Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: u0+izgopsjQ5iXl8sGcwV9QrZQQDEkhhzE5QttRnl7g=
Subject key identifier: 73:EE:36:FC:22:E6:4F:2F:41:20:19:B0:F6:72:C3:0E:C6:BA:D5:57
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019893DB14C7904489824A10704AE92ED151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1476
Signing time: Sun 10 Aug 2025 12:01:05 +0000
Manifest this update: Sun 10 Aug 2025 12:01:05 +0000
Manifest next update: Mon 11 Aug 2025 12:01:05 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: 9Y4CEzq/BbCRbcgxSuXjiMURsZLBZxPBOBfjs3aehjY=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:14:c7:90:44:89:82:4a:10:70:4a:e9:2e:d1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Aug 10 12:01:05 2025 GMT
Not After : Aug 11 12:01:05 2025 GMT
Subject: CN=73ee36fc22e64f2f412019b0f672c30ec6bad557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:91:b4:7a:48:71:fc:12:ad:6a:7b:eb:09:14:
c0:48:5a:96:a7:22:0e:0e:72:8b:88:e4:b3:43:e6:
00:e2:4b:3c:83:cd:bf:8a:5b:53:36:b5:79:26:71:
2f:1a:6c:00:86:9a:e2:28:4c:ef:2e:d5:de:66:88:
44:56:b2:7a:19:f1:41:9c:9c:ac:53:18:f0:9f:a7:
2f:89:f7:9f:43:d6:f6:d5:1b:e1:1a:0d:99:8a:49:
19:2e:d5:10:c2:d0:05:9f:6b:4f:53:27:43:f1:4a:
6b:d9:6a:3f:03:bb:de:dd:62:4d:fb:0a:3f:95:ca:
61:d0:b1:46:d4:ae:f2:12:ff:91:d8:5d:e7:7d:81:
ee:65:6c:9d:36:9a:58:09:c1:ac:e7:68:bc:b7:65:
4e:ec:a7:ed:30:f4:10:97:b1:0c:69:2b:68:d8:6e:
ae:5f:78:8f:e3:92:78:44:c2:fa:fe:bd:7f:25:5f:
23:1a:44:44:a4:89:9b:d7:11:6e:aa:c8:73:05:2c:
f7:85:35:fd:e2:3b:e7:3d:ec:82:c8:02:de:c9:7c:
3c:b0:c7:2e:ee:51:dd:9d:4a:8c:ad:0c:d9:1b:46:
0d:cd:8b:2c:e8:36:8c:04:a9:c7:1d:cc:68:dc:47:
b0:60:37:b5:0f:4c:10:d0:8a:df:ea:c2:9c:43:28:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EE:36:FC:22:E6:4F:2F:41:20:19:B0:F6:72:C3:0E:C6:BA:D5:57
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:aa:bb:65:4a:b1:cb:d7:cb:dd:7d:0c:2d:db:5e:0d:bf:fe:
c5:54:a3:e0:f0:bb:4e:36:5a:2a:63:16:69:60:4c:91:63:5b:
b2:a7:86:36:86:d2:65:82:16:3c:09:d5:af:92:be:c0:fe:67:
e7:d4:03:6b:dc:ec:b1:eb:42:14:b4:c1:d8:dc:6b:c9:92:8a:
dc:5e:06:30:f5:c4:5a:7d:48:31:35:68:74:a8:69:41:ed:1d:
29:0b:c5:5a:72:63:20:4e:90:df:ef:51:88:19:40:98:70:a8:
6e:0e:ed:97:a2:f9:0f:ba:e0:05:1b:b6:a8:3a:91:a3:fa:f2:
74:56:87:cf:03:59:92:73:68:ec:bc:2d:71:3d:cb:76:0f:de:
1d:40:aa:cf:0c:90:28:a9:59:58:38:7e:b1:b8:95:e1:61:77:
e9:85:eb:74:a5:3e:df:6d:6f:e2:08:a7:24:d5:9f:2b:ff:1a:
d1:50:82:7d:ac:0e:dd:c1:38:23:76:57:b2:32:ef:5c:0c:aa:
58:f6:46:24:fc:63:e9:c2:ad:f2:d5:a9:4a:45:c8:34:7c:64:
8b:fd:89:64:11:d6:27:2d:2b:d1:b9:5a:80:2c:db:10:34:d1:
28:9b:17:e2:6d:3d:c8:da:33:65:4f:6c:f2:17:46:49:1c:64:
dc:f9:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:18:07 2025 by rpki-client