Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: 0EO9PD26M23Oh01DHQAAtLvKs4kTY0dm+tEhm701eyE=
Subject key identifier: C8:71:EB:BE:1B:8F:FC:F0:AD:92:85:94:27:4B:B0:A8:F8:9C:54:F0
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 019847769354AF2DCE2AD6C1D703B31255B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 16:00:09 +0000
Manifest this update: Sat 26 Jul 2025 16:00:09 +0000
Manifest next update: Sun 27 Jul 2025 16:00:09 +0000
Files and hashes: 1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: 4DZFpHmvyPrtPCo0AJunLbd7RD/Qq/xwnMn6HvdcFc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:93:54:af:2d:ce:2a:d6:c1:d7:03:b3:12:55:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Jul 26 16:00:09 2025 GMT
Not After : Jul 27 16:00:09 2025 GMT
Subject: CN=c871ebbe1b8ffcf0ad928594274bb0a8f89c54f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c3:4e:be:37:cd:e2:db:e4:06:cd:0d:37:42:
4a:e9:5f:14:a6:24:a2:b6:94:2a:9a:cf:73:06:9c:
dd:07:39:0f:3e:c9:24:f2:8f:c0:e2:9b:ba:82:b2:
c1:cf:31:3a:88:a7:bf:a2:51:34:74:db:d2:5e:3a:
38:af:4b:b9:72:a5:25:bf:f8:59:dc:cd:ea:e0:87:
3e:21:9b:b5:5a:44:60:85:cb:42:81:76:f2:5b:6b:
12:5f:d4:83:11:37:43:3c:bd:17:78:6c:96:89:69:
ee:aa:90:98:07:c2:17:89:37:c1:83:27:d2:d6:7d:
83:ed:71:ff:56:61:6c:df:e8:b9:c9:34:bc:c8:10:
ab:fb:a3:bc:68:c0:56:27:5c:6e:f7:b6:1d:8e:d8:
dd:1a:4e:f1:1a:66:78:1a:9d:15:07:e5:0e:11:a3:
21:bd:df:13:bf:0c:25:64:fc:33:7c:f7:e2:23:79:
1b:49:05:4b:90:5e:dd:19:a3:55:2e:47:58:3f:3f:
76:ab:60:bb:f6:49:68:08:91:41:71:ab:d8:18:b8:
4c:6d:25:4c:7d:cf:6d:82:f4:8d:06:2b:5d:40:b9:
92:ed:2e:17:7c:5a:b2:9f:ea:c2:9e:0d:8f:5f:42:
ad:c4:d2:3d:18:db:af:aa:b7:fd:ad:00:9a:03:63:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:EB:BE:1B:8F:FC:F0:AD:92:85:94:27:4B:B0:A8:F8:9C:54:F0
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d7:18:c0:ed:df:f0:a5:33:1a:ed:b7:08:48:9f:e1:82:83:
1b:a1:bb:74:22:fa:69:c9:06:27:d5:88:08:8e:2c:4d:ef:f6:
66:09:d1:e9:b5:55:95:82:12:13:4d:ef:87:f3:81:5b:64:af:
4c:6e:32:0a:da:62:1c:b2:1b:60:d4:62:d9:be:64:08:22:64:
b5:cc:50:60:16:9b:3d:6e:7f:27:00:67:31:56:86:dc:7f:0e:
4b:21:42:3b:9f:fc:7d:1f:a2:23:e4:7a:63:2a:fa:ac:31:3e:
44:c3:9b:8f:93:39:23:9b:19:e1:4a:b2:4e:96:6b:01:4d:58:
44:8c:31:b2:77:07:f4:89:93:53:cc:86:43:ea:e6:39:a3:7a:
57:19:93:f7:7c:e8:8e:88:f1:78:ce:f6:36:86:8c:2a:37:2a:
ac:a6:0c:0a:2f:79:0f:4b:87:4e:9c:6c:a1:dd:9e:ff:15:de:
e1:63:4c:a9:de:03:bb:bc:24:ec:02:bf:8f:ff:2f:e1:38:a9:
35:97:af:72:29:78:f6:69:2b:7a:e9:55:c3:4b:10:28:7c:99:
b7:3a:60:3d:54:96:53:c6:11:a3:fd:28:1a:44:b3:24:90:51:
a5:03:50:49:de:9e:39:3c:25:06:c9:ed:41:fe:dd:cf:be:0e:
21:59:6a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:45:55 2025 by rpki-client