Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: bKd/Mhx7f8R56YCudZ4FE9BOgl/7b7HywaYanOC3Kqs=
Subject key identifier: 99:83:2E:A0:71:9E:81:C0:01:EC:5F:1B:5D:04:45:18:B0:52:E8:D6
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 019930B5EDDD1B421141C1A1907FFC5CA304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 1211
Signing time: Tue 09 Sep 2025 23:00:53 +0000
Manifest this update: Tue 09 Sep 2025 23:00:53 +0000
Manifest next update: Wed 10 Sep 2025 23:00:53 +0000
Files and hashes: 1: JkN8bIkVpi2C1QQ33sarGe3s8jc.roa (hash: qS4cYRYxbkUSSNoTxCHI4UmRIFnlPxYoJcBSjDIdM1g=)
2: d03ojnbuBeIJ-lnd7OihnLWEVxw.roa (hash: XlMC0ZRLbmiqoXJQRP7mRdNP4FsXpGfEzY9nYp5h2sg=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: MUbfimXQ6F5ONVBFvQiHKQS08lMkMjEZ9cFnlrUpd/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:b5:ed:dd:1b:42:11:41:c1:a1:90:7f:fc:5c:a3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Sep 9 23:00:53 2025 GMT
Not After : Sep 10 23:00:53 2025 GMT
Subject: CN=99832ea0719e81c001ec5f1b5d044518b052e8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:60:af:0f:99:14:ef:74:33:e0:17:c9:43:8d:
f3:f2:7d:92:26:08:c9:4e:2a:e1:a6:63:a1:0c:06:
23:4a:ea:fb:b8:f1:7a:60:ca:5b:09:38:24:3c:8b:
2e:2a:06:61:f7:11:c3:52:2a:81:d1:5e:db:1d:b7:
46:6c:ff:78:0f:b8:aa:bb:40:47:d5:5a:ac:b6:3d:
c4:d3:67:2b:fa:46:b4:7d:66:71:79:f0:29:68:c6:
7e:12:5f:2e:32:a4:7d:3a:28:b0:48:b3:70:3d:dd:
c1:5e:ca:77:27:83:e1:8f:3d:76:5e:a3:d3:43:b7:
32:9e:b8:8a:c2:ee:3e:e6:88:05:03:75:2e:ed:a2:
61:d8:46:32:00:66:0a:de:d4:b4:0c:b4:04:5f:ce:
17:f9:45:a8:1b:90:42:43:49:1b:4f:8a:04:d8:b6:
a2:44:63:50:e1:92:e4:6d:67:b9:17:1c:6a:06:a0:
ff:58:3b:d7:e5:7c:a1:d4:dd:aa:48:f9:6f:20:3f:
20:70:c8:dd:24:28:4c:12:27:fe:67:7c:73:34:8d:
27:3a:7a:c8:aa:7f:35:e7:60:c4:32:83:f6:1a:6f:
00:fb:b8:11:8b:66:d2:c9:0a:5d:55:2a:1f:b6:71:
5a:93:53:8f:30:75:58:81:5b:57:dc:68:1e:54:a4:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:83:2E:A0:71:9E:81:C0:01:EC:5F:1B:5D:04:45:18:B0:52:E8:D6
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c0:97:61:47:6e:94:43:52:12:94:2e:5d:c9:52:85:fd:d9:
3b:f7:fb:29:f4:d9:f4:02:75:b2:ed:cc:98:f8:3f:b2:ca:b5:
d4:c7:70:58:40:6f:c9:81:87:f0:a2:ac:84:87:94:e4:29:18:
6a:a1:6c:77:54:04:8c:31:10:bc:40:b1:ea:f4:22:fa:73:43:
32:53:a0:b2:b2:be:a1:22:b4:35:06:b5:10:bf:4c:6d:3a:6c:
ed:21:50:ff:b3:26:e3:51:bf:4b:cb:e5:d6:a1:66:42:ec:16:
0a:78:e4:59:c5:9f:b9:8e:19:d8:73:b7:76:6b:9c:5e:bf:33:
58:44:00:c3:0f:9f:3c:94:28:80:3d:de:83:3b:db:16:55:9b:
fc:7a:e7:ba:b8:8a:29:6e:97:ad:44:55:83:a1:8b:e4:b5:6c:
6f:98:12:37:45:ab:7a:a9:16:46:44:55:00:70:60:79:cb:30:
bb:61:85:c1:22:cb:e4:0f:11:36:37:12:b4:70:d7:c0:99:40:
80:32:e8:c3:a8:66:9b:01:09:7e:3c:b4:54:32:c3:b8:9e:d1:
25:2f:56:6d:c0:ab:9b:db:e5:7b:15:f9:5e:72:d7:68:61:0c:
06:5f:a3:c7:c1:aa:3a:4a:a7:f5:3b:19:cf:bf:0f:69:3b:25:
c1:53:19:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:22:39 2025 by rpki-client