Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: 0xrh0v5wsRRe5nO3NCSTiEfRe04WSeXJjJhtGVGNPFo=
Subject key identifier: BB:DC:73:6B:D0:B3:A2:05:13:06:93:66:18:45:CA:2F:0A:32:DD:80
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 019958682810AAF15BE4534F839C46082F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 074D
Signing time: Wed 17 Sep 2025 16:00:44 +0000
Manifest this update: Wed 17 Sep 2025 16:00:44 +0000
Manifest next update: Thu 18 Sep 2025 16:00:44 +0000
Files and hashes: 1: EVfs3Ty5us2kONM9lNbKxeOpQy4.roa (hash: XNAy20rJW1bN/SCZtyAydEWkC3qMnBorsPnV2qCqZ6A=)
2: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: RlSqF5OIM59nBV7kb1TY7F8UZWUE4W+s65fMSa+M4k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 15:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:58:68:28:10:aa:f1:5b:e4:53:4f:83:9c:46:08:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Sep 17 16:00:44 2025 GMT
Not After : Sep 18 16:00:44 2025 GMT
Subject: CN=bbdc736bd0b3a205130693661845ca2f0a32dd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:98:d7:30:ca:fe:6d:57:c6:dd:b3:29:8e:
98:70:94:75:ba:8b:36:8f:9a:0d:54:15:52:1c:26:
e3:cb:eb:4f:06:f8:59:46:49:4f:f7:5b:d7:26:72:
6a:85:3f:17:72:16:a3:2d:05:64:7b:ac:ea:b1:ce:
3b:f8:7c:07:25:c6:34:a4:3f:91:21:20:7d:fd:1a:
a4:3f:a9:23:3a:14:70:d1:b6:67:13:1c:cc:84:5e:
d7:1c:c3:32:4b:26:96:47:8b:98:e1:9c:59:4d:a0:
2f:c1:11:c2:24:10:36:71:3d:d1:83:d1:f1:bc:4c:
e4:56:f8:e4:19:c8:21:a9:9b:fa:02:1e:ad:e5:d9:
48:0b:c7:ba:5d:3d:15:b2:60:18:50:d6:53:ba:51:
67:f8:25:07:0c:b0:3f:f7:20:17:c0:92:6d:97:cf:
2e:18:c5:34:c8:66:3b:0b:f3:6e:c0:03:57:7a:b3:
70:81:ea:1c:e6:26:bf:3b:c7:0a:c9:a2:07:b6:71:
cd:d5:e3:f0:ea:39:bf:0b:23:94:f4:6b:f4:b1:95:
a3:89:5c:f6:cf:11:fe:7e:39:f4:67:bd:1e:89:af:
96:5c:67:15:07:3b:d8:83:88:3a:47:74:bc:07:93:
37:87:11:fc:e5:a1:70:93:8c:37:67:6e:fc:62:ec:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DC:73:6B:D0:B3:A2:05:13:06:93:66:18:45:CA:2F:0A:32:DD:80
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:75:ca:37:d9:a6:0f:1d:ff:ff:14:cf:9c:32:7b:dd:40:55:
5a:64:5e:59:a9:7e:bb:cd:0b:81:7c:e3:42:19:0b:d9:f8:22:
ce:ba:88:ca:69:41:78:18:76:bc:5d:09:41:05:07:fd:f3:20:
40:1e:67:eb:a1:2c:05:d2:c3:1f:f8:7c:d9:82:e9:55:e7:4f:
77:1f:f6:98:d4:a8:d5:c9:2e:4e:2d:e4:64:cd:1a:b0:7e:f9:
9a:24:fd:da:e8:d9:ae:c7:3b:0e:b6:37:58:7f:05:2f:91:f6:
ec:0d:05:84:59:90:88:c7:b0:2c:77:8b:ab:94:0d:61:65:76:
a4:83:e4:1b:38:8e:d7:e1:2b:ab:2c:9c:4b:32:21:9e:7e:28:
05:96:66:29:d5:92:00:c0:5f:df:09:cd:e7:5d:77:c3:4e:87:
00:43:c6:56:dd:4e:79:6e:47:5c:d4:f1:f3:b3:1b:12:ad:f6:
c7:d2:79:0d:03:2e:68:99:55:30:6e:82:6c:86:55:bb:ea:2a:
07:66:ae:12:99:b2:43:b7:fc:16:d7:fd:bc:fb:41:4c:d0:ca:
ba:cb:13:07:53:1b:81:59:da:33:cb:2c:9f:c8:f3:fb:da:14:
35:14:62:94:39:b1:f6:0b:ab:c8:dc:f8:9f:65:9f:db:87:59:
32:c8:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 19:09:47 2025 by rpki-client