Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json)
Hash identifier: kHLtv6z4kEkVxqDyiYiC7vtT5jlRyk06muz7SdRhFf8=
Subject key identifier: 29:68:39:D2:1A:AF:18:09:2B:78:DC:EC:07:D5:0F:37:90:6E:5B:E5
Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Certificate serial: 019885444A0820EBFDED9D8A9E7A68018D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 16:01:41 +0000
Manifest this update: Thu 07 Aug 2025 16:01:41 +0000
Manifest next update: Fri 08 Aug 2025 16:01:41 +0000
Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=)
2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=)
3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: kOWTcafj2ijhvuuQymROuWX0f9EF0WdnrJremOGBn94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:4a:08:20:eb:fd:ed:9d:8a:9e:7a:68:01:8d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251
Validity
Not Before: Aug 7 16:01:41 2025 GMT
Not After : Aug 8 16:01:41 2025 GMT
Subject: CN=296839d21aaf18092b78dcec07d50f37906e5be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:0d:35:e8:3c:5f:f5:ca:a0:e0:1d:01:2e:
db:83:6f:f6:9e:87:0e:e3:03:da:b0:df:4c:ee:7e:
a1:fb:85:4b:3a:20:0e:8d:91:54:9d:ef:24:b6:6b:
66:81:a8:e6:5e:cc:b5:f7:9d:40:a6:42:2a:2d:16:
54:4c:90:56:5b:cd:80:54:54:6e:ee:5d:66:d4:15:
be:c9:9e:d1:7a:36:c7:58:d6:97:ad:f8:fe:57:11:
c1:6a:b2:0c:58:b3:19:b2:25:90:0e:5f:74:3e:a5:
89:2d:7f:e4:c8:c5:de:d1:9c:b4:1b:b5:8a:01:41:
37:cf:1a:2a:b0:40:9f:f1:b0:a3:24:96:ab:9c:6c:
19:ed:0d:88:a4:e9:9e:d6:a1:6c:9b:2f:78:d2:18:
d1:4a:f3:30:4c:46:ef:2a:4a:4b:ea:b5:ec:b3:d9:
21:d9:c0:b9:02:6a:83:a6:65:14:7e:6f:d8:d0:75:
85:ba:08:ff:44:cd:49:f8:10:eb:20:ea:45:99:62:
f0:f9:ae:9c:fd:bc:c7:ad:be:69:1f:6d:f1:8c:0e:
2a:af:06:1f:d7:82:b0:79:ce:5b:11:9f:ba:21:62:
d5:c6:80:dd:e8:24:77:8e:89:14:86:80:9f:1b:cd:
f9:a7:5c:e9:98:f6:49:9e:98:5d:a7:5f:64:69:4f:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:68:39:D2:1A:AF:18:09:2B:78:DC:EC:07:D5:0F:37:90:6E:5B:E5
X509v3 Authority Key Identifier:
keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bf:70:7b:b8:4a:4c:9d:e6:b5:05:70:af:73:36:cb:fe:60:
88:4c:b3:6c:7c:6c:6f:52:ae:06:ba:9c:fa:81:e7:d6:99:2e:
ca:82:bd:66:7b:85:ca:36:52:7b:ce:02:d8:f3:d6:35:81:4f:
7a:7a:d1:74:81:cc:9f:1e:69:67:b5:54:24:94:64:3e:42:48:
00:7d:72:92:5a:a7:ac:ea:ad:c7:39:da:37:ee:1e:4e:ff:bc:
12:26:ea:dc:b7:14:83:ef:a6:b9:5a:cd:cd:f3:33:1f:1a:40:
38:d0:12:4c:72:18:38:d5:e1:38:3d:fe:3a:cf:1d:91:a2:de:
a7:89:68:d4:03:a5:a8:c5:18:e9:a8:f8:ee:d9:ea:d7:4d:c0:
56:0c:0b:70:ec:0b:5d:7e:e7:3a:d0:75:e8:f1:3a:e3:86:73:
50:5d:57:ee:2c:a4:df:d6:65:56:41:dd:24:9d:41:f2:27:fc:
4d:c0:05:67:a2:91:87:f9:e5:33:d7:b4:8d:8c:c0:02:a8:c0:
31:c4:6e:34:b9:4e:3a:67:f3:47:da:42:ef:1b:77:c0:75:63:
37:f2:56:7e:00:89:d0:d2:a8:6a:8c:2f:49:03:b3:f9:4c:67:
23:52:be:35:a6:66:d4:98:77:2b:f8:e5:49:0c:a6:27:7b:2c:
4c:09:03:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:40:09 2025 by rpki-client