Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: eEqF9lMDscbrRhB7EpXhIUk3U1xcGX3caz4Szclb0I4=
Subject key identifier: DC:36:AC:55:9E:9E:D5:89:17:B4:D3:9B:F1:B3:EB:CD:EE:78:CB:E9
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 0198D472F17CFEE264975179FF722BF705DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:39 +0000
Manifest this update: Sat 23 Aug 2025 01:02:39 +0000
Manifest next update: Sun 24 Aug 2025 01:02:39 +0000
Files and hashes: 1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: mJQsiyoeeemWCTlrtswjlr7JUutvRxNrR5OYay2428A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f1:7c:fe:e2:64:97:51:79:ff:72:2b:f7:05:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Aug 23 01:02:39 2025 GMT
Not After : Aug 24 01:02:39 2025 GMT
Subject: CN=dc36ac559e9ed58917b4d39bf1b3ebcdee78cbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:87:82:ae:27:bc:14:33:be:55:d3:d4:0b:f1:
43:5d:0e:65:a8:50:ea:60:46:40:a9:38:83:22:07:
9d:09:75:4d:68:44:de:0f:88:fb:f4:7c:44:9f:0e:
5c:b8:1f:40:4a:64:de:bb:51:a1:01:fd:de:50:03:
cb:85:0d:12:8d:ad:4a:40:64:93:28:4c:cb:d5:da:
f5:62:53:5b:ca:80:48:18:53:55:d9:c3:22:b2:0d:
bc:20:7e:85:8b:dd:b5:8d:d5:bd:3a:eb:ac:01:63:
67:1d:21:2d:8d:ef:48:78:1f:04:ff:c7:c9:ea:e3:
89:df:65:d5:cd:e6:f7:42:5a:e2:46:41:59:d4:2e:
b3:fd:7f:e3:f6:a8:10:40:01:e7:51:2a:d2:90:aa:
41:c1:8c:d6:7c:e5:81:00:76:07:2f:ee:03:2c:fe:
21:bf:27:1d:d7:a2:e3:32:7a:98:7f:c8:b9:d2:7a:
5e:8a:81:0b:b1:59:87:5b:d5:e0:b0:ec:ab:99:76:
6a:11:c4:d8:93:fb:41:eb:3e:b2:a4:bc:30:f6:7e:
74:c7:46:a7:fd:0d:75:5d:6e:a9:b8:8e:1a:0a:37:
76:52:81:3d:7d:87:3b:53:89:41:70:3a:a4:2a:72:
a9:1f:8f:61:a8:13:21:c5:2a:f6:f7:2c:e5:ae:3e:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:36:AC:55:9E:9E:D5:89:17:B4:D3:9B:F1:B3:EB:CD:EE:78:CB:E9
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cf:ce:a7:47:30:ee:06:c7:09:3c:9d:95:20:58:e2:43:02:
81:a0:4f:98:f4:82:d7:13:db:2a:b7:37:b0:ac:ac:34:d8:e0:
d7:61:9c:8f:99:3c:ff:72:53:db:9f:5c:e7:bc:b7:cc:15:9a:
4c:7f:e3:24:6a:ca:95:93:74:ba:47:7d:c8:11:22:cc:89:76:
5d:d6:b4:c2:61:67:c0:51:f2:1c:31:46:fa:cf:27:54:9c:ec:
4d:7b:c5:25:63:e5:bf:ed:a3:9b:62:85:53:ce:ea:64:11:d2:
57:e5:2b:46:11:a7:69:e2:0e:3a:b2:ec:c4:58:42:bd:41:86:
94:14:fd:82:02:22:32:81:f6:61:ea:47:83:1d:ba:29:ab:1c:
72:82:54:fa:7b:fd:b2:c0:48:dc:d8:68:6a:7d:96:8e:6a:c4:
23:80:65:43:38:eb:7a:e8:8d:e1:df:81:7b:5d:31:4e:ab:4c:
c0:f2:64:0f:e5:33:53:97:97:12:05:68:61:0d:cb:d2:8a:49:
eb:26:6e:4d:22:6f:23:2a:ee:19:b6:9e:23:0f:9f:8b:51:c2:
d4:5d:d0:30:24:8f:4c:ea:cb:3b:88:07:1f:2f:34:04:ad:7b:
5f:f9:30:8b:cf:18:99:2f:00:2c:50:ad:a5:bf:d8:10:05:42:
9d:f4:d2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:14 2025 by rpki-client