Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: YMS/jzqUzN/hTfi64xIxUEplgcdPXcYSt3mS649w8Kk=
Subject key identifier: 54:AC:AA:F7:4F:BC:AF:38:AF:1D:82:BA:EE:72:28:2F:38:0E:C9:E4
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 019921B07AEDF84C97832BDBFF7D28CE3318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 147B
Signing time: Sun 07 Sep 2025 01:00:37 +0000
Manifest this update: Sun 07 Sep 2025 01:00:37 +0000
Manifest next update: Mon 08 Sep 2025 01:00:37 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: QEdIvpS1+m3BacRf8EDUPypMCnd4oUhIThErgtG842o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:7a:ed:f8:4c:97:83:2b:db:ff:7d:28:ce:33:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Sep 7 01:00:37 2025 GMT
Not After : Sep 8 01:00:37 2025 GMT
Subject: CN=54acaaf74fbcaf38af1d82baee72282f380ec9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:81:06:d6:57:1e:a6:1e:9a:3f:6c:2e:bb:
3f:6e:ff:6c:88:ed:b6:2f:5e:b7:b2:66:5c:d2:6a:
44:f6:18:c6:f2:89:52:64:09:4b:f8:2f:f2:a6:aa:
98:8b:57:c8:ec:84:50:e6:cc:d9:b2:d6:4d:52:75:
ce:cd:37:c3:24:35:29:00:9f:6d:3f:9f:f8:49:d1:
98:ff:15:e2:1b:94:ba:fb:71:61:6e:a3:90:6c:63:
66:06:da:84:9f:90:e9:84:0e:9d:f6:c6:79:0a:aa:
f9:a0:59:55:ae:2a:0e:98:71:52:2e:e8:41:68:c4:
1c:cb:8b:3c:68:ac:07:67:2a:7c:93:3b:59:65:ff:
ce:06:5b:8d:07:c5:2d:27:76:a1:dd:0a:ae:c9:93:
51:5d:35:1a:1b:06:e7:07:fa:bf:58:c1:15:e1:f1:
f1:01:d0:13:d7:03:9a:c6:9c:13:7c:c0:69:2f:d4:
df:57:f3:89:b9:95:ad:e0:94:61:b9:67:96:2a:5d:
47:64:8e:ad:5d:43:e5:87:cd:76:84:06:58:41:38:
54:1a:4b:eb:bb:b6:61:49:d2:0c:9e:2b:5f:b6:9e:
36:70:13:6f:61:a8:f6:3a:e6:f0:50:4e:73:7b:c8:
21:c3:ed:b8:77:5c:ef:f5:32:e3:12:d6:9b:c5:dd:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AC:AA:F7:4F:BC:AF:38:AF:1D:82:BA:EE:72:28:2F:38:0E:C9:E4
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:cb:5f:ce:98:80:dc:a1:ab:03:4a:52:d3:90:12:dd:4c:63:
38:98:62:47:ae:ed:41:ee:04:f5:27:a1:69:3f:99:d2:67:ce:
1f:ed:0e:1d:b5:43:11:69:aa:42:10:29:a1:c3:47:21:54:4e:
31:78:8a:ce:42:f3:4d:bf:1c:f8:b4:fc:60:ab:af:21:04:2d:
3f:ee:9d:1a:be:ec:c2:96:72:f2:2c:39:ed:fd:29:24:16:a9:
41:ae:75:93:89:8e:c9:ce:ad:74:90:ae:2c:e8:02:1c:fa:34:
03:5d:ce:c0:37:23:5d:0c:b6:92:8d:73:48:93:51:48:82:24:
90:df:c1:d5:3f:97:fc:c9:d8:e9:2e:53:d2:e2:eb:0b:c1:10:
0d:80:5a:85:01:89:94:7a:fb:22:8d:de:82:a6:e9:28:18:52:
ed:c2:6d:df:50:18:22:a8:f5:b6:2a:9d:1c:27:69:8e:4f:c0:
15:53:0c:79:6a:d3:b3:5d:9e:ff:a9:f5:83:48:c0:8f:1d:28:
98:4a:2b:ed:14:93:1f:8c:b2:7b:13:64:21:25:43:12:c8:2a:
21:cb:3a:41:20:4a:da:06:fe:b3:03:f7:f6:4c:04:2e:06:8e:
cb:96:ba:60:ad:f3:17:a4:a7:d6:25:56:10:dc:6c:62:ae:ac:
3b:11:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 04:54:57 2025 by rpki-client