Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
File: qYz7m19EX9L2zPoXnDfFNEmyrwY.mft (raw, json)
Hash identifier: 8PVG5qGsbD5njR5oQ2XpoIJ131PPsfwqXfEvHfoJDaQ=
Subject key identifier: D6:1F:B3:81:E2:58:9F:88:D2:74:28:83:8E:12:DB:DE:C7:BD:BC:88
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 019896A4E9D1F9E30C40B655B28E338AD244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
Manifest number: 162B
Signing time: Mon 11 Aug 2025 01:00:46 +0000
Manifest this update: Mon 11 Aug 2025 01:00:46 +0000
Manifest next update: Tue 12 Aug 2025 01:00:46 +0000
Files and hashes: 1: 8TiiymF_qXe5_0OSXGhXtrvPRF8.roa (hash: GluSxaIDrro0bR3RvWbGWujqLOuubQy6kwNOc8o6hgc=)
2: qYz7m19EX9L2zPoXnDfFNEmyrwY.crl (hash: 17ntO391VUy8las0mJzIZaJlbyPJhHusGCZBXnsVpQE=)
3: wqgIahTiUfpB5-vEurFskts5IVA.roa (hash: XTqqN0VPVFji7V2+PpE1m4lwBVLsT9DZSImWN2tqtPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:e9:d1:f9:e3:0c:40:b6:55:b2:8e:33:8a:d2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Aug 11 01:00:46 2025 GMT
Not After : Aug 12 01:00:46 2025 GMT
Subject: CN=d61fb381e2589f88d27428838e12dbdec7bdbc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:5c:04:dd:a4:64:18:d6:70:5f:ec:59:21:
8e:11:67:92:00:d4:49:84:1e:8a:b3:d1:d8:86:05:
e4:b7:47:c5:28:d8:7b:1b:20:7a:ff:0f:94:84:c8:
5c:2a:ac:82:86:51:41:79:52:da:f0:7e:b1:16:76:
52:81:9c:c8:61:d1:e7:db:04:5e:f6:cb:22:83:7e:
ea:86:d0:72:8b:80:60:4b:d4:24:16:36:dd:b0:c4:
07:52:20:f9:5f:8b:0b:9b:e4:84:0f:bc:6a:e6:64:
fe:6c:79:e5:f7:cb:70:d7:4e:48:8d:30:e7:4f:17:
f2:9b:3b:66:c0:d1:54:2e:54:4c:ef:da:cf:32:a0:
ad:27:7a:99:df:1c:a2:2a:c6:65:6d:4f:a7:77:97:
e5:00:8b:38:fa:da:af:3d:07:4c:fc:80:2b:01:17:
bf:5a:3a:c2:51:ee:4c:fb:10:54:0d:3a:d9:79:77:
36:0c:f7:04:39:9d:ca:01:24:ab:0d:69:05:63:86:
73:dc:08:19:8b:29:08:32:74:f3:19:d5:e7:01:98:
3c:cd:6d:78:73:2b:e4:09:9b:c9:27:79:5f:8c:53:
ce:9b:60:f7:d7:9a:b6:81:8b:e0:6e:15:19:0c:b2:
de:d9:ca:fb:a9:8c:88:03:fa:71:ae:4f:f4:f7:7d:
43:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1F:B3:81:E2:58:9F:88:D2:74:28:83:8E:12:DB:DE:C7:BD:BC:88
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:96:f2:75:83:ee:3a:93:33:53:c0:a0:41:2f:dd:22:bc:3a:
b2:d9:4b:21:a8:29:f1:e6:cc:64:db:ef:e8:82:00:3b:32:aa:
69:20:64:b6:98:00:3f:d3:88:dc:1a:85:33:ce:8f:83:d1:0f:
ca:2f:f5:2d:d4:ff:5d:0d:fd:b9:1a:a5:f7:ed:27:bf:5f:21:
78:63:0b:f4:b9:3c:91:c9:bd:71:a8:19:c9:b8:3c:28:46:5b:
68:86:0f:f3:e6:d5:a3:c3:f0:60:36:9f:49:ea:ef:50:43:5d:
3d:5e:16:c7:12:9d:61:85:10:8a:9a:66:6e:53:1b:6c:8a:1b:
8c:c1:da:91:a0:d5:fb:23:78:52:9c:a3:c8:18:14:53:da:53:
eb:41:ce:2b:ee:de:19:31:eb:62:d0:c9:48:d1:1f:4d:43:9b:
3b:3e:b6:ce:a9:02:f9:89:9b:22:c8:a2:93:61:93:8d:fc:eb:
52:29:fd:0c:75:25:23:ce:53:46:44:69:e7:8e:1c:ad:3b:8f:
11:b1:3c:0b:d6:6a:a4:2f:50:70:c2:1d:98:43:8f:ce:45:52:
7c:b4:bc:41:a3:c1:25:ff:1c:27:48:45:0d:d8:16:1e:9d:31:
68:24:42:86:7e:7d:ff:ff:da:09:8a:ad:37:10:53:bf:a1:55:
62:71:cd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:34 2025 by rpki-client