Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
File: qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft (raw, json)
Hash identifier: F6IHfYd2HNNJjAGAToz8YGwgsFjGn/P3uMiuCRsM3r8=
Subject key identifier: DE:1F:76:1E:D5:FA:31:25:92:3B:9D:49:22:C5:10:B4:8D:25:6C:7C
Authority key identifier: A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
Certificate issuer: /CN=a9480cf18fd7859df9ad997940013a99b8dee374
Certificate serial: 019932A3CC0C0E564D1B142C2041FCEC1E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
Manifest number: 1678
Signing time: Wed 10 Sep 2025 08:00:19 +0000
Manifest this update: Wed 10 Sep 2025 08:00:19 +0000
Manifest next update: Thu 11 Sep 2025 08:00:19 +0000
Files and hashes: 1: 1-498Z7vh8fq99O9xScVcy6k-waA.roa (hash: 5X65ydohKF6qHxzYtE3Ac9naZbToLy0QuSQ9mwUuJtg=)
2: YCaC2D8L5OtL6F6domigXArqF2c.roa (hash: 3VcxChRnU4HThrx+KUbxRb/2EVyI8+silVMvgGd2Xn0=)
3: qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl (hash: yjrF1dBdEfSqcj/cKz/ySZoYU1fyY0tQpSdqeORzLlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:cc:0c:0e:56:4d:1b:14:2c:20:41:fc:ec:1e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9480cf18fd7859df9ad997940013a99b8dee374
Validity
Not Before: Sep 10 08:00:19 2025 GMT
Not After : Sep 11 08:00:19 2025 GMT
Subject: CN=de1f761ed5fa3125923b9d4922c510b48d256c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:6c:bf:44:8f:10:c1:2f:9a:44:3a:09:bb:
47:8e:18:c6:df:04:54:ef:d9:3a:a3:36:d1:a9:9b:
cd:fc:d5:2f:19:ff:f6:35:84:c8:d3:9a:7e:0a:1d:
b1:f6:59:68:25:8d:47:93:78:69:35:25:3b:b2:f7:
98:33:59:b6:9b:8f:b2:71:df:65:1f:a8:27:c3:d5:
67:18:4e:ff:fb:92:dd:3d:be:23:01:ae:1a:fa:6d:
a2:4b:61:a2:db:ea:88:4a:cb:54:18:43:d0:43:ab:
cc:37:57:d9:95:02:56:41:55:71:67:46:31:27:af:
17:96:b2:fa:86:be:58:6e:a5:cc:9b:9c:27:43:8e:
00:ce:d0:c6:8d:2e:53:c1:cf:00:65:46:5c:28:4b:
57:de:24:b7:8b:c4:44:65:e6:4d:c6:58:32:6e:e6:
18:2f:8c:fa:be:ab:71:1d:96:e1:9b:4c:11:38:f4:
b9:3e:f5:8e:6f:8c:e9:52:4f:e1:04:46:25:8d:b5:
cc:c4:91:58:4c:19:36:4e:2c:da:88:7e:de:00:0b:
fd:de:69:04:ec:71:ac:f2:52:46:e7:f8:75:fe:1a:
68:7f:1e:62:ac:eb:70:5d:11:7a:59:66:aa:fd:a5:
f9:02:f0:de:d1:80:f8:63:b2:32:83:ab:42:3f:f2:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1F:76:1E:D5:FA:31:25:92:3B:9D:49:22:C5:10:B4:8D:25:6C:7C
X509v3 Authority Key Identifier:
keyid:A9:48:0C:F1:8F:D7:85:9D:F9:AD:99:79:40:01:3A:99:B8:DE:E3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUgM8Y_XhZ35rZl5QAE6mbje43Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a39138-f4f1-4259-a4b9-acd87c546048/1/qUgM8Y_XhZ35rZl5QAE6mbje43Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ce:e7:f6:07:c3:3b:3e:37:aa:b3:dd:ac:15:34:50:80:40:
05:93:ab:63:cc:c7:1a:45:98:d0:d8:2c:11:5c:92:26:f6:97:
a0:eb:92:24:ab:a3:36:d3:70:51:38:fd:c4:52:f3:94:29:39:
b4:cb:86:d1:77:7a:a5:27:72:d4:54:cb:c7:19:97:91:55:16:
f1:e1:66:e5:04:57:44:04:0d:cd:06:b9:77:0e:5a:44:b1:d4:
b5:ab:21:76:f2:ca:0b:f4:a6:6f:aa:1b:b9:f0:e8:51:ad:81:
d7:74:2b:7a:f1:19:96:4a:af:0d:a3:e3:35:d2:0f:04:4d:00:
16:4a:e7:30:5f:35:f3:47:21:ee:bb:11:13:ac:c2:9e:b3:2a:
20:6b:0a:4d:7e:01:9b:e9:f4:a9:dc:13:51:52:e0:25:db:a1:
32:dc:23:ef:c2:0e:ca:86:5b:ba:58:66:0e:d0:33:7b:57:2e:
84:e3:57:28:59:27:f5:07:03:40:72:ad:2d:dc:73:8a:7e:87:
09:2e:d0:af:e8:fa:c3:b2:0a:f8:a6:56:4d:77:01:83:82:0a:
e0:16:3a:0a:31:6a:7a:4e:08:22:89:52:cc:36:9d:6e:43:a4:
38:e9:e0:8c:62:25:71:b0:94:ce:f0:6d:4e:84:d8:60:6f:d6:
37:5f:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:05:38 2025 by rpki-client