Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: N4eKp0NfJKkY/2on8HbygddjVP2t39D3em+dCkO2mqM=
Subject key identifier: 8E:5F:63:31:D3:14:50:82:C3:FE:00:DA:73:72:A8:81:9B:4E:E9:01
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 01987373F0EC65E3CB8EC7F03CEC592DA06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 11AF
Signing time: Mon 04 Aug 2025 05:00:34 +0000
Manifest this update: Mon 04 Aug 2025 05:00:34 +0000
Manifest next update: Tue 05 Aug 2025 05:00:34 +0000
Files and hashes: 1: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=)
2: d03ojnbuBeIJ-lnd7OihnLWEVxw.roa (hash: XlMC0ZRLbmiqoXJQRP7mRdNP4FsXpGfEzY9nYp5h2sg=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: 3Wcqd1JqSo9pDJW4ErnyKE3ANViTwM9fDZufOTskCbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:f0:ec:65:e3:cb:8e:c7:f0:3c:ec:59:2d:a0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Aug 4 05:00:34 2025 GMT
Not After : Aug 5 05:00:34 2025 GMT
Subject: CN=8e5f6331d3145082c3fe00da7372a8819b4ee901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:5a:c8:07:ec:41:b9:29:f8:76:92:e0:4b:
e3:71:e5:6f:b9:6c:96:bf:e7:27:c0:2b:9d:64:33:
26:21:95:25:1f:63:a1:a7:b4:50:cd:8e:28:74:41:
0b:29:14:a1:bc:6a:c9:79:d5:40:89:4c:53:73:07:
eb:e4:bc:b8:5b:9a:6b:bb:63:e2:66:c8:22:eb:b8:
46:f5:69:ca:0f:91:91:93:d5:08:08:9a:c6:25:e3:
11:54:a1:2f:5b:33:16:f1:e8:fb:ea:b4:6b:67:37:
cf:2b:48:fc:8a:ef:40:e0:47:22:30:6d:c2:ae:06:
d8:47:4e:c0:ce:02:49:b5:38:c7:98:e8:d7:bb:30:
21:d4:79:e0:52:77:13:aa:e3:3d:92:62:d6:0c:65:
d1:7e:4c:a4:0f:93:72:41:ca:a3:0d:1e:4a:08:db:
b6:05:cc:47:61:69:51:eb:9b:98:39:84:e8:17:ad:
14:b7:c6:ea:93:09:a9:67:94:c9:43:a3:d5:ea:21:
14:fc:d5:30:5e:4f:a2:16:98:4f:4f:16:5e:90:ee:
64:c2:4d:1a:a6:73:ca:b5:1f:62:b9:46:e5:b6:1b:
d4:1d:f2:0a:45:3d:b2:e8:43:ce:23:dc:0a:89:bb:
1a:8c:85:3b:64:e9:b0:13:d8:29:36:91:c3:e0:33:
f9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5F:63:31:D3:14:50:82:C3:FE:00:DA:73:72:A8:81:9B:4E:E9:01
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:18:a2:c2:0f:b9:b7:50:59:24:5b:03:3f:c5:c3:d2:b2:b3:
3c:33:a9:ad:45:90:2c:0a:b6:4c:51:86:ec:72:1c:79:ca:ef:
0c:8f:4b:dc:87:b7:01:d0:d7:82:f5:b6:a4:d2:71:ea:73:b3:
c7:f5:90:79:40:00:e7:6d:e0:b6:b5:d0:b6:85:0a:58:c9:56:
5b:d3:ea:d2:6d:d0:8e:fc:04:18:86:31:06:6b:d8:91:f3:91:
15:d3:86:03:85:fc:00:18:6d:a6:a4:20:26:6e:46:6d:ca:07:
8e:cd:fd:10:25:d5:89:a0:26:84:52:e6:3f:0b:e2:42:f1:72:
9c:3e:b6:01:c6:c0:73:46:64:72:a1:f9:1e:d9:1c:6e:6a:76:
a2:b9:4c:ba:ea:cb:1b:9a:0a:57:c1:ad:1b:1b:e4:3c:4f:47:
9b:ac:aa:b6:c9:7a:22:8e:4c:0d:20:74:23:36:08:3d:a5:44:
6a:b1:24:cb:a3:ba:94:61:ff:63:5c:c1:5b:ac:4f:b5:61:18:
a6:cc:d0:24:44:af:5c:ab:1e:2c:75:37:b6:83:c6:4b:f3:e0:
fb:fd:62:5d:c8:dd:47:5b:2e:62:97:cf:28:f4:5a:87:ba:d3:
bf:47:9b:7c:7a:42:86:e6:07:ad:95:c7:89:95:cb:6a:fc:b6:
7f:8a:59:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:38:43 2025 by rpki-client