Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: 2ogtYLw/IJgObFWqJq/TufaUa/htxy9mfgMzZyBHDG0=
Subject key identifier: D7:7D:AD:6B:B1:AB:17:B4:8D:44:00:7D:C6:36:9A:70:A8:13:F4:B0
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 01989ECC0ABF382DC8EB0B7B2432BF0C082E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 07DF
Signing time: Tue 12 Aug 2025 15:00:28 +0000
Manifest this update: Tue 12 Aug 2025 15:00:28 +0000
Manifest next update: Wed 13 Aug 2025 15:00:28 +0000
Files and hashes: 1: Ot7K37c41MVu-6Ir2VOkUuixgHw.roa (hash: 7Ylv6CILYrMD9u/uD4SkYHlbdsDQ05xlERBBPqPUVnQ=)
2: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: 9BrpcHm2LtOLnIM2Z5D4m1tFbdw/j5KMN9XnJXroNXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:0a:bf:38:2d:c8:eb:0b:7b:24:32:bf:0c:08:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Aug 12 15:00:28 2025 GMT
Not After : Aug 13 15:00:28 2025 GMT
Subject: CN=d77dad6bb1ab17b48d44007dc6369a70a813f4b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:02:33:e4:c3:19:40:bc:f7:b7:66:b9:8e:c9:
dc:ef:36:84:c4:91:81:d7:5f:80:ad:73:3d:1a:34:
d8:d4:3b:b9:04:25:5c:57:25:e9:51:ee:71:0f:72:
05:d6:41:60:82:3e:ef:7a:97:63:d1:bf:25:23:89:
c0:54:8e:8f:2e:be:d5:c4:77:73:d1:ec:0b:4f:5a:
22:71:1c:d9:09:41:1e:9e:74:24:63:f1:00:fe:3a:
89:9e:d4:55:d4:34:b3:db:08:7e:93:33:2a:1e:17:
1f:44:ab:38:e9:82:ab:a1:59:7a:c7:53:c0:b1:48:
36:e1:6c:c4:ca:ac:96:f0:71:aa:93:64:59:c0:0f:
99:49:fc:4a:52:d6:b0:3b:b1:8d:29:96:25:18:dc:
b3:e9:8e:35:04:b1:3d:e0:63:71:4b:3d:b3:db:49:
cf:f2:54:fe:f2:f7:fa:89:3c:58:5e:fa:dc:7f:f4:
1c:b3:b7:a0:8a:f5:55:13:d6:10:09:21:55:8c:c7:
b9:d5:6a:0c:cb:35:2d:55:7d:a5:e5:8a:e5:32:51:
a1:be:16:60:25:14:2d:ef:3c:dc:d0:f1:e9:6c:e0:
11:27:04:bc:7e:22:d6:d4:24:33:c6:ae:45:66:64:
41:cb:de:fb:8a:f5:65:d3:db:df:5b:a6:f6:d8:d9:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7D:AD:6B:B1:AB:17:B4:8D:44:00:7D:C6:36:9A:70:A8:13:F4:B0
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3a:44:8b:c8:01:50:05:83:47:3a:63:76:f0:a8:57:31:97:
2b:f3:6b:35:4d:7a:45:94:9b:80:d3:cb:06:81:04:42:20:e2:
f9:03:85:bd:8b:dc:a1:26:d8:78:c9:6a:88:f9:4f:6a:f5:cf:
f0:50:59:03:d2:57:34:5c:31:e2:75:9f:7a:d6:46:fb:4c:38:
00:5a:3b:a3:c4:f0:25:b2:b5:7c:33:ca:e2:fd:df:0f:70:7d:
e5:09:fa:4c:00:c8:17:bf:3e:15:26:2d:22:31:4a:84:96:35:
71:de:ca:66:c4:c1:9e:43:b5:3e:a8:2b:d2:83:2b:b4:1c:fc:
35:ff:4c:7e:24:78:9d:b6:62:72:ae:2f:f3:1a:d4:c7:64:34:
97:ad:28:c3:17:e5:96:4e:40:eb:8b:62:de:77:8d:30:de:b3:
45:6a:d1:3c:ef:27:6b:d9:15:ca:f6:c8:e6:b6:00:91:04:94:
eb:00:1b:e1:22:44:89:c4:8d:51:4f:57:b7:33:fe:17:78:47:
f8:2a:b9:90:02:ca:db:90:7a:a3:fa:8d:f8:3a:31:19:81:da:
a3:07:42:4e:3e:2e:25:00:3a:1a:a8:1b:e1:3b:b5:7c:2d:13:
6a:1c:66:94:08:7f:c0:a0:7a:f0:62:7f:c7:60:4d:12:d5:b7:
ae:8b:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:30:31 2025 by rpki-client