Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
File: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft (raw, json)
Hash identifier: JBFNncXC5//2heUqtsIKmSc74GT1wDMcDWpPct5aLKs=
Subject key identifier: 7B:25:A9:C0:30:97:05:76:49:57:26:8B:C5:24:97:05:1E:FA:0C:C0
Authority key identifier: 43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
Certificate issuer: /CN=43d518d7307788fca3891878490e4f32d9aaf6af
Certificate serial: 01988F2286D6A4EA751807F943FA6B7BC369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
Manifest number: 106F
Signing time: Sat 09 Aug 2025 14:01:01 +0000
Manifest this update: Sat 09 Aug 2025 14:01:01 +0000
Manifest next update: Sun 10 Aug 2025 14:01:01 +0000
Files and hashes: 1: Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl (hash: BucSxZSYSdG1B2DN+1ZzXdH33jYXr1Z74q/vJBHbdA4=)
2: hOsUXVARCl8NqYdv3cI6OIcfqwU.roa (hash: w1gjvrKQRUt3hmiD9OYkOr05DsegCS6tRj5zStTTlPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:22:86:d6:a4:ea:75:18:07:f9:43:fa:6b:7b:c3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d518d7307788fca3891878490e4f32d9aaf6af
Validity
Not Before: Aug 9 14:01:01 2025 GMT
Not After : Aug 10 14:01:01 2025 GMT
Subject: CN=7b25a9c0309705764957268bc52497051efa0cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fa:85:63:db:e4:ee:06:82:58:37:17:7b:48:
6b:68:8f:cc:f1:4b:4b:00:69:85:ce:e0:06:87:fd:
09:d4:83:f9:0a:57:87:e1:4c:b6:91:cb:63:a5:11:
6b:59:ff:68:8b:ba:3c:4a:d0:d8:5e:c8:0e:e7:7c:
35:2b:2e:d3:47:be:9e:75:12:d2:4f:7f:95:ae:94:
4a:29:4e:b1:62:18:02:28:ce:5a:fe:7b:97:58:da:
91:c4:de:57:b1:91:9d:4e:57:97:fa:8c:62:65:1f:
76:78:76:ca:9b:bd:7d:81:67:62:fe:b9:8c:58:ca:
b3:73:7b:36:e1:8e:f7:65:df:2d:db:a8:72:5f:f3:
11:cc:c1:ba:9e:dc:20:3e:00:d0:1e:6c:8d:50:19:
fc:46:fd:f8:45:c0:7b:d8:af:60:7a:0c:20:ae:fd:
1a:22:76:a9:48:24:82:8d:95:44:ed:9c:46:a5:8a:
94:d5:d2:58:ea:16:53:98:83:93:8d:a6:48:83:82:
68:90:ef:23:5b:06:80:d3:a8:55:94:bf:0e:c7:d2:
dc:68:02:cd:4d:f8:28:1d:10:95:20:d9:58:dc:c8:
fe:35:40:6c:86:9a:58:d5:c3:c0:c3:4c:7e:e3:30:
84:ac:e5:b1:9d:27:33:5e:66:c6:03:d6:4a:f0:9b:
3f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:25:A9:C0:30:97:05:76:49:57:26:8B:C5:24:97:05:1E:FA:0C:C0
X509v3 Authority Key Identifier:
keyid:43:D5:18:D7:30:77:88:FC:A3:89:18:78:49:0E:4F:32:D9:AA:F6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ab7caa-8bc5-4bce-a130-eddf320d50e2/1/Q9UY1zB3iPyjiRh4SQ5PMtmq9q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:43:75:e4:bc:3f:d2:e6:93:e3:0b:82:af:0d:2d:4f:b5:ef:
f4:fc:30:f5:de:42:8e:d1:7c:15:5a:97:d5:3b:8d:8e:96:1b:
0f:eb:4a:12:de:48:d8:02:ce:0a:e0:3a:69:3c:e2:d2:f9:d8:
77:ba:73:f3:d1:2b:c4:1d:97:b1:3b:d9:24:aa:63:d6:dc:a4:
93:24:00:4d:84:2f:c0:35:03:3a:58:6a:4a:65:50:32:c4:ba:
b3:de:f2:af:2b:26:a4:89:7a:76:6a:a6:4c:4d:76:46:f2:8c:
2e:79:1d:cc:8c:42:7f:39:eb:f2:29:06:e2:d7:38:81:7d:a8:
4e:96:56:b2:99:0f:18:7b:73:29:02:a3:63:4e:e5:c4:d9:1d:
9d:db:08:f2:b7:7c:38:35:ad:6f:cb:7f:15:af:cc:96:8e:90:
99:40:2d:c5:4b:be:4c:0e:c2:d2:e2:33:ec:27:95:fc:22:a5:
0f:1c:c5:5c:be:2f:b5:df:dd:4e:52:4a:34:a5:3f:46:43:07:
82:9b:63:23:9c:28:84:7f:7b:6d:fb:58:36:3b:af:d9:74:42:
fa:e5:f4:62:36:90:d8:fe:6c:66:1b:25:2b:63:0c:98:78:0a:
5a:79:fd:80:03:fd:b4:82:ea:df:af:92:c3:83:ad:35:8a:8e:
0e:fb:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:43:00 2025 by rpki-client