Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
File: qnARDTDVLoppaViLP2IUFrzfZEs.mft (raw, json)
Hash identifier: iXgFY/J5PkNpS9Ozsr0j7zcqARs+8wvgtBE9NUJVm5A=
Subject key identifier: 4A:BD:2D:D2:7B:B6:B9:30:64:03:29:18:04:EF:31:3B:54:A7:BB:0F
Authority key identifier: AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
Certificate issuer: /CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Certificate serial: 0199239FD08D8144F2168BAA5737D54D8F51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:01:40 +0000
Manifest this update: Sun 07 Sep 2025 10:01:40 +0000
Manifest next update: Mon 08 Sep 2025 10:01:40 +0000
Files and hashes: 1: AJtxlRhC18CSM9vDFJ0bVbhxN3Y.roa (hash: fBqbrVqiGsFpDlku7pjNXfyrY6CdOCxCpNnDRdqo0xM=)
2: hFPPHhOMQW_4XkqhjXSBTCjwlfs.roa (hash: 4m3xa6SKPtpxIGZbIvqkpRqzc55Dx3AnOKG3Nnp54nM=)
3: qnARDTDVLoppaViLP2IUFrzfZEs.crl (hash: X7SDd2RYfZtxaYxhww/e7JrRPZaKDaynfYWKBWANts0=)
4: z9pLNQSZNKFYtIVw9GxMfA_dzlc.roa (hash: ceBAqvnBw6p+b98UNKLSzZv2TyxRWLOoeu9xMf4knvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d0:8d:81:44:f2:16:8b:aa:57:37:d5:4d:8f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa70110d30d52e8a6969588b3f621416bcdf644b
Validity
Not Before: Sep 7 10:01:40 2025 GMT
Not After : Sep 8 10:01:40 2025 GMT
Subject: CN=4abd2dd27bb6b9306403291804ef313b54a7bb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:7c:84:a4:e7:f7:f0:77:d4:fe:88:ed:28:
1f:8a:5d:c2:f9:9d:4a:c4:a9:8d:c9:ae:17:b4:61:
23:73:6c:a8:70:67:2a:9e:83:83:66:3c:77:88:2e:
60:82:e8:00:eb:92:1e:b9:70:b1:40:dd:75:ac:3c:
b0:f7:e2:88:9b:d4:07:28:9d:9a:ba:7b:f9:76:a4:
42:0e:96:3a:d2:43:42:65:d9:0b:b3:8f:18:9b:37:
c0:12:e2:34:1d:45:39:f1:cb:0a:5e:51:f4:3a:7a:
2f:d1:20:93:f1:1f:69:2c:ab:a9:3f:4d:64:d5:15:
83:c7:44:b8:64:3f:55:c5:ab:85:d9:87:ac:ef:1d:
e7:5a:50:e8:0a:e8:dd:fd:a7:2f:14:e3:83:7a:72:
db:58:04:29:9e:4b:5e:4b:1f:35:77:bc:c2:24:9c:
14:ca:30:83:09:aa:b1:8b:c1:04:78:8f:1e:94:51:
83:67:cc:98:ae:f3:35:33:b8:df:c9:bb:d8:67:9c:
5d:e3:04:34:1b:14:b4:65:d3:89:c9:dd:e1:3e:f5:
ad:c3:50:12:a2:55:23:9a:92:d6:6b:a1:ac:d7:47:
36:77:c3:03:33:e3:bf:94:9e:90:0c:f2:46:8f:78:
57:df:50:a8:7c:a1:47:64:6d:7e:b2:4c:68:04:9a:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BD:2D:D2:7B:B6:B9:30:64:03:29:18:04:EF:31:3B:54:A7:BB:0F
X509v3 Authority Key Identifier:
keyid:AA:70:11:0D:30:D5:2E:8A:69:69:58:8B:3F:62:14:16:BC:DF:64:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnARDTDVLoppaViLP2IUFrzfZEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/fb7e67-5425-4c4f-b46a-8243aef6fe5a/1/qnARDTDVLoppaViLP2IUFrzfZEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f0:d3:1d:b7:d8:0c:e0:80:f6:db:e8:cc:d9:05:18:3a:a9:
df:1b:fe:e0:37:cd:5a:26:96:5a:e6:9f:9c:54:fe:43:2c:8e:
c2:2a:73:54:40:ef:fd:9f:b5:b0:d3:5d:b8:af:97:75:b4:dd:
72:fe:2a:97:6d:33:9c:7b:a4:07:90:9e:e5:40:0c:09:91:fd:
0c:4a:e3:0e:48:76:21:6d:b0:3d:b0:f4:86:64:45:f2:8a:aa:
a5:2a:0e:14:c5:83:95:69:77:6a:67:cb:df:6d:7f:df:74:d8:
6a:b0:ec:77:ac:06:c8:7d:9e:4f:61:80:5f:9b:c0:1a:bc:70:
de:cf:98:f3:dd:71:0f:17:30:ab:6e:98:fa:88:95:dc:0a:5d:
26:0d:a4:aa:16:67:7f:f3:3c:7a:f4:5b:ee:41:67:25:9e:ee:
4d:3a:1d:f6:37:0d:c1:33:6d:9f:cd:3b:af:81:7f:e9:29:55:
67:11:a3:23:14:e5:db:1a:75:de:f2:86:43:6c:f0:33:0b:71:
1c:94:81:ca:14:d4:ac:7c:e5:87:85:44:cd:23:49:9c:24:1a:
31:00:fa:48:15:d0:81:9c:0a:84:cc:aa:9e:58:b3:9d:f8:19:
52:ed:43:8b:ed:8b:46:e0:e3:f0:ea:c8:e5:11:0e:f5:12:10:
c0:36:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:32 2025 by rpki-client