
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.mft
File: Q2TnsO7yBINcffKon2DAK-HYmt0.mft (raw, json)
Hash identifier: jKWbOLnN/4+WmcKRpRItbFfMwoh+nDhE1YgQsbh4PDI=
Subject key identifier: CB:B0:AF:41:D1:C3:B3:39:83:1C:8F:52:8B:BF:DE:96:EB:6F:B7:61
Authority key identifier: 43:64:E7:B0:EE:F2:04:83:5C:7D:F2:A8:9F:60:C0:2B:E1:D8:9A:DD
Certificate issuer: /CN=4364e7b0eef204835c7df2a89f60c02be1d89add
Certificate serial: 019873066B1E73537A7FB6E1831297863B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2TnsO7yBINcffKon2DAK-HYmt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.mft
Manifest number: 55
Signing time: Mon 04 Aug 2025 03:00:57 +0000
Manifest this update: Mon 04 Aug 2025 03:00:57 +0000
Manifest next update: Tue 05 Aug 2025 03:00:57 +0000
Files and hashes: 1: 4Lqe88CYtrJZ1_QwsLbbBZVtRAc.roa (hash: 4DmhBXf2oC0XIM1RLi3zAk7AYqn+M5oHIj926WSgGgs=)
2: Q2TnsO7yBINcffKon2DAK-HYmt0.crl (hash: +vXMrrCgng5WL8+7NVJJFWX8bzeasgRMLAGzK5EgLPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2TnsO7yBINcffKon2DAK-HYmt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:6b:1e:73:53:7a:7f:b6:e1:83:12:97:86:3b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4364e7b0eef204835c7df2a89f60c02be1d89add
Validity
Not Before: Aug 4 03:00:57 2025 GMT
Not After : Aug 5 03:00:57 2025 GMT
Subject: CN=cbb0af41d1c3b339831c8f528bbfde96eb6fb761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:12:4c:5d:4c:d6:30:7b:af:72:3a:1d:fa:
a3:29:6b:22:ce:75:ea:9b:4d:31:0a:d8:20:02:f2:
ef:db:1a:d9:db:1e:d9:5e:66:60:fd:50:1e:93:9b:
d1:5a:65:e6:ab:97:9b:23:e7:8a:ad:8d:d1:55:86:
83:01:77:46:e6:ec:0c:7c:46:3d:c1:8d:66:ed:e5:
39:92:53:df:de:71:0a:38:27:bd:dc:a2:ff:68:eb:
7b:b3:1a:91:43:2a:a5:d1:f1:d6:7b:b3:1b:3b:03:
69:65:2f:50:d4:b7:e8:d3:6e:15:35:18:4b:03:24:
05:b8:e0:98:0d:e4:84:06:9e:13:df:25:05:88:ef:
62:38:e8:e2:32:a7:36:be:9c:dd:1a:c1:31:0d:39:
94:42:58:98:80:9a:83:0b:7e:f1:f2:8d:8f:c1:37:
64:33:01:63:a0:20:0f:47:81:22:5e:2a:51:ac:57:
a1:9f:79:b8:6c:60:10:55:b1:95:0d:be:b6:61:3c:
73:d4:5e:44:d6:87:53:bc:89:71:8c:a1:cc:5c:72:
c7:fa:74:61:a9:10:80:9b:53:5f:2f:5c:e8:db:ab:
55:86:44:4f:71:30:07:ae:60:0d:a6:3d:20:bf:6e:
23:3e:2b:18:f5:91:37:38:5a:e6:00:d8:73:8f:c6:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B0:AF:41:D1:C3:B3:39:83:1C:8F:52:8B:BF:DE:96:EB:6F:B7:61
X509v3 Authority Key Identifier:
keyid:43:64:E7:B0:EE:F2:04:83:5C:7D:F2:A8:9F:60:C0:2B:E1:D8:9A:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2TnsO7yBINcffKon2DAK-HYmt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a9a51a-e8e3-497a-aba2-e799c23aac20/1/Q2TnsO7yBINcffKon2DAK-HYmt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e8:8a:34:fc:24:6a:6d:52:c7:95:28:9a:bb:cc:c6:25:3e:
72:d6:ba:fd:90:f3:3f:09:2f:c1:2a:7e:9f:cf:06:29:df:2c:
4c:d9:d7:a9:8d:25:40:a2:5e:13:ef:0f:45:2b:37:ca:c5:c3:
4f:8c:ad:d3:b5:3c:8b:5b:e2:92:cb:04:96:fe:e8:f4:7f:3a:
a0:be:3c:44:47:bc:80:f8:7a:1d:56:73:72:d2:49:88:09:c7:
a2:78:e6:d9:ed:8b:50:af:7f:73:20:90:a4:f8:9a:16:21:78:
3e:b9:8d:ca:5a:60:f2:24:a9:c1:38:12:88:e8:93:ca:89:48:
77:32:d4:95:66:8d:44:92:5f:0b:0e:71:7d:5e:13:40:5f:04:
74:bf:ef:a7:01:86:41:6f:f1:fc:67:39:7d:94:25:1b:12:73:
be:36:ed:ae:00:c9:a4:be:9a:e7:9f:41:a4:cc:9e:b0:ee:3a:
cb:1d:d1:03:72:0f:9f:a8:9f:78:3a:75:d4:e6:51:77:98:62:
a0:a1:91:ab:ec:9b:34:a6:44:1c:8d:df:ae:c0:09:e7:d3:d9:
2f:08:bd:99:7b:df:98:2d:03:0e:67:aa:a4:97:9f:15:b9:d6:
ba:06:7a:9f:67:21:92:cf:4c:fd:c1:30:db:ff:9e:22:e9:71:
26:11:20:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:04 2025 by rpki-client