Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: xDNnOVxdodgjQttlFqREsDn19QFeDrZSTMcnGCRtbpw=
Subject key identifier: 57:A8:F2:DC:19:78:13:5C:C6:92:6C:74:D8:45:1D:3A:E0:66:5C:23
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 01993501D999EED856845F8B6B6F8C83E84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 19:02:17 +0000
Manifest this update: Wed 10 Sep 2025 19:02:17 +0000
Manifest next update: Thu 11 Sep 2025 19:02:17 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: 2Y+VBn603uHvSqJRanvMl2htK+rtz1p/vt4Yn2xEc6Q=)
2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=)
3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:01:d9:99:ee:d8:56:84:5f:8b:6b:6f:8c:83:e8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Sep 10 19:02:17 2025 GMT
Not After : Sep 11 19:02:17 2025 GMT
Subject: CN=57a8f2dc1978135cc6926c74d8451d3ae0665c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:c3:0e:7a:13:1e:a6:7b:94:3f:61:7e:10:
a9:8b:f1:17:36:76:79:bd:4e:a0:ba:51:5d:77:c2:
1c:e1:8d:f0:1c:f1:ce:3e:a7:f9:e8:30:a1:39:9a:
ce:6d:01:78:76:8e:d6:ee:80:66:f7:95:dd:e0:de:
dd:08:1b:48:25:0a:15:87:ff:aa:5b:d6:07:83:35:
56:f7:7f:4d:b1:fa:f6:28:a6:91:a1:2a:4d:fb:4c:
29:bc:af:90:17:35:83:94:8a:9a:93:35:11:e1:09:
c1:b9:c6:11:75:e0:70:77:66:c7:db:25:70:a7:20:
66:c4:da:ea:d7:72:41:89:3e:f3:13:cc:95:0b:51:
db:a3:28:e4:79:d1:16:62:07:4b:c5:ce:82:c7:41:
91:11:ba:a3:6a:51:48:7e:f8:c7:4b:95:57:9f:05:
44:82:27:20:88:ad:cb:db:35:6f:27:23:30:94:e8:
bb:57:10:39:84:51:2e:55:55:a5:59:a4:83:db:1c:
89:60:2e:34:b8:71:01:bd:2a:84:3e:bc:0a:88:70:
3c:ea:e5:1b:39:de:de:6d:91:0b:f4:e8:10:63:9d:
47:d5:79:bc:da:e9:b9:0a:65:ef:84:c7:83:53:c0:
9a:e5:3d:ce:e7:15:fb:d5:72:e6:4e:32:8a:42:d1:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:F2:DC:19:78:13:5C:C6:92:6C:74:D8:45:1D:3A:E0:66:5C:23
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:74:83:c7:3e:74:ef:b8:31:f2:ad:90:a3:89:4a:52:bc:79:
b7:00:f4:2b:35:4a:65:39:e0:7b:d6:13:51:b2:51:0e:98:ad:
f8:f4:d5:38:13:4a:c5:bd:5b:39:35:be:06:fa:45:5c:f2:e5:
5b:d8:72:50:a7:14:aa:a7:f3:93:e1:6e:03:63:3c:8b:db:6c:
62:66:05:b8:81:d1:2d:ee:b3:71:78:fd:c8:02:b7:94:21:34:
10:17:4a:45:ee:7f:47:06:e2:cd:95:b6:ac:04:c2:ee:15:ea:
23:53:07:ec:f9:3f:19:69:10:34:5e:ec:93:fe:e3:c9:b7:f8:
b2:96:32:d7:62:fd:de:d7:6a:e4:61:90:46:2e:c8:7a:34:14:
bc:8e:5b:09:aa:f3:62:d7:c6:6e:02:c9:47:69:86:82:ea:06:
ce:1b:04:3c:89:88:57:82:92:6f:26:10:4b:26:e6:64:11:07:
e2:83:5d:d7:78:1f:5b:1a:6d:52:05:f4:7d:ab:03:87:c1:24:
80:39:65:52:26:e8:2a:ad:5a:6f:2d:22:14:a0:d3:bc:f2:fa:
aa:dd:2b:64:7f:1f:52:41:56:85:a8:99:bd:7d:08:80:93:b8:
93:5e:05:2c:4e:84:7d:dd:2f:8f:e4:9b:9a:32:1b:bd:89:0e:
3e:75:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:24:07 2025 by rpki-client