Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
File: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft (raw, json)
Hash identifier: p9jVg8RDJpUgs+9khoFoDLs5xRKvCuE5yO/5ANqKUIA=
Subject key identifier: 57:1E:71:C3:D6:D7:79:09:3C:73:6A:B7:10:19:4C:5B:83:40:0C:8A
Authority key identifier: 43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
Certificate issuer: /CN=43acc2f2be1a36b089216544d23c95ace232e143
Certificate serial: 0198D473E7F08029660C1E89114639B48320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
Manifest number: 099D
Signing time: Sat 23 Aug 2025 01:03:42 +0000
Manifest this update: Sat 23 Aug 2025 01:03:42 +0000
Manifest next update: Sun 24 Aug 2025 01:03:42 +0000
Files and hashes: 1: KKb3movEaRK5uooL7CLlRng9BxI.roa (hash: QF2heUsD9ZCfGN4fGvk2RN46irWE6FgEYevma5ik6/E=)
2: Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl (hash: fi5D/QM/LbLDqyskFnFSizZ6rn1PPhjOmMrJOLBW21g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e7:f0:80:29:66:0c:1e:89:11:46:39:b4:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43acc2f2be1a36b089216544d23c95ace232e143
Validity
Not Before: Aug 23 01:03:42 2025 GMT
Not After : Aug 24 01:03:42 2025 GMT
Subject: CN=571e71c3d6d779093c736ab710194c5b83400c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dd:d5:db:95:84:7d:6e:74:da:39:36:75:e2:
39:b6:81:49:05:d5:b8:f6:9e:e7:65:55:85:b4:64:
16:68:89:1f:a6:dc:df:99:c3:5e:d6:45:a3:92:8f:
22:33:10:62:4b:7f:3d:ce:a1:83:f7:77:56:3a:31:
d5:0f:52:86:1b:6b:94:c9:a9:34:7f:aa:20:bb:67:
a0:2a:34:09:73:7b:63:a9:6d:52:fc:4a:e6:44:03:
e9:12:b9:f7:58:b5:5d:b1:28:41:6a:23:b5:ae:e1:
cd:c7:3b:20:41:25:f0:67:c8:26:d8:33:e1:b4:b6:
86:5f:31:c7:2f:88:11:a2:70:23:d4:e7:bb:ab:4f:
1c:a7:83:69:bf:b1:af:e4:19:6a:5b:b4:9c:b0:58:
5d:70:3b:a9:fd:64:ce:2d:cd:0e:8a:22:ca:94:1d:
c7:81:60:dc:7e:70:21:06:2f:d6:da:91:da:8c:ee:
9a:13:a4:f6:71:57:30:6a:38:91:25:6e:df:cc:87:
01:35:2c:e7:c4:d2:de:eb:33:e2:9b:54:38:23:66:
e9:b9:37:fe:21:d4:8b:55:81:1a:0d:af:e5:43:43:
28:ab:b7:0d:bc:5a:64:89:66:05:0d:fc:31:5f:2f:
04:14:53:b6:f1:8f:0c:4b:f3:58:dc:87:d8:c1:6e:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1E:71:C3:D6:D7:79:09:3C:73:6A:B7:10:19:4C:5B:83:40:0C:8A
X509v3 Authority Key Identifier:
keyid:43:AC:C2:F2:BE:1A:36:B0:89:21:65:44:D2:3C:95:AC:E2:32:E1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/eacd48-76ea-4ec7-a141-f5201658fa14/1/Q6zC8r4aNrCJIWVE0jyVrOIy4UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4f:11:95:aa:38:7c:ad:f6:ef:ba:a8:c4:03:92:db:9b:27:
a5:f0:0f:5a:b9:ad:b4:6e:37:2c:1e:fe:8a:d5:e7:c1:8b:b3:
cd:53:17:39:0b:0a:cc:02:b3:17:ba:62:a9:93:f7:a4:ed:77:
af:07:64:43:1c:7d:f8:35:3f:da:dd:7c:1d:aa:14:83:b5:91:
1c:c2:94:e0:23:ba:07:56:ba:4e:30:db:2b:b1:e4:80:7b:0f:
41:0b:ff:79:af:d2:76:bb:c9:31:7f:f9:ea:ec:9d:cb:96:b5:
17:ed:72:8e:51:55:8a:90:e3:c1:8c:58:75:31:a5:2a:36:8b:
94:22:4e:56:39:2b:fb:d7:76:7d:53:de:89:0d:21:2d:1f:59:
03:7e:5e:15:70:0f:81:a6:de:f2:d5:0a:c0:1b:e7:38:ac:7f:
28:21:41:81:f4:84:c1:fe:09:2d:dd:e3:cf:93:a8:4b:00:83:
37:d5:07:92:1c:d8:7f:ba:3b:73:93:24:bf:a5:22:ca:07:45:
1d:3c:dd:32:c0:14:df:c6:02:7a:ad:95:9b:0b:23:6a:d5:d6:
1a:1b:19:f8:93:9f:29:a0:c3:87:77:2b:f6:b3:b6:44:13:d2:
9b:a5:85:fa:0f:cc:39:fd:36:bb:ed:08:0a:66:76:5f:ef:b4:
3e:07:c4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:38 2025 by rpki-client