Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
File: Q8d7RzY2gTePrORmFB1UzIg5nPU.mft (raw, json)
Hash identifier: yoHAmJt97KQzejyluonEHjo8lUS/qhHjuSiXirQM5Hc=
Subject key identifier: 99:E8:1B:BD:46:C4:54:87:C5:06:9A:6D:01:E9:A4:B4:45:25:D0:F8
Authority key identifier: 43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
Certificate issuer: /CN=43c77b47363681378face466141d54cc88399cf5
Certificate serial: 0198D473073BE4B2A09EB21996BC0FBF258B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 01:02:44 +0000
Manifest this update: Sat 23 Aug 2025 01:02:44 +0000
Manifest next update: Sun 24 Aug 2025 01:02:44 +0000
Files and hashes: 1: LhVPheiP2Wbqe7xFjCy9IQ_CSc0.roa (hash: Jd5k/N8+tstl7PIZFFMbIYM8R6nDjGK5pnVrR8G85AA=)
2: Q8d7RzY2gTePrORmFB1UzIg5nPU.crl (hash: JDyVN8XIROh111Al6ODuG8PiWJPdMpqweB6/PH5ElUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:07:3b:e4:b2:a0:9e:b2:19:96:bc:0f:bf:25:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c77b47363681378face466141d54cc88399cf5
Validity
Not Before: Aug 23 01:02:44 2025 GMT
Not After : Aug 24 01:02:44 2025 GMT
Subject: CN=99e81bbd46c45487c5069a6d01e9a4b44525d0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:9a:f4:73:53:10:74:2f:89:f9:2e:a3:6b:
31:ca:f6:71:43:a8:6a:2b:2a:cd:f5:1d:0f:d6:79:
b0:c1:87:a9:31:5a:fe:fe:61:f4:d4:5c:14:8d:7b:
fb:f8:85:d0:e4:79:db:86:51:88:93:b1:44:63:8c:
ac:d3:41:0e:a3:1d:04:52:b7:d4:fc:69:c9:5b:99:
7b:32:a4:d6:6c:f9:b3:4d:f8:9a:cd:17:92:eb:38:
a0:58:d2:ee:40:ea:8e:a9:38:2d:f7:9c:8e:13:24:
91:de:43:a0:e0:74:0d:72:44:18:33:62:2f:9b:ee:
ee:f9:cc:0e:47:8c:03:9c:1b:cc:a4:f8:05:dd:a2:
91:83:49:1f:f3:9d:c9:be:eb:79:d2:a2:4f:71:24:
d9:2c:7f:22:da:50:72:03:24:46:4f:ef:d4:69:d1:
c1:7c:30:1f:68:fa:30:42:39:87:0c:38:a4:17:76:
c7:7a:50:5f:72:42:50:f6:14:58:19:1a:1a:ad:4b:
e2:71:da:24:df:51:0b:10:97:50:a7:25:e0:ae:df:
14:d2:45:20:8a:43:cc:e8:98:cc:e5:57:e5:8f:f7:
4c:dd:b2:21:8b:0f:ea:0f:e0:88:63:79:2d:2d:70:
2a:6e:f8:8a:81:6d:d9:88:7b:2c:1a:1a:8c:38:6a:
a5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:1B:BD:46:C4:54:87:C5:06:9A:6D:01:E9:A4:B4:45:25:D0:F8
X509v3 Authority Key Identifier:
keyid:43:C7:7B:47:36:36:81:37:8F:AC:E4:66:14:1D:54:CC:88:39:9C:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8d7RzY2gTePrORmFB1UzIg5nPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/01809b-42dd-4136-96b1-1fd10d8e075f/1/Q8d7RzY2gTePrORmFB1UzIg5nPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5d:5c:2b:36:00:36:f0:44:22:03:ea:24:1b:53:ad:d8:aa:
8d:90:b6:17:ec:a7:8f:f9:59:40:99:c4:d6:11:31:cc:d9:ea:
e6:aa:54:0a:1f:c6:c8:2a:12:7e:8a:fb:19:0c:8f:4c:5c:aa:
91:38:9c:e1:9f:a7:2f:1f:2c:c5:53:ea:13:c2:ff:1e:12:cf:
94:ca:ea:a9:0d:7c:55:bb:1a:47:f3:db:17:d4:75:82:d2:ba:
7f:fa:7c:37:58:31:a2:39:c6:48:3a:43:fc:b6:50:f1:8b:41:
d6:83:d2:d8:7c:a3:58:10:43:f9:bc:7f:65:3a:c9:3b:34:ac:
bb:d8:d4:78:51:84:45:68:4b:df:51:67:65:99:57:c5:26:58:
cb:29:db:87:f6:c2:09:57:fb:b9:ce:0d:48:26:34:ef:03:35:
22:e0:92:9e:cc:87:37:95:49:55:49:2a:47:71:95:be:5b:bc:
88:a6:5e:c4:e2:d1:1b:3d:46:36:cf:0e:8f:cd:4f:0c:2f:7f:
e0:e5:d1:55:8b:4c:7d:ce:d5:4b:48:16:3f:1f:93:94:c8:f9:
ce:3e:6f:51:27:c9:a8:70:d4:bf:cc:cb:23:58:cb:22:32:23:
f2:c1:d3:be:b4:73:49:ef:4c:04:2e:37:a7:4c:39:4f:fe:ee:
a2:5e:9c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:38 2025 by rpki-client