Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
File: QY1UtVsZKiSLhHI026US-XYMq_o.mft (raw, json)
Hash identifier: klAjBaC4HB5+AZP1wZvB5RqxP73keJ6em6mXUiuFZdY=
Subject key identifier: 2C:A7:D7:4D:50:EB:C8:5D:4A:D1:AE:23:FD:71:91:2C:34:2E:F4:4B
Authority key identifier: 41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
Certificate issuer: /CN=418d54b55b192a248b847234dba512f9760cabfa
Certificate serial: 0198737483EB931274F061C18BECD4FE8B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
Manifest number: 099B
Signing time: Mon 04 Aug 2025 05:01:12 +0000
Manifest this update: Mon 04 Aug 2025 05:01:12 +0000
Manifest next update: Tue 05 Aug 2025 05:01:12 +0000
Files and hashes: 1: PTvQgS1qnjLwo9s4LdFb_Ohs-14.roa (hash: ISrdGe09G63GrIhvFHUR6KGbQ/gtnJbbuoeTtm56a1E=)
2: QY1UtVsZKiSLhHI026US-XYMq_o.crl (hash: KETTS3XmjqmD5lWmxZZY16BPl48kZQFqKXCeGl0sV0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:83:eb:93:12:74:f0:61:c1:8b:ec:d4:fe:8b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418d54b55b192a248b847234dba512f9760cabfa
Validity
Not Before: Aug 4 05:01:12 2025 GMT
Not After : Aug 5 05:01:12 2025 GMT
Subject: CN=2ca7d74d50ebc85d4ad1ae23fd71912c342ef44b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:32:5e:bf:9b:04:cb:ce:4f:6d:06:5f:ef:
9b:f4:82:89:d2:79:5e:e1:f7:7b:ce:e1:2d:f9:04:
12:43:a7:7d:4d:36:37:30:75:80:71:5a:a2:cf:f1:
b9:9d:eb:51:63:22:52:63:41:6e:7b:84:c6:65:c5:
2f:19:33:a6:89:6f:75:0f:1b:36:50:40:72:77:9b:
75:1c:26:3a:0d:81:37:a2:66:92:4f:37:e9:0e:67:
1d:fa:37:76:35:9b:9b:c7:f4:d0:d5:5e:a0:ad:31:
b0:96:e9:e7:b0:d3:cb:8b:98:8e:32:02:d1:ed:9a:
11:77:d7:36:3c:39:7d:c2:01:e0:89:c4:a3:89:e1:
cd:57:9b:43:a9:15:98:d0:cb:55:0f:22:fa:37:e2:
da:30:2a:7e:91:ea:45:9d:27:e2:bc:d2:98:39:2f:
f2:70:76:76:c3:57:cc:5c:09:59:77:55:4f:d6:5f:
b4:a5:98:de:c8:6b:20:4c:4e:56:ab:cb:37:fe:e5:
21:d5:67:9a:15:6d:b0:32:8f:a4:de:a4:98:bc:58:
a9:1d:0f:fc:88:12:39:3f:08:1d:bc:09:ac:a2:9e:
a0:46:62:9f:7f:88:b9:8d:b1:37:fa:08:a4:04:86:
f4:9b:2e:2c:b5:03:f5:fb:61:9e:e5:2b:10:f5:59:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:D7:4D:50:EB:C8:5D:4A:D1:AE:23:FD:71:91:2C:34:2E:F4:4B
X509v3 Authority Key Identifier:
keyid:41:8D:54:B5:5B:19:2A:24:8B:84:72:34:DB:A5:12:F9:76:0C:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY1UtVsZKiSLhHI026US-XYMq_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b43857-021c-4262-b183-1d77cf2a7100/1/QY1UtVsZKiSLhHI026US-XYMq_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:68:e7:e5:78:ca:78:dc:3a:ea:0f:f4:25:48:0d:d4:b8:c6:
18:8f:47:13:aa:52:76:30:2a:ce:84:49:85:99:86:98:8c:0c:
63:78:c1:1a:5f:a6:26:0c:01:7f:59:bc:e3:a6:85:69:da:77:
d3:fb:23:f8:64:6c:4f:1e:ec:03:38:82:c8:98:63:a1:39:3a:
4e:3b:32:bb:a9:d7:8f:ab:7c:c4:c5:47:41:d5:58:12:5d:0e:
d9:b7:49:f0:b2:8d:e6:bb:0b:9f:09:9e:21:e4:5d:5f:e9:70:
4e:33:48:7c:cc:b5:78:ba:ba:5a:77:6c:48:a2:86:20:c3:27:
34:3b:af:84:60:8a:e4:ae:0d:46:51:93:d3:db:d8:92:7a:dc:
dc:bb:a7:df:8d:2a:2d:4c:31:d1:5e:01:37:42:34:dc:4e:36:
7d:dd:f2:e7:d8:a3:95:13:e4:17:0e:00:c8:9a:5a:6d:ce:10:
2f:fa:9c:eb:e4:fa:06:e4:96:f4:f4:71:07:14:56:71:08:91:
db:a6:79:85:54:1c:7c:f0:d1:bd:7d:48:13:c2:46:ed:68:df:
e2:a0:f2:77:28:55:c4:a6:a2:20:0f:66:ff:ea:fc:13:1e:1f:
e8:f8:23:79:5b:2d:7d:c7:f9:09:54:cc:cd:b9:bc:0f:c9:31:
4e:3c:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:01 2025 by rpki-client