Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: Vt+vArtCa2pErDAILP1SurPQrtEFo2skasPJ4PnpSJc=
Subject key identifier: E4:B6:67:86:AB:29:7B:AE:41:81:09:74:C7:86:E9:7D:EA:92:38:AA
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 0199239F2D91D2A66507F083F81BA69199EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0A7F
Signing time: Sun 07 Sep 2025 10:00:58 +0000
Manifest this update: Sun 07 Sep 2025 10:00:58 +0000
Manifest next update: Mon 08 Sep 2025 10:00:58 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: iDlwtyjMdixm67WkYGHTQZSdRm35dsbLOTcGXxhvzcY=)
2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:2d:91:d2:a6:65:07:f0:83:f8:1b:a6:91:99:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Sep 7 10:00:58 2025 GMT
Not After : Sep 8 10:00:58 2025 GMT
Subject: CN=e4b66786ab297bae41810974c786e97dea9238aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:b7:1f:ad:ea:e0:bb:a6:a7:4d:1d:54:5f:
6e:cf:d3:e0:6a:19:be:2b:cf:2b:18:0d:19:79:11:
ff:75:b7:64:ba:c4:7e:eb:10:57:65:ed:7d:80:ee:
30:75:49:62:99:c9:6a:93:e7:80:c2:e6:c5:46:05:
57:6c:b2:20:9a:e4:e9:54:38:da:38:3e:5c:dc:b9:
ad:f6:b7:e0:93:ed:ae:34:3d:05:fc:11:f9:ad:32:
02:ea:6e:59:b1:cd:d0:15:40:d3:9a:e8:3a:12:f0:
0e:33:d9:42:be:04:95:44:35:71:d3:65:bc:c2:de:
93:e9:c7:50:80:10:4d:f2:af:2a:16:e6:d3:a8:bd:
15:7e:26:31:ce:ce:48:5c:7e:fb:8b:6a:34:13:3c:
ce:7e:c7:e7:ca:cb:b8:2b:08:5b:3c:a5:ed:20:82:
9a:ed:ed:44:e3:07:13:a6:9d:00:33:43:26:d1:f0:
81:c5:de:6f:5b:11:25:b8:35:28:82:4b:6f:46:aa:
6f:48:0f:24:2e:bb:25:1c:43:9a:33:8e:43:9e:a8:
cd:6c:10:6e:c1:3a:4f:eb:f4:35:5c:65:48:c9:20:
5f:ce:6c:59:a6:8a:8e:a2:0b:06:af:fa:a3:ed:63:
bb:4c:50:46:ce:ac:85:15:97:e1:4f:0a:55:6d:51:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B6:67:86:AB:29:7B:AE:41:81:09:74:C7:86:E9:7D:EA:92:38:AA
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:db:9e:dd:56:87:80:d4:2f:26:92:d8:d3:c4:d2:e4:91:bb:
58:c2:b9:f7:b9:1e:3a:9f:22:d3:ab:a4:e3:19:8e:52:3b:d9:
c6:d9:b4:87:44:6b:33:1f:47:b9:1a:b2:7a:17:e7:1b:a8:31:
04:cd:16:f9:2d:b1:da:7a:0f:8e:cd:4e:54:62:32:31:3c:e2:
a6:78:79:18:13:4d:86:d4:a2:4b:81:fd:cd:6c:8a:9c:1c:1f:
ec:7a:f6:b0:2f:76:09:df:8e:09:4f:2c:6b:7f:14:23:cc:01:
87:07:22:23:f4:98:97:0d:a4:bb:60:1d:70:0f:42:57:13:31:
37:b0:6a:3a:1a:90:b4:03:99:76:51:8f:fe:28:a8:9e:2c:4a:
fc:a2:9c:01:c9:3d:7b:63:cb:01:9a:8c:c5:c6:d9:f9:36:5d:
62:86:d3:f0:89:63:c0:e2:80:9a:0d:cd:a7:29:b5:d2:8b:ac:
ce:85:72:bf:2e:08:0f:f6:73:42:a4:12:7b:4a:26:24:06:12:
96:8f:33:fb:0a:a0:bb:46:06:fc:d7:2e:99:b3:86:6d:47:a7:
78:b6:d8:47:fa:ad:80:45:78:1f:c1:c3:26:96:d2:44:60:5d:
76:80:d9:73:7b:57:b1:c4:62:c0:38:99:c6:04:c2:48:f5:bc:
56:37:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:12 2025 by rpki-client