Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: 1QhL+AbbU1xFqOpFQ+v45DQPWHh7GTBsuQdICtqFvXM=
Subject key identifier: 1A:4E:88:58:D2:CC:93:E3:3C:24:76:47:E4:5D:B6:E6:D3:84:9B:B1
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 01992FA32E17D7E88862E0C17D24BA63A12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 167C
Signing time: Tue 09 Sep 2025 18:00:47 +0000
Manifest this update: Tue 09 Sep 2025 18:00:47 +0000
Manifest next update: Wed 10 Sep 2025 18:00:47 +0000
Files and hashes: 1: NrBghBDxVUP3b8K-s4QfPajtoEw.roa (hash: PXmrD91Lu77kd9R7RmMEPIR9q62nZX3KSQVZITYjO7o=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: c17Pdatl2Zwu3gRA5M2t0P4qrQIE8e49eNpsEmojwqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:a3:2e:17:d7:e8:88:62:e0:c1:7d:24:ba:63:a1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Sep 9 18:00:47 2025 GMT
Not After : Sep 10 18:00:47 2025 GMT
Subject: CN=1a4e8858d2cc93e33c247647e45db6e6d3849bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:e0:af:ae:3b:54:90:26:72:02:62:5e:80:
d7:af:9e:73:a4:60:16:65:47:91:fb:ca:6f:00:c7:
f1:49:5f:d0:90:12:23:74:12:a0:25:52:89:f5:29:
fe:b5:2c:a3:83:ce:e2:c4:2f:e9:f7:1d:e3:29:73:
f5:f6:e0:7b:3c:b1:0a:c1:d3:f6:1d:cb:72:e9:0c:
b5:33:d7:1c:21:dd:02:fc:5c:2f:80:01:eb:c2:a7:
96:28:3a:47:19:30:a9:4b:59:0c:66:69:5c:a8:39:
ce:70:b9:47:e1:e7:6c:6c:42:0d:54:d4:6f:7f:ca:
85:98:75:d0:e8:03:16:f8:9a:cc:a2:24:db:9a:68:
e5:8a:7d:b9:fc:02:13:02:c6:f6:9e:45:48:eb:f8:
cd:47:54:2a:9a:8f:b6:17:24:2e:4d:df:a4:55:62:
f3:72:e2:7a:f2:f2:66:ee:58:df:10:9f:c3:2a:ee:
89:fd:c4:0f:aa:5f:95:df:6a:6b:d0:36:33:65:0a:
32:ea:60:67:e2:39:9d:02:62:12:05:82:44:f6:6d:
23:8c:88:fd:26:a1:3e:2f:f7:47:eb:ad:b5:e3:98:
a4:5f:22:62:27:6d:0d:e4:d2:2d:6b:32:8e:bc:9e:
76:51:46:b2:43:3d:92:76:d9:45:9b:28:57:b0:79:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4E:88:58:D2:CC:93:E3:3C:24:76:47:E4:5D:B6:E6:D3:84:9B:B1
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8d:1a:ce:6f:63:fc:51:22:44:7e:78:5c:21:ce:03:6f:e4:
10:64:85:ed:af:b7:b1:19:3e:80:dc:05:97:fc:cd:7b:65:4f:
d8:73:8f:ba:e1:99:1f:89:5b:a5:8e:fa:04:58:0f:85:fb:67:
9e:c4:45:a5:bf:35:9e:36:14:2c:7b:e8:fd:bf:9a:e1:fa:a3:
1d:53:79:dc:f1:af:39:d6:57:cc:7b:8b:48:04:89:75:8d:7c:
58:bc:af:67:28:75:81:89:0c:d4:61:66:f6:78:05:05:54:c8:
a0:82:c4:85:72:58:a9:c8:68:ba:03:43:95:f2:a7:43:2a:07:
81:bb:b6:b1:08:99:75:58:78:42:ba:ba:f2:fd:cf:20:1f:a6:
27:e5:53:97:63:4f:9a:9c:5f:6f:fc:af:10:70:81:12:3b:57:
03:eb:44:3a:f9:da:32:86:b1:c2:44:b6:d1:42:28:12:30:d6:
f9:fd:c3:18:d9:95:86:8c:68:e6:6c:9b:df:d9:76:1d:1d:a4:
28:50:c7:71:23:8a:76:7f:00:f8:42:08:8d:f9:eb:11:7d:06:
4a:f2:4e:43:04:97:30:46:86:b8:f5:bb:d7:ca:50:22:4b:52:
95:3f:d7:47:dc:db:4e:19:ad:43:d2:f8:1e:45:06:f4:3b:f3:
ad:78:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 23:56:41 2025 by rpki-client