Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier: MHCQou+6efts/FqAJkwlKSlTIADa9RRvgsBz/1OtJR8=
Subject key identifier: 25:1A:92:B4:4E:12:78:BE:A6:85:16:80:C7:5E:A3:0A:0E:9E:3C:AF
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 0198D5BC1C0C767995F2218087D2902D7E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number: 1523
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: jPSnBQcMKCslPrLopIfgmZ8ZaYG1EVwowFlrVE0yv/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1c:0c:76:79:95:f2:21:80:87:d2:90:2d:7e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=251a92b44e1278bea6851680c75ea30a0e9e3caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:e2:47:e6:05:37:64:e5:2f:09:f4:7c:fc:
88:42:47:da:7e:1c:3b:ae:27:96:f8:41:c9:8d:97:
cb:fd:69:7d:e4:59:04:43:fa:9e:e0:d5:cd:53:13:
7c:a5:09:43:60:96:ab:ea:7f:34:c5:a7:06:05:f8:
6f:bb:1d:d3:cb:10:1f:40:9b:45:f3:0d:de:85:7e:
0e:84:30:fa:ce:10:fc:59:0f:51:75:2f:e3:52:89:
c1:3b:af:b9:ae:fb:98:4b:e9:67:60:b1:61:bd:9b:
93:aa:e6:1b:7b:31:88:12:d5:27:5a:66:52:5f:87:
11:a7:8e:97:d0:62:48:b6:91:fa:09:25:22:f8:6e:
d2:d6:37:3f:d2:d2:ea:b8:f9:dc:c2:70:f5:f8:1c:
fe:4d:db:53:d8:3a:1e:2d:06:01:4e:33:b0:d8:50:
5e:da:aa:9f:60:cd:bf:0c:35:a7:c2:54:7e:41:2c:
16:f9:12:0c:aa:61:7f:41:db:41:18:97:42:7d:29:
d8:10:64:c1:27:e9:5b:0b:15:d3:59:a8:1c:7b:f5:
3d:00:81:d0:1a:2d:78:db:36:69:71:06:51:f9:47:
2d:1b:b0:08:6f:19:c3:3a:29:d3:fa:66:5a:5d:49:
d7:9a:e7:dc:75:fd:03:56:54:87:3e:59:3b:f5:b0:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1A:92:B4:4E:12:78:BE:A6:85:16:80:C7:5E:A3:0A:0E:9E:3C:AF
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:21:53:7d:a5:51:be:b2:b9:41:22:35:c3:a8:26:06:b4:98:
54:4a:ae:80:a1:bc:65:90:a0:98:4f:cd:71:41:08:f2:00:f4:
b9:38:e1:a6:ce:8a:c5:61:de:e4:54:b8:a8:3f:b8:e4:f4:87:
75:36:d3:13:44:75:c6:ca:a2:1f:99:23:01:8a:f3:06:fd:63:
d1:4d:51:f9:b8:6f:78:96:84:3c:fd:a1:1d:25:00:e4:4c:da:
c8:2b:f9:23:4d:fc:35:cd:fa:6a:aa:e1:9e:10:66:96:d4:bb:
89:c2:c5:43:b1:52:25:68:2e:84:74:5a:b7:c7:46:78:ed:66:
60:0c:a8:df:7e:b0:85:82:d0:62:e2:4c:b3:db:df:ea:79:c5:
2e:fd:4c:b7:c8:2f:05:53:53:5a:fb:e4:c8:eb:e0:b7:ab:42:
92:c0:a1:28:14:6d:4a:dc:79:9f:03:0c:55:c2:dd:97:b0:47:
a6:b0:e9:d0:bc:e7:cc:e5:2e:6c:1f:d8:83:f4:3f:2e:44:23:
c5:3a:ca:85:59:a3:0f:fb:c1:73:5d:82:58:5c:3a:2a:79:b3:
f2:45:41:cd:24:ce:c0:e3:47:5b:e2:28:ba:ea:5d:d9:c4:28:
7b:15:e9:f9:12:b9:64:3a:d0:7a:8e:54:2d:94:c6:77:93:41:
5b:b8:38:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:37 2025 by rpki-client