Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: XQB3LVIVuYFf7qcK2H5xRtJgPetq67sM+LCBAq9XnlM=
Subject key identifier: 45:C5:1A:51:2D:18:BA:13:7F:26:BF:C9:78:DC:8F:30:E6:D6:06:B4
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 019873E1C27E2A2D22121546887554FECB09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:00:31 +0000
Manifest this update: Mon 04 Aug 2025 07:00:31 +0000
Manifest next update: Tue 05 Aug 2025 07:00:31 +0000
Files and hashes: 1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: M5sqIP/g1vKIbHB2Lz8g1XN7TCjRsZE/AyXqVl8SaYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:c2:7e:2a:2d:22:12:15:46:88:75:54:fe:cb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Aug 4 07:00:31 2025 GMT
Not After : Aug 5 07:00:31 2025 GMT
Subject: CN=45c51a512d18ba137f26bfc978dc8f30e6d606b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:e2:c6:a9:4d:19:7e:f0:00:6a:8e:3c:3e:
37:2d:39:08:fc:42:1f:65:64:ca:9e:30:7e:4b:07:
a8:8d:42:81:34:d1:06:a0:a9:c4:be:ed:ca:27:7a:
e1:f1:5a:1d:a9:01:4c:af:89:ee:43:ad:a5:ae:1d:
fb:b8:12:aa:c1:c0:5f:1b:71:42:b8:83:a7:5c:9f:
94:8e:f5:f9:15:75:4a:a2:41:79:6c:61:b7:6f:35:
fc:03:c9:1c:42:93:33:f1:fa:15:fd:87:93:c2:30:
91:71:4b:04:6c:82:09:7b:d1:f9:25:c4:89:98:3a:
b1:09:a1:af:90:b4:32:58:44:bd:27:47:f8:c3:d8:
48:b6:9e:5f:b0:f0:4f:42:d1:bc:86:94:cf:e4:e9:
d3:e4:89:6a:77:9a:76:d5:6b:25:7e:b1:ec:87:77:
67:0c:ce:30:41:7d:60:43:b9:c3:6a:eb:7f:ca:e3:
f1:1e:74:c3:cf:98:6a:80:b8:2b:62:8f:3c:42:e3:
3e:03:30:52:e3:1e:06:a1:d9:e4:39:1a:ad:c0:39:
7b:ff:39:82:67:45:1d:7c:3e:30:a9:bc:b5:82:9f:
27:17:d3:ab:ab:ae:66:e4:d3:02:ee:23:96:98:8f:
86:03:60:2c:7b:13:d1:16:4f:3e:62:fe:8b:df:d0:
2b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C5:1A:51:2D:18:BA:13:7F:26:BF:C9:78:DC:8F:30:E6:D6:06:B4
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:21:2f:64:0b:36:f9:18:aa:2a:bc:35:7e:fd:32:88:9f:19:
37:7e:29:0e:52:26:29:1a:2d:3d:9c:81:91:36:d3:93:33:31:
71:4c:90:75:e4:58:75:89:f2:1b:c6:42:3b:97:14:20:92:83:
2a:a5:75:eb:f8:e4:5a:7a:a2:44:4c:0b:76:a8:50:14:ae:f1:
ee:25:0f:15:e7:1b:2d:ec:fc:51:73:a0:30:82:d1:25:e0:21:
ce:54:d6:57:e2:78:5f:62:96:99:0e:6e:e7:7e:98:db:10:90:
98:4b:c2:09:30:f9:03:df:d6:a6:a2:48:c8:87:75:7c:25:8e:
08:bc:bd:64:43:0c:29:3f:ee:8a:3f:07:10:13:a8:92:db:c2:
0d:7f:6d:17:d7:ad:3f:2a:bd:6d:a8:3c:f5:40:93:33:6b:31:
6f:62:5f:49:26:89:7c:3c:58:b4:9e:70:74:34:47:47:f6:3b:
90:1f:f6:0b:ba:d8:d8:60:3d:a8:19:1d:07:76:9a:24:47:d3:
b7:4b:97:f6:a1:8d:06:00:6b:ab:31:b7:d4:bc:6f:1c:97:8c:
cd:6d:8d:8a:28:43:18:8d:4a:12:4f:97:c2:1f:33:57:25:ed:
71:1e:19:f5:e6:1a:f5:9e:f7:dc:90:6c:9b:90:d0:ff:d0:02:
93:01:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:17 2025 by rpki-client