Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier: zLzVunWbRXrQPtzo7+bXm5HEyJWE3cgPQZeLRPsEHNg=
Subject key identifier: E5:C6:3B:F3:F3:31:5A:4C:6A:53:8C:91:5C:34:EF:19:B7:76:A9:11
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial: 019938DE6E51FA94FC04BA1846A3515FE19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number: 04AB
Signing time: Thu 11 Sep 2025 13:02:05 +0000
Manifest this update: Thu 11 Sep 2025 13:02:05 +0000
Manifest next update: Fri 12 Sep 2025 13:02:05 +0000
Files and hashes: 1: R0bDzTZMsFHuXIVscoarjoJ_wTM.roa (hash: 9HD9aEc03IRoCnCCjg3LQXd12HLkqdNv34Xu2fVDTFY=)
2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: MdAHjy917tuGYv5c5EffssAlzI12vTpDefQ0JdaLPzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:6e:51:fa:94:fc:04:ba:18:46:a3:51:5f:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
Validity
Not Before: Sep 11 13:02:05 2025 GMT
Not After : Sep 12 13:02:05 2025 GMT
Subject: CN=e5c63bf3f3315a4c6a538c915c34ef19b776a911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:4c:0a:a1:7b:a6:05:b2:db:ac:70:9e:a2:
c6:de:24:8d:60:37:06:dd:67:ff:07:d4:e1:25:42:
19:ba:ed:a4:f7:83:c0:0e:c4:79:bb:c8:2a:20:ab:
a6:6e:11:14:55:90:da:82:b9:ae:66:40:2a:31:81:
0c:66:41:ad:c6:b5:cd:c9:c3:05:81:9c:10:85:c9:
1e:2a:eb:26:c7:a1:df:55:b5:1b:7b:86:87:54:8a:
60:8a:1b:86:fb:ff:13:85:02:82:67:8c:2e:b2:ca:
a5:aa:1a:7d:8b:29:02:9f:1e:fd:fc:36:41:c2:8a:
d2:dc:20:00:7e:50:6c:3f:a2:14:14:0a:d5:29:2e:
60:7b:58:21:eb:0b:09:ad:49:64:8e:a1:f9:9b:a9:
ac:d7:dd:40:86:35:3c:a8:6a:70:2e:bf:0c:b5:0c:
6d:f1:88:ee:af:ec:6f:30:99:ab:6f:f4:51:6d:4d:
84:d7:c4:8c:8d:5d:5f:52:08:61:15:39:05:7c:7f:
23:b6:a6:50:b8:f0:95:ed:5b:47:58:c1:4b:54:4f:
49:04:90:12:a9:4a:c6:5a:78:b7:4f:62:2e:e1:31:
00:5f:07:15:de:98:1e:aa:54:a6:06:f3:bb:c4:d0:
07:2c:31:f4:c9:56:79:9f:57:62:e2:16:2f:73:1a:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C6:3B:F3:F3:31:5A:4C:6A:53:8C:91:5C:34:EF:19:B7:76:A9:11
X509v3 Authority Key Identifier:
keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:bb:25:66:8a:9a:2b:25:98:b1:b8:5b:84:9e:6e:7b:fa:34:
7f:14:98:22:9c:df:ff:f9:c1:39:62:2d:f1:3f:ec:53:80:d5:
33:3a:1b:5b:99:05:d4:cb:18:10:0e:50:b4:57:42:32:61:37:
14:33:8f:c9:3b:7f:65:1e:a0:2f:a3:2e:21:db:d8:33:a7:be:
3a:26:1b:a6:5a:72:d8:cf:46:6a:1c:62:50:2f:96:a7:67:7c:
f1:f1:cb:50:2a:bb:82:f0:36:d8:b1:c5:d8:7e:61:2a:85:0f:
03:60:9d:33:a5:08:06:fb:7e:a8:b3:9c:b2:90:08:04:91:74:
84:bd:9c:03:a4:82:0e:36:1d:70:58:f7:1e:e0:b5:89:0d:e3:
5d:00:1d:d5:24:be:d1:da:40:75:7a:f8:f1:1e:12:a1:0f:90:
eb:38:7a:d1:90:90:a0:1c:43:ff:ef:c3:f3:51:6b:83:4e:63:
e6:e0:19:eb:92:68:36:8c:e1:04:b5:8b:4c:3e:52:3d:cd:bb:
55:24:13:83:22:30:46:87:c7:36:a9:59:71:0a:46:ac:00:33:
00:79:fe:ce:1e:09:1d:fa:04:e1:1a:19:8c:a8:dd:80:c6:c6:
56:15:44:d0:3a:23:9f:c5:f9:72:96:a1:03:eb:90:ef:c3:72:
d2:e9:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:21:39 2025 by rpki-client