Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
File: qYW1Uh0gkBiCR48PCUGWLD6clPo.mft (raw, json)
Hash identifier: mdmI1I53ry9/q9MqRiXEIKhgEgo/VSap1blh7HlS68A=
Subject key identifier: 0C:94:2F:77:66:E6:85:C0:50:97:D8:C8:3A:A6:2E:E7:6A:D8:2B:E3
Authority key identifier: A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
Certificate issuer: /CN=a985b5521d20901882478f0f0941962c3e9c94fa
Certificate serial: 019873747013935833CF198A46203A94ECDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
Manifest number: 029D
Signing time: Mon 04 Aug 2025 05:01:07 +0000
Manifest this update: Mon 04 Aug 2025 05:01:07 +0000
Manifest next update: Tue 05 Aug 2025 05:01:07 +0000
Files and hashes: 1: 5AKIjXxvlD1ejPdjcCa3GKRo67k.roa (hash: tQg1Hre7Hi5yVH1kQPOYLNbXNBUZ5paMSfhayTmbmmc=)
2: qYW1Uh0gkBiCR48PCUGWLD6clPo.crl (hash: QlNj1xLxN4cEg02xlqcakpG50oRCvRNDSA7ZoFHuD7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:70:13:93:58:33:cf:19:8a:46:20:3a:94:ec:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a985b5521d20901882478f0f0941962c3e9c94fa
Validity
Not Before: Aug 4 05:01:07 2025 GMT
Not After : Aug 5 05:01:07 2025 GMT
Subject: CN=0c942f7766e685c05097d8c83aa62ee76ad82be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:44:f8:1f:cf:73:e9:06:ad:74:15:41:dd:
9c:09:43:38:47:9d:9a:43:b5:46:90:6a:dc:3f:0d:
0c:93:da:49:c1:30:ec:87:59:0f:1a:4c:c7:81:7f:
d1:c5:77:a5:1d:23:a8:6d:db:c7:d4:bd:49:fe:4a:
67:ff:b5:2a:a5:3d:da:6a:a7:33:3a:c5:c1:1f:4c:
ab:1f:82:a1:36:76:75:06:9c:fe:05:46:30:ca:9c:
3c:f8:94:6f:62:51:de:b3:9d:05:d1:59:f7:45:63:
0e:f3:9e:7a:ff:fe:c1:6c:f6:4a:7d:e7:de:08:b6:
d6:17:94:49:1d:f1:00:3e:05:0f:7d:2d:d2:83:75:
02:d4:ef:a9:ca:9d:4a:9c:db:69:48:89:de:62:87:
dd:66:91:5a:62:fd:f7:cf:e6:53:bf:f4:f9:65:da:
fe:b4:77:8c:84:4d:14:30:6d:b7:8d:8c:ea:39:6e:
21:41:b2:d4:64:13:3f:5c:71:72:16:09:4e:f3:94:
d9:9c:52:20:25:9c:44:3f:50:87:67:f7:35:5a:2d:
4c:08:9c:d3:34:c4:3a:97:b6:75:2c:9e:9b:67:8c:
8a:56:98:d4:ad:25:5b:78:bc:f7:ba:e6:c7:34:10:
a2:1e:d7:a5:47:73:b1:d5:18:fb:b7:6c:91:91:c9:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:2F:77:66:E6:85:C0:50:97:D8:C8:3A:A6:2E:E7:6A:D8:2B:E3
X509v3 Authority Key Identifier:
keyid:A9:85:B5:52:1D:20:90:18:82:47:8F:0F:09:41:96:2C:3E:9C:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYW1Uh0gkBiCR48PCUGWLD6clPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7ffb3e-8a4c-40b7-876e-6003d5aeed1f/1/qYW1Uh0gkBiCR48PCUGWLD6clPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:35:79:64:70:b4:6f:b8:1e:c5:23:4a:28:aa:48:60:2c:36:
72:7a:0b:94:53:1e:75:be:62:bc:af:24:d0:28:80:7b:e0:8d:
c6:df:74:fb:83:15:12:45:3a:57:e5:f3:f2:bc:ff:31:2b:33:
73:bd:f4:e1:28:a0:7e:ba:68:01:d9:e0:42:34:38:da:2b:a6:
e9:0a:6d:28:15:79:07:93:e4:3e:18:8a:c3:dc:98:06:4c:10:
1b:26:f7:d2:3c:03:15:88:7d:1f:e2:85:a4:ce:e9:04:d7:e0:
b3:63:31:c6:44:ee:e2:c9:cb:03:26:25:b0:19:3d:b1:0b:af:
ad:62:3d:3b:f8:be:b2:59:bd:57:1a:30:81:d6:24:42:5f:2b:
3c:95:19:0b:dd:ba:b7:c2:4a:7c:55:59:a8:50:63:b6:4d:6e:
79:dd:09:69:2d:4a:f9:00:ad:81:9c:c7:fb:ce:0e:69:34:14:
1a:f6:46:b5:8c:bb:2c:b0:4b:16:5e:e7:9e:de:50:3a:b0:98:
61:e7:b6:6e:7a:8e:0c:fe:a6:25:a1:c0:f4:fa:e4:61:d3:4d:
b0:b6:dd:44:bd:76:c0:fe:5c:4d:0c:ff:d2:0c:95:fe:99:09:
16:a0:9b:b6:56:b6:63:60:ff:b3:8f:d2:36:1c:2f:e8:02:c9:
d2:fa:07:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:08 2025 by rpki-client