Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
File: qnp9oeIjsYMKC5G11hyDrSYMERs.mft (raw, json)
Hash identifier: ruep9vR7qozfkL7Z+BfN2RfRtsrutZaqchnLf0kcj1c=
Subject key identifier: D2:67:39:1E:0F:3E:98:6A:63:65:88:6B:29:C9:26:3D:C7:A9:D0:A0
Authority key identifier: AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
Certificate issuer: /CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Certificate serial: 019921E7CCDDC44FE9E4218B6CAA23B38234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
Manifest number: 123A
Signing time: Sun 07 Sep 2025 02:01:03 +0000
Manifest this update: Sun 07 Sep 2025 02:01:03 +0000
Manifest next update: Mon 08 Sep 2025 02:01:03 +0000
Files and hashes: 1: B2uv5t_GiMUr8rM-r5uKbUdnEoQ.roa (hash: YpVmIqGmMDZopEuL6KgYwvjCxwixGKfs5u+qFRIV/jw=)
2: qnp9oeIjsYMKC5G11hyDrSYMERs.crl (hash: 0Y2ldW0nwalMICQ88gv5lziFgWGYTJw5FJAiCEYUXlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:cc:dd:c4:4f:e9:e4:21:8b:6c:aa:23:b3:82:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7a7da1e223b1830a0b91b5d61c83ad260c111b
Validity
Not Before: Sep 7 02:01:03 2025 GMT
Not After : Sep 8 02:01:03 2025 GMT
Subject: CN=d267391e0f3e986a6365886b29c9263dc7a9d0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:d6:86:75:38:6c:44:49:bb:32:ff:84:7f:
89:76:06:fe:9b:56:d0:53:cc:da:9e:bf:52:9b:d5:
7c:bd:a9:da:08:5a:aa:25:0a:ca:cb:f5:84:70:c7:
44:66:f8:36:b6:28:de:9b:12:ed:91:71:f8:c1:c6:
ee:ef:79:1a:b7:76:c5:6e:cc:cb:65:ba:0b:4d:94:
56:33:2a:42:3b:c3:a9:ae:a9:63:4e:be:2e:aa:4c:
74:79:29:54:fd:8f:63:0c:4c:3f:d2:e9:1b:1c:71:
13:c6:dd:ff:65:c2:f2:40:0d:3d:85:f8:3e:bd:02:
df:eb:c5:be:3b:d0:16:f9:66:ad:e8:d2:be:12:5c:
42:5c:4f:c2:c5:53:49:6d:34:a8:56:89:d6:ba:56:
96:49:66:c7:0e:18:21:08:2a:cd:c5:88:b8:74:ac:
bb:2d:80:38:02:73:ca:02:88:ac:ae:64:0a:cf:57:
ec:05:1a:e8:7a:8d:e8:8b:1e:c1:bc:03:ed:1c:1b:
d7:2b:da:de:dd:bf:82:9f:22:db:ea:f8:f6:7e:7e:
55:a0:fb:41:22:a9:e4:67:a9:23:ff:e0:61:0b:2e:
7a:bd:a9:6a:56:89:7c:bd:34:97:5f:56:89:77:fc:
5a:a0:3d:ca:4b:87:a7:23:39:ba:9a:bb:24:34:a2:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:39:1E:0F:3E:98:6A:63:65:88:6B:29:C9:26:3D:C7:A9:D0:A0
X509v3 Authority Key Identifier:
keyid:AA:7A:7D:A1:E2:23:B1:83:0A:0B:91:B5:D6:1C:83:AD:26:0C:11:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnp9oeIjsYMKC5G11hyDrSYMERs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e57fb1-2d5a-4661-801d-0eb8f37a0179/1/qnp9oeIjsYMKC5G11hyDrSYMERs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:91:84:22:e2:a3:eb:15:30:5a:d4:c4:74:5a:e8:9a:65:12:
01:53:c1:0a:62:45:df:fb:05:d9:ca:62:58:04:11:e5:f8:20:
e5:7e:a9:a9:60:7c:77:9d:48:ba:5d:1a:91:6c:75:3c:8f:79:
0e:60:60:d3:2c:c6:9a:eb:34:9a:3d:27:18:d9:80:87:60:7b:
7b:0e:2d:2b:2c:d6:d7:c9:39:58:56:58:f7:64:37:30:b7:11:
88:00:ff:ae:10:77:cb:0e:8e:e3:b4:16:50:7d:2f:9e:d9:d5:
81:8e:cf:de:4e:03:35:5d:b0:7a:1e:fa:85:ad:6e:e4:30:41:
73:1c:c1:35:eb:ff:f3:06:69:20:ec:68:8f:e0:b8:ce:9b:94:
a5:a1:d9:1c:79:bf:9f:c5:29:87:ca:bd:83:c9:ae:b5:58:56:
9f:a0:0d:ba:94:b2:e4:14:61:d3:7b:70:93:66:37:34:16:86:
7d:9f:82:c2:4b:6f:e5:a0:4c:6d:2c:a7:97:e9:cf:43:47:d7:
e3:7b:55:ed:51:21:76:c4:01:f9:86:40:9e:0f:4f:0e:4b:f9:
fd:0a:f7:50:a2:55:6c:ca:f7:27:e6:73:73:7a:57:6d:58:6e:
69:72:df:89:d6:27:9f:9f:dd:57:8e:bd:fc:56:ab:17:2c:d7:
3b:cf:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:02 2025 by rpki-client