Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: xOEvF5Qq5SL097b9ILiFMVrZoIVjnLj/5t4Lhsno2QU=
Subject key identifier: A6:7D:C0:B0:64:2C:E9:04:90:E7:B5:21:9F:84:DE:AB:98:41:4D:CB
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 0198530E1D04CC5D796AC7E95A7BC7160FBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 07D9
Signing time: Mon 28 Jul 2025 22:01:30 +0000
Manifest this update: Mon 28 Jul 2025 22:01:30 +0000
Manifest next update: Tue 29 Jul 2025 22:01:30 +0000
Files and hashes: 1: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: q7SPBlAd4oti0DUlLR0J3hInoncG5VYH0UA4Lhrlnss=)
2: sMIvEGgdBdZC0ifsu9Gkafw6woE.roa (hash: iKp2tkAQc6Y6Q0ADEwAX11UEBz8QCxtuHKm3ZBghjNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:1d:04:cc:5d:79:6a:c7:e9:5a:7b:c7:16:0f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Jul 28 22:01:30 2025 GMT
Not After : Jul 29 22:01:30 2025 GMT
Subject: CN=a67dc0b0642ce90490e7b5219f84deab98414dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:ec:89:48:d4:95:71:54:cd:e6:2b:61:23:
49:bd:09:06:21:32:25:09:36:47:d5:0b:2d:f2:28:
d8:a3:84:8b:0f:45:43:f9:95:95:60:9b:24:f5:11:
cb:0e:e3:86:a6:cc:21:49:16:00:39:bc:7f:73:7c:
71:59:4e:21:77:90:a4:56:88:c2:d7:99:75:35:e7:
be:ec:92:cb:ec:5f:6b:21:a8:35:15:5c:01:fe:7e:
fa:8b:16:7c:32:cf:52:33:be:17:bd:52:0c:68:33:
fc:3d:40:4d:de:46:f9:de:bf:88:db:2d:48:77:56:
9d:65:cd:f5:4a:7d:dc:7f:5f:ea:16:5e:be:4a:ba:
3e:72:36:ff:ea:04:1c:22:15:d9:f5:62:ef:16:8c:
14:07:bb:bf:a3:a2:13:e2:13:3a:93:ca:bb:eb:48:
76:e6:64:94:8e:b0:89:2d:b1:c1:e4:fc:d5:bc:4d:
a7:fc:7a:41:3d:4a:be:5b:3f:a9:79:b1:97:ab:d0:
00:1e:c6:ed:91:f8:02:bb:10:cd:4c:e8:b5:fc:98:
a7:23:c2:9c:d5:bc:0b:ab:ba:78:02:55:a5:da:22:
8b:a7:49:e4:1a:44:b2:02:b8:e4:3e:ea:f7:74:59:
87:0e:f6:22:74:d6:13:3d:7d:f1:9c:95:50:45:c1:
28:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:C0:B0:64:2C:E9:04:90:E7:B5:21:9F:84:DE:AB:98:41:4D:CB
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:00:e5:b7:e2:de:28:79:81:98:1f:91:1a:8e:46:b1:5e:eb:
b6:b2:94:ae:09:64:d9:b8:2b:de:d4:42:0e:f2:a7:f3:a1:a9:
72:7e:3c:dc:dc:9f:a0:55:43:c7:c3:5b:9a:89:31:1a:33:1f:
03:32:90:31:d7:cb:fa:0f:96:7c:6a:e8:01:9d:5d:d6:90:53:
68:91:cf:e2:69:16:8b:d4:51:dc:95:01:3d:0f:41:6e:f7:c4:
e2:94:0e:81:e9:ab:cc:f9:a7:21:47:6e:7b:b7:39:c0:0b:60:
98:77:2e:34:68:09:86:b6:01:55:6c:24:ec:20:78:24:fc:56:
06:ec:6f:57:18:7b:e4:e8:fc:56:f0:34:44:c8:38:8a:c0:0a:
39:6d:31:f3:e7:54:52:9a:8f:76:fb:5b:31:a5:48:0b:e8:64:
98:01:36:75:b5:75:5a:90:c9:00:75:22:b3:90:8e:69:c7:e6:
21:e8:db:03:c1:ae:33:eb:5c:52:1f:9c:36:5b:21:1c:6b:df:
44:56:90:3b:ca:a7:1f:db:d8:63:b2:c8:f9:f8:fa:65:a5:53:
5b:10:99:e7:62:38:57:66:6f:d3:d3:31:05:9d:07:64:8f:67:
ca:39:10:1a:05:43:da:32:4f:d0:19:d7:9a:8f:6f:da:96:23:
0b:a3:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:58:38 2025 by rpki-client