Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
File: 1QylITQTxwqeg7R6gqfEV53UwZY.mft (raw, json)
Hash identifier: 2HIafCHubCnT1H4gztNVNAiLOUcQCRYVINL9Ib+Eszs=
Subject key identifier: D2:0E:69:BF:4C:18:B1:62:39:B2:08:67:AC:A5:8C:85:61:55:DA:5E
Authority key identifier: D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
Certificate issuer: /CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Certificate serial: 019895C8F8B009CFF9053D55F1C305BD6FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
Manifest number: 0875
Signing time: Sun 10 Aug 2025 21:00:32 +0000
Manifest this update: Sun 10 Aug 2025 21:00:32 +0000
Manifest next update: Mon 11 Aug 2025 21:00:32 +0000
Files and hashes: 1: 1QylITQTxwqeg7R6gqfEV53UwZY.crl (hash: uexBIQLdaImukSaYyoXs6aiKreey+Eh4nAYckPFb7HU=)
2: _qLxIOi7VmVEBLaS1YixdxXiwBA.roa (hash: 0p2ssxxIHIoQau1gQDFigWlgz8Te2D1iMIcwAH/P3eQ=)
3: xxT8grXnmq40HsKuG1Zwf8qr5yM.roa (hash: Q9jgD1xIS5+5fspqYSArTtS7aFho5oJiLf020/LBelY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c8:f8:b0:09:cf:f9:05:3d:55:f1:c3:05:bd:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50ca5213413c70a9e83b47a82a7c4579dd4c196
Validity
Not Before: Aug 10 21:00:32 2025 GMT
Not After : Aug 11 21:00:32 2025 GMT
Subject: CN=d20e69bf4c18b16239b20867aca58c856155da5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:e0:01:9d:cd:91:65:04:41:98:e0:89:a3:
6c:e0:55:26:87:15:b4:e9:55:dd:c1:3a:19:18:b3:
ca:0e:1b:4f:07:ae:56:f2:05:81:b6:e8:3a:db:59:
ff:0b:4b:5f:13:b7:e5:60:cb:ce:b1:0f:90:bd:b5:
fd:70:2c:2e:4f:3c:03:b0:4e:3a:8d:b3:63:a2:73:
f4:6e:59:d6:27:c8:ff:18:8c:56:f5:c8:e1:21:80:
11:5d:2c:20:6d:89:d1:1a:cc:95:19:5a:14:77:6e:
75:fa:de:ae:2b:1d:8f:2b:cc:d5:22:92:a4:d4:20:
b8:72:de:40:c8:6c:4c:c8:fe:3c:c9:b9:ee:1e:4e:
b3:34:89:f3:0c:01:e7:31:9b:84:95:06:46:b9:46:
f5:10:19:86:5a:b4:26:c0:94:c7:da:9f:1f:05:2e:
a5:d0:73:d8:60:68:2a:eb:d4:85:5a:61:71:b9:c1:
2b:48:79:60:79:7e:01:5b:0a:35:07:6a:45:8e:08:
95:9a:37:0d:0e:0a:e6:a9:82:20:4c:1b:e0:87:e9:
b6:6e:c9:18:fb:51:fe:1c:51:d3:84:4a:68:da:a0:
f0:cd:cd:ae:35:99:21:e6:41:08:03:4b:f9:b0:b3:
04:e5:56:78:52:0f:f9:9f:4d:6f:b4:a5:2c:02:fe:
e4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0E:69:BF:4C:18:B1:62:39:B2:08:67:AC:A5:8C:85:61:55:DA:5E
X509v3 Authority Key Identifier:
keyid:D5:0C:A5:21:34:13:C7:0A:9E:83:B4:7A:82:A7:C4:57:9D:D4:C1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QylITQTxwqeg7R6gqfEV53UwZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/22f80f-3a08-49c6-b405-354b11af233e/1/1QylITQTxwqeg7R6gqfEV53UwZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:69:03:bb:ab:7b:f9:02:c3:b3:cc:a8:ef:80:bc:ac:a5:91:
17:a2:a4:e7:c2:13:96:a5:a1:a6:40:3e:61:b5:f7:36:83:73:
3d:ca:db:48:2e:38:0d:e2:6f:a0:50:c9:09:8b:d9:9d:c7:95:
f2:61:66:75:d5:23:4e:68:54:38:2e:a4:9f:e3:45:d0:fe:5b:
0c:0c:e7:f6:e4:d0:ee:99:6c:01:66:a0:f8:93:75:6c:9a:4a:
38:b3:a1:68:a8:ea:49:e5:84:9b:40:14:17:85:23:f1:55:7f:
41:bf:5d:c2:bd:bf:b2:cc:84:ae:64:ec:73:67:62:73:2a:6f:
03:ef:b3:da:28:15:bd:61:2a:7e:12:f0:6b:87:75:e5:ea:b7:
68:cf:68:9d:d8:b4:73:1b:00:bf:07:c7:fb:3e:30:08:7b:f3:
85:09:5f:72:92:53:d7:dd:02:f1:5c:ab:b5:27:3c:8c:15:dd:
45:b7:53:62:f4:60:80:f5:f9:d5:ef:ec:4b:18:66:53:ec:3d:
fd:1a:4c:86:4f:b9:41:14:3d:84:01:cb:5c:b0:40:8a:54:6d:
be:88:89:f2:08:aa:67:28:45:07:9b:fd:4a:c8:92:1e:49:8a:
c0:57:ec:8e:b5:a6:97:69:54:41:17:36:99:78:e3:d2:87:02:
25:ba:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:22 2025 by rpki-client