Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: nTU3VlRrFTwVcRtTAhimB39NZB5L57lhJZQuQeOJV+w=
Subject key identifier: D6:6D:D0:DB:6B:99:7E:5B:6C:FE:1C:4D:42:EF:4E:4C:71:BE:84:4A
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 01988EEC638D188A9927446BC3FD13B57255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 142F
Signing time: Sat 09 Aug 2025 13:01:53 +0000
Manifest this update: Sat 09 Aug 2025 13:01:53 +0000
Manifest next update: Sun 10 Aug 2025 13:01:53 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: bLV3Ns5rkHZpNKVtD/QR/ci0haJFAkUCgZZLiEVeU3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:63:8d:18:8a:99:27:44:6b:c3:fd:13:b5:72:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Aug 9 13:01:53 2025 GMT
Not After : Aug 10 13:01:53 2025 GMT
Subject: CN=d66dd0db6b997e5b6cfe1c4d42ef4e4c71be844a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:1a:1c:12:51:0a:c3:86:cd:f2:24:28:27:
fc:0c:cb:0b:99:c4:bb:0b:01:8f:ab:b3:db:68:b3:
cd:49:7b:5a:65:9b:bf:b3:e7:9b:21:16:df:eb:2c:
c9:c6:55:f2:1f:08:cf:76:7b:f7:e5:02:8f:f6:66:
4e:fd:d0:80:3c:86:c7:71:74:d2:b5:b8:3d:7d:b4:
80:d7:fb:a1:1e:56:7e:55:1e:3e:5d:79:31:82:c6:
2c:33:52:68:c5:19:7e:27:52:b5:9f:48:50:e4:d7:
aa:8e:26:09:96:d9:9f:fb:81:04:71:86:70:eb:4e:
7f:d6:29:90:cc:d4:0b:5e:dd:a9:d5:72:10:d8:22:
66:99:91:08:62:5e:19:8f:b8:9a:ab:5e:2a:8e:9a:
ba:9e:6d:e6:8e:b4:cf:82:c1:c5:4d:f6:e4:29:a8:
3a:ce:51:fc:3f:3d:7b:2a:d0:f2:93:19:7c:b3:c7:
fb:5c:18:e0:16:a3:1d:bf:6c:1a:12:9f:3d:8c:87:
45:47:e6:ee:b3:7d:be:ae:e9:e7:b8:6c:e6:79:da:
95:dc:18:18:42:0d:8a:5d:2d:f6:d5:46:83:d6:d0:
3a:f0:f9:4b:e7:b0:1b:1d:18:f2:61:48:c4:3f:9a:
00:90:bd:2c:ad:7c:34:8a:70:4f:de:a4:b3:15:19:
4c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6D:D0:DB:6B:99:7E:5B:6C:FE:1C:4D:42:EF:4E:4C:71:BE:84:4A
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:02:37:bf:5a:5b:97:77:27:17:43:9f:03:74:e0:8c:61:0e:
fe:3a:90:ce:8f:df:3a:a2:a0:79:67:04:da:2f:6d:7a:18:49:
a6:ba:18:44:45:7c:5d:c8:89:11:ad:89:e4:5b:48:bc:39:46:
fa:9c:66:66:5e:c7:ef:d0:24:93:e0:fe:74:f5:d7:ae:6a:d4:
cb:15:44:2e:bc:55:d8:a7:a3:e9:4f:43:8b:a4:20:5c:19:a2:
32:3b:03:94:5a:03:dd:53:40:f5:1e:28:b5:c8:e7:76:af:5f:
9d:5b:f5:b1:1a:60:e6:1f:f5:22:c1:e7:c5:73:a8:7a:e2:83:
6c:e1:1b:76:f2:8b:17:09:46:3c:f4:33:44:87:d1:0f:30:88:
05:98:17:37:4d:ec:2d:40:ec:79:53:67:b8:0f:70:e0:11:96:
e4:ee:87:35:35:55:31:7b:17:51:03:23:2b:f7:5a:3e:3b:0e:
df:2e:09:fd:38:86:b3:45:0c:c1:5c:6f:14:b7:67:60:13:72:
da:cb:82:a1:7d:d9:da:33:ca:e0:a2:13:64:46:54:cb:5f:d6:
c1:a4:ae:48:b9:ab:c9:7b:99:2a:7f:33:42:aa:a7:8a:3c:8a:
fd:cd:fb:cf:d8:7c:d4:0f:04:6e:09:cf:f5:7e:77:c5:fb:74:
33:c1:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:15:00 2025 by rpki-client