Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
File: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft (raw, json)
Hash identifier: yBdMQeuUmzpoL7S+8JOphninGcwDHgt9BxDv9HehwJI=
Subject key identifier: 19:04:75:12:83:5B:11:AD:74:70:2A:11:EA:AF:D8:80:E0:D5:1F:24
Authority key identifier: A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
Certificate issuer: /CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Certificate serial: 01987D1C0189FA2BAA76D2E5457D76C713D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
Manifest number: 0472
Signing time: Wed 06 Aug 2025 02:00:43 +0000
Manifest this update: Wed 06 Aug 2025 02:00:43 +0000
Manifest next update: Thu 07 Aug 2025 02:00:43 +0000
Files and hashes: 1: 2U9_DlkXgIcp2fqTIjSzc96XjLo.roa (hash: AqnnBs4DF+DHHSE1BOafxKA5wB2i7dk/ZwYwgXHHS/Y=)
2: qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl (hash: mNPg0IK5MfPZN6yBnqJA1JrxXADa3QpFTDvCK0tsVx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:01:89:fa:2b:aa:76:d2:e5:45:7d:76:c7:13:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90e28f2e509fe37ac5c3401a0a8c11029b621e4
Validity
Not Before: Aug 6 02:00:43 2025 GMT
Not After : Aug 7 02:00:43 2025 GMT
Subject: CN=19047512835b11ad74702a11eaafd880e0d51f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:f0:63:6c:02:70:c9:59:a3:3f:2a:55:44:
c7:f9:33:53:88:ad:04:53:05:56:97:7c:f7:d4:0d:
0b:9e:b5:84:49:93:f4:79:2b:00:12:b8:df:c5:0e:
74:2b:ce:c1:71:ff:db:bf:f6:fb:e0:8f:32:ab:d9:
48:66:5f:0e:e4:7e:75:22:13:51:1d:23:35:a6:3f:
0e:e5:2a:e2:75:c6:ad:ae:3e:a6:0b:12:e5:67:31:
f7:51:c9:c9:87:1f:1f:1f:f1:c7:2e:ca:d0:4a:1e:
3b:9a:4c:4d:64:53:b6:5a:9f:56:89:93:84:56:3f:
ce:48:e4:04:31:be:85:52:9e:47:a1:de:f5:e0:46:
e4:fd:ba:c6:a9:a9:e3:92:c7:27:b8:ca:de:bd:61:
95:e6:ed:c4:77:e2:73:2e:63:71:a5:09:8c:44:f3:
16:18:56:ff:e1:5b:48:1a:75:9a:25:6d:ac:7d:c3:
af:2c:54:82:b0:55:ef:69:56:ba:9f:6c:d8:32:7b:
f7:b4:a7:a0:99:b4:b8:2f:3b:b4:bd:b7:2f:0b:11:
cc:19:36:4b:24:45:3e:42:10:f6:10:5c:a7:c2:7f:
7c:3d:a9:1b:1f:76:ad:1c:59:36:95:b9:5b:9b:15:
2c:05:aa:40:f2:23:c1:71:df:de:0a:d7:08:df:77:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:75:12:83:5B:11:AD:74:70:2A:11:EA:AF:D8:80:E0:D5:1F:24
X509v3 Authority Key Identifier:
keyid:A9:0E:28:F2:E5:09:FE:37:AC:5C:34:01:A0:A8:C1:10:29:B6:21:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/99e585-a652-44f3-a531-a003bfdf4e45/1/qQ4o8uUJ_jesXDQBoKjBECm2IeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d9:4e:eb:32:38:a6:7e:a8:79:a2:70:4a:2f:0e:b2:ad:2b:
3b:de:40:79:ac:7b:0a:e1:64:76:80:a1:20:29:f4:60:39:b9:
25:1b:ed:24:e0:e3:15:27:ba:d6:9b:14:0d:f3:fc:42:9a:69:
32:0e:f1:10:6e:b2:6b:5d:c0:9e:2b:d7:bf:95:85:5c:1d:dc:
55:f5:c5:80:ad:bd:2f:c4:46:18:e3:ed:7b:8e:bd:12:4b:f9:
02:1b:0a:86:1d:ff:29:e2:18:c6:27:9d:4a:c9:bf:10:c3:ae:
fa:40:39:02:ab:6e:c5:c4:a0:ff:0e:6e:6d:60:7c:e5:ad:79:
b1:62:64:5a:52:c1:b3:ea:12:78:ef:d6:37:a3:15:41:46:4c:
f8:2b:59:16:72:4f:01:23:60:0d:df:27:aa:37:4c:f2:49:22:
ec:b9:25:9d:3f:2e:a7:b1:ff:77:6d:15:22:fc:94:fb:90:9f:
48:eb:41:6d:3d:b2:7e:0d:16:36:24:dd:94:a4:0c:d4:98:b1:
22:a2:3e:b7:70:fc:4b:75:0f:0a:ad:13:0e:83:ce:e6:c6:9b:
d0:49:92:74:9c:10:4b:27:e8:6d:64:30:6d:f5:a3:da:5f:3f:
e1:ea:0b:92:45:4a:c9:f9:3e:83:7e:13:07:c0:00:c4:b7:e2:
f1:52:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:17:02 2025 by rpki-client