Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier: PDz827gae10kNKg3c0qkYW+am3EYwyR+pKKh/3dCUHU=
Subject key identifier: FD:44:FC:A4:1E:F1:D0:70:FD:CF:BB:BD:AF:0B:E6:21:56:BE:D0:23
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 0198733D91C051A3D568EE0F4EB830219508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number: 14F0
Signing time: Mon 04 Aug 2025 04:01:11 +0000
Manifest this update: Mon 04 Aug 2025 04:01:11 +0000
Manifest next update: Tue 05 Aug 2025 04:01:11 +0000
Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: DxMeO0dfA9h3uUtnLjC120fhZ7ZLWPj620kIX/XTlu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:91:c0:51:a3:d5:68:ee:0f:4e:b8:30:21:95:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: Aug 4 04:01:11 2025 GMT
Not After : Aug 5 04:01:11 2025 GMT
Subject: CN=fd44fca41ef1d070fdcfbbbdaf0be62156bed023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:03:1e:27:d6:e0:be:2b:ec:92:b4:bb:79:
d9:2b:63:51:8d:92:a4:af:a1:e0:12:50:45:c4:60:
83:cf:29:4d:ad:3d:d3:c2:95:90:7d:20:48:05:2f:
ce:f6:fb:17:b4:ba:9a:0a:d4:fc:46:53:bd:c7:08:
11:2c:ae:9d:a6:0d:53:11:8c:0b:3f:77:b5:53:0e:
1f:38:c0:0c:63:35:78:ae:db:ee:b2:43:ea:5d:1d:
db:93:69:80:2e:22:3f:ba:6b:b9:81:12:ef:ef:10:
6d:b0:d1:8d:07:cf:04:73:d4:d8:af:e7:17:d9:47:
3f:dc:68:0e:10:2e:e1:1a:c5:6f:f7:24:f2:4d:03:
f4:a0:4c:1c:a5:4d:af:67:32:f6:f6:76:c9:72:29:
73:3f:55:3f:31:b7:39:6b:6b:b8:1a:1c:1b:d8:7f:
43:d3:5e:62:12:27:ed:08:70:f4:5a:20:bd:23:67:
9e:b7:47:c8:f8:8e:56:0f:51:79:ae:0c:6b:5a:72:
15:7c:c5:af:43:05:f6:02:63:9d:b1:b5:6b:dd:0f:
47:e2:ef:66:89:11:ac:6c:12:e8:21:17:ae:f4:6a:
6d:c1:98:1b:e9:73:bf:e4:14:d3:ab:14:87:9a:94:
24:75:24:98:19:ff:ba:83:c3:2e:b5:d5:48:5f:0a:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:44:FC:A4:1E:F1:D0:70:FD:CF:BB:BD:AF:0B:E6:21:56:BE:D0:23
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:79:06:62:db:cc:1f:87:a6:47:ba:9f:b1:ad:87:f2:cd:63:
6e:c3:3f:b6:ca:75:b3:61:e8:5e:6e:c2:b0:54:9e:26:7a:a4:
c5:b2:58:e0:39:4f:7d:e1:b0:6a:d4:84:7d:53:d4:dd:b8:fb:
e2:dd:6e:66:92:4c:76:09:3c:1e:0f:04:76:78:b1:42:96:3d:
9d:fd:99:54:35:15:ca:c8:87:5d:83:3e:f1:66:0e:52:fa:83:
02:f3:84:2a:06:21:53:7f:a6:fc:74:97:1d:dc:50:ad:fb:be:
c8:21:e7:11:87:2e:21:72:ed:46:e9:02:d5:f9:3e:ca:b7:16:
21:6b:35:2e:22:36:91:a2:f4:d4:4d:79:16:b1:40:e7:02:d8:
17:68:ca:b7:96:3d:ed:55:35:0d:93:20:95:f2:ee:8a:fa:d5:
0d:24:09:00:94:a2:1d:dc:fe:6e:d4:b9:91:ea:da:56:ea:ce:
97:dd:7d:09:a5:28:a2:8b:96:a9:47:c7:c0:bb:00:26:aa:f6:
c0:7b:ca:82:f5:e4:b6:21:04:e2:29:bc:f8:00:ce:7e:9b:3a:
90:35:a1:69:01:9f:50:1f:4c:20:f1:e8:ea:69:87:66:8f:c0:
17:84:db:b5:c5:8b:7c:5f:07:06:15:be:ac:2d:2a:e1:87:a2:
68:9c:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:23 2025 by rpki-client