Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
File: qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json)
Hash identifier: gXYDdkrol8FpKL2GY5pb7lVT2UKh0xR7hsKzAsddyII=
Subject key identifier: 8D:CC:45:17:A8:36:38:F5:0B:37:74:EC:0D:DA:2A:09:3D:D1:20:D9
Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
Certificate issuer: /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Certificate serial: 0199240D74F72DDAEED03B9B09FFED088B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
Manifest number: 0BCD
Signing time: Sun 07 Sep 2025 12:01:25 +0000
Manifest this update: Sun 07 Sep 2025 12:01:25 +0000
Manifest next update: Mon 08 Sep 2025 12:01:25 +0000
Files and hashes: 1: FHgmJVzT42MAfIzapVC9e2NA_iY.roa (hash: ZFuf9CA7YgoKL9WKUlfIU4bCNAlr9XJKo81l94myN/w=)
2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: ARtMiBpnAhVInl4gMZQFuo4prt4IIdjFS8CFlGu6Wsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:74:f7:2d:da:ee:d0:3b:9b:09:ff:ed:08:8b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5
Validity
Not Before: Sep 7 12:01:25 2025 GMT
Not After : Sep 8 12:01:25 2025 GMT
Subject: CN=8dcc4517a83638f50b3774ec0dda2a093dd120d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:d9:51:7b:a2:9b:2b:db:c4:1c:24:af:77:
1e:73:98:cc:ae:db:e7:12:7c:4e:db:fd:e1:6d:9b:
bb:f3:84:b1:db:a9:f7:c3:5e:e6:4b:39:e3:a5:94:
48:69:9d:93:9f:74:52:e9:63:ed:b8:22:4e:7f:30:
c7:83:a9:20:31:4a:f8:ea:30:1d:7c:68:74:dd:2f:
00:bd:c5:7c:2a:4a:d4:8a:37:f8:7d:37:31:c9:45:
09:ce:54:8a:39:ef:77:7f:ae:a2:aa:22:b5:49:62:
a4:80:d1:35:23:4f:48:5b:37:ef:a7:cc:da:a9:3f:
b0:4c:c9:09:cc:62:e9:f4:4d:64:69:31:d3:68:55:
55:57:eb:16:c3:cd:de:5f:fa:a9:70:ad:0d:f5:7e:
ff:42:c7:5a:f9:d5:13:d4:d5:e5:14:ab:79:26:e7:
b1:67:a3:55:33:58:92:bd:7e:45:0f:54:63:22:04:
eb:b7:ff:60:4f:6b:78:9e:e5:df:e8:23:8e:c5:50:
4b:b1:a7:e2:a8:0d:4d:f8:95:af:00:1b:fe:10:93:
26:03:b4:59:9e:72:84:27:23:c8:44:11:e1:2f:f6:
1a:5c:88:75:9c:cb:50:3a:97:16:2e:f0:b1:b0:73:
06:56:9f:9b:cc:97:f3:6a:89:62:d4:e0:68:a1:4c:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CC:45:17:A8:36:38:F5:0B:37:74:EC:0D:DA:2A:09:3D:D1:20:D9
X509v3 Authority Key Identifier:
keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:68:34:5a:f9:ac:77:ce:fd:7f:7b:ea:5a:8c:1b:5c:a1:86:
55:90:eb:33:6a:83:34:81:af:5c:29:1b:f9:52:43:19:0a:e5:
84:4c:9b:c6:fc:69:6b:d3:19:6c:45:41:c2:02:5c:b8:a3:d5:
1b:88:de:25:cd:5e:86:e1:ec:3c:d2:c7:23:8e:c8:c7:49:26:
45:6d:10:22:ca:45:23:9c:77:4f:69:07:ce:a1:74:86:61:17:
28:50:1f:3d:06:a5:4c:e5:f4:86:d9:47:ea:8a:f5:9b:f2:ed:
10:9b:c1:39:17:81:ce:b5:33:7a:e1:ad:63:ad:e7:a6:d1:75:
6f:9b:6b:e5:fe:a1:78:08:06:bf:99:0a:89:2d:d2:f7:68:be:
e0:a6:1d:7b:46:7a:93:28:81:62:1b:ef:63:32:f8:d7:3e:83:
b4:c7:92:d1:f0:e9:a5:8b:d2:d3:51:38:ce:57:74:a2:11:36:
4c:2c:84:6a:26:bf:47:04:ec:3f:31:3f:cf:a4:c2:c6:38:ef:
f9:30:c4:a3:28:12:64:f8:2f:50:70:f5:53:1e:5c:5d:b6:1a:
16:c1:18:9c:2b:ac:87:da:9f:83:0e:ad:7b:68:b3:3f:62:2f:
6b:fc:22:04:4f:f6:ec:03:2f:30:09:88:af:de:b7:e5:f4:2a:
6e:36:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:31 2025 by rpki-client