35:39:CC:F0:2C:46:69:3E:DC:0C:5D
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 0198D54E319CDAB3C5FACD941A1EEECB6E85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 11D1
Signing time: Sat 23 Aug 2025 05:02:08 +0000
Manifest this update: Sat 23 Aug 2025 05:02:08 +0000
Manifest next update: Sun 24 Aug 2025 05:02:08 +0000
Files and hashes: 1: Y_LE7fqvC-DJjpGE04PAiZiS4sM.roa (hash: /iG8f1CjLF+Lu2JxpQ3C4TbNa9Jv5YP2v7PLHqXyCAI=)
2: kBfIeqAeKWivX1BBStYnhq8eQKY.roa (hash: 6hm3q6RVhanYeJb6ZfkoLkT3Ro77DzfwBMRFcvbLBuA=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: AkYiw67SfeJKtD5lD5AHbU6C3ah6MbQAAIOawwLZADU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:31:9c:da:b3:c5:fa:cd:94:1a:1e:ee:cb:6e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Aug 23 05:02:08 2025 GMT
Not After : Aug 24 05:02:08 2025 GMT
Subject: CN=7aff8dc102e1617def3539ccf02c46693edc0c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:e4:06:7c:a0:f9:70:06:d3:59:a8:d9:d0:
a5:32:07:ed:11:23:df:4d:cf:9d:63:7b:92:c4:8b:
5c:96:e3:34:59:41:37:01:f3:a0:ff:78:82:f5:76:
2e:78:59:89:40:b8:1d:13:0c:5f:dc:db:af:bd:ec:
aa:30:84:d1:a9:f8:39:9c:c4:c9:ca:65:fb:4d:70:
e8:92:53:d5:a4:b2:e1:b4:95:31:4d:c4:cc:80:27:
8d:cf:85:a9:59:f8:96:ac:4b:e3:61:c4:75:f8:83:
d0:7c:c0:1d:83:f5:83:6c:f2:d9:9e:b9:26:28:fa:
8f:77:80:ce:de:35:54:17:c1:94:47:e9:44:87:98:
37:78:26:bc:5a:bd:bd:2d:bd:ab:24:71:0c:85:66:
27:2c:a8:3c:02:c9:1c:d0:07:b5:d6:5c:92:c9:30:
46:a7:25:aa:7d:8a:f9:7d:70:fe:8c:6d:e4:bc:14:
de:05:f5:32:f4:80:d9:2a:9d:79:5b:79:9d:09:1e:
4c:21:e7:60:4e:12:1e:9d:cb:df:5a:0e:20:97:8f:
b0:a5:77:0b:d9:a3:c1:6b:42:8d:ce:f8:1d:76:3f:
1e:4b:0f:92:cd:a4:13:ad:ea:75:1b:d8:00:e2:67:
11:68:dc:5c:84:c1:4d:20:79:94:eb:6c:59:b6:5d:
15:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:8D:C1:02:E1:61:7D:EF:35:39:CC:F0:2C:46:69:3E:DC:0C:5D
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f8:17:27:da:77:94:35:0b:ec:ee:fd:20:c3:00:de:06:fc:
ed:c6:52:0c:87:6f:73:60:69:7c:e3:3b:93:74:09:c0:67:a4:
42:36:7c:81:15:28:89:9a:79:95:4e:33:f4:24:96:37:2e:ae:
43:80:b7:7e:5f:70:d8:76:db:47:be:3f:eb:44:16:bf:dc:f1:
cd:61:32:9e:84:d0:12:0b:55:c3:a6:79:d3:d8:12:65:5d:65:
8f:f8:ba:cf:bd:24:03:00:43:8f:1a:73:d5:37:f9:ae:5a:80:
6c:03:a4:76:53:97:89:66:d9:5b:26:fe:cf:20:d7:e1:cc:14:
4f:c8:b6:e8:1a:51:88:27:98:17:a2:fe:36:23:45:04:a3:9d:
0c:90:bf:62:04:c2:43:30:17:ec:3a:9d:12:10:e9:e1:d3:cd:
7a:f9:e1:79:be:5d:b1:26:eb:24:f5:b5:7f:1e:bd:69:c5:4f:
fd:53:83:2d:5a:b8:9a:61:ea:fe:3b:9e:2f:24:10:73:79:80:
6f:86:ff:1d:f9:7a:af:67:53:d7:bc:3c:83:5c:f3:a7:77:f8:
da:39:e5:fa:b1:ec:33:25:9a:50:74:08:50:85:b0:a9:96:54:
1a:17:ea:40:9c:e6:54:61:d6:45:82:fd:de:24:b4:21:f3:bd:
77:bb:94:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:43 2025 by rpki-client