Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json)
Hash identifier: xmlSHpHXSOURUKivlJqS++2+mP8TIOYjBuAsUo1U9C0=
Subject key identifier: 7D:7E:8D:C6:6C:77:F9:97:AE:D7:DC:C9:3D:8D:73:98:34:3D:EE:77
Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Certificate serial: 019923D5D023A55F24346874AD1F43E7D38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 11:00:38 +0000
Manifest this update: Sun 07 Sep 2025 11:00:38 +0000
Manifest next update: Mon 08 Sep 2025 11:00:38 +0000
Files and hashes: 1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=)
2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=)
3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: UAO3P0yU8jCYAgsoh/x9od5lA0mFDHoXGhi6/y7clFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:d0:23:a5:5f:24:34:68:74:ad:1f:43:e7:d3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0
Validity
Not Before: Sep 7 11:00:38 2025 GMT
Not After : Sep 8 11:00:38 2025 GMT
Subject: CN=7d7e8dc66c77f997aed7dcc93d8d7398343dee77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:63:0e:04:60:7e:de:72:26:9a:74:0f:c7:
54:a0:bd:60:71:e3:97:db:f1:61:f8:d1:ee:17:0a:
82:0e:78:f1:f8:42:65:71:e5:5b:99:d6:a4:e9:65:
db:85:40:6d:c1:01:b5:af:62:8b:bb:a9:5a:7e:e6:
2a:aa:d3:9d:ff:4b:18:0e:33:2f:08:48:6a:b8:e7:
6f:e9:01:bd:73:07:9d:e5:29:e9:df:e3:00:68:88:
ea:cb:88:c6:62:15:77:13:9f:9a:e2:06:d8:99:80:
e0:5c:68:51:b8:cf:60:17:ad:8f:31:2b:e4:70:b4:
5d:15:2a:fc:52:30:e1:45:6d:1d:53:c1:9c:dc:47:
c0:d6:85:2c:5e:e1:ff:8b:53:cc:2c:9c:d9:d3:16:
4d:6e:1e:8e:d0:ad:75:86:ea:a8:d7:2a:3d:62:fc:
f8:d6:7c:29:f6:d3:c9:7e:64:21:ef:83:d7:9c:5b:
50:df:0a:9c:6b:b7:10:55:24:64:47:73:db:c4:3c:
55:75:df:21:29:56:f2:89:cd:98:dd:fa:54:83:52:
d4:b9:0e:e8:7c:d7:e0:a0:e2:dd:cc:28:92:fe:6d:
22:7e:fc:26:1c:aa:79:96:ec:34:27:1c:39:16:d9:
f5:2e:7c:b7:1b:a2:a7:e5:84:94:75:7b:5a:a7:d7:
6f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7E:8D:C6:6C:77:F9:97:AE:D7:DC:C9:3D:8D:73:98:34:3D:EE:77
X509v3 Authority Key Identifier:
keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:09:1a:5d:32:da:84:24:55:d9:e1:eb:8c:8e:8a:ad:79:63:
9b:39:cc:20:2e:91:93:92:2d:59:45:18:d6:b9:31:f9:79:46:
d2:59:32:6e:63:9c:7e:ae:bf:21:11:5c:d5:85:ba:2a:bb:13:
ff:48:b0:66:75:96:b8:71:c1:91:a2:c6:83:6a:56:ae:5b:ed:
cd:4a:24:bf:8a:30:3e:da:3d:cc:15:69:c6:ca:2d:1b:82:ee:
c8:b0:c2:7a:87:e7:eb:80:ab:92:d6:48:ed:bb:0c:97:f6:98:
e3:d1:5b:68:f7:ea:f1:2d:42:2a:b3:62:2f:28:b7:9d:09:f4:
60:ba:1c:94:e2:f6:45:b5:ed:38:e6:34:06:2f:33:4f:5d:48:
fd:44:2e:4a:d4:ef:ed:fc:1d:d0:23:48:5a:89:42:a9:41:76:
6a:17:f0:70:1d:18:3b:63:51:c5:c9:ec:da:3e:0d:4b:07:df:
f7:39:a4:93:4f:73:ed:ce:46:07:c5:99:20:9f:86:f9:4c:99:
f9:bb:c7:08:87:0c:28:22:8d:36:2d:dd:e5:28:fd:45:09:57:
2c:eb:e1:bc:be:fb:03:64:6a:1c:11:6b:1d:d4:e7:b4:01:e0:
72:36:b5:08:70:dd:03:72:39:f7:80:1f:0b:18:36:b4:09:60:
ba:14:06:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:44 2025 by rpki-client