Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json)
Hash identifier: JWYCuXgvqp7dpYj24NcGQ5bEfL1M+agQhzcVzP5k188=
Subject key identifier: 99:2A:D4:9B:D4:CE:D5:2F:89:7E:B8:05:D9:B9:B4:47:C1:14:B2:6F
Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c
Certificate serial: 01993236977E82CD61A14A9EBEC76A3D798A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 06:01:02 +0000
Manifest this update: Wed 10 Sep 2025 06:01:02 +0000
Manifest next update: Thu 11 Sep 2025 06:01:02 +0000
Files and hashes: 1: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: PlkeMg37xdBnS9x7MCCbzaGSGhhlYZ5eNBVzYpX4ego=)
2: _k0OxqJ8CNa2nq6tzt4bUNoG6Sg.roa (hash: TBT+FD53tM1tzuAflJ2lZOj8tykRjtKXY5Xc3IXyQAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:97:7e:82:cd:61:a1:4a:9e:be:c7:6a:3d:79:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c
Validity
Not Before: Sep 10 06:01:02 2025 GMT
Not After : Sep 11 06:01:02 2025 GMT
Subject: CN=992ad49bd4ced52f897eb805d9b9b447c114b26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:9d:27:be:1f:d8:2c:1d:02:3f:57:36:94:
e0:41:91:e9:6d:e1:94:6c:12:61:d7:65:5b:e5:b2:
dd:0b:7d:47:45:cc:c7:11:2e:a1:1d:24:1b:52:3a:
22:55:9d:0d:16:5c:31:e5:36:f1:13:82:56:6d:e1:
2d:b5:53:d9:ab:11:ee:e5:d5:21:b9:5a:4e:e3:d5:
dc:3e:71:fe:70:e6:3b:78:76:62:0a:ce:69:1d:63:
48:45:be:70:46:df:cc:3b:08:0c:44:67:f7:e4:bd:
59:fd:a9:c6:e8:fa:93:b4:e4:02:1e:5f:e0:91:34:
85:ca:fd:14:e9:62:5d:e7:84:bb:17:57:22:c3:54:
b8:d7:3e:5f:5e:34:9f:1f:24:8d:76:71:c2:0a:1c:
70:53:cb:2c:02:d7:11:9e:c1:b9:aa:91:a0:98:d3:
53:41:04:f1:14:37:72:5c:33:87:94:3c:5e:fb:e2:
51:19:97:68:e0:98:c3:48:78:2d:8f:0e:60:1d:13:
92:fe:86:3e:7f:f1:80:4a:f0:6d:17:56:b9:22:9e:
35:c5:7e:71:7c:84:02:96:18:67:03:14:8d:92:c5:
44:6a:14:a3:59:f1:0b:21:ca:02:48:f8:e9:39:a4:
5a:53:f3:80:84:5f:d3:2f:65:ff:2e:91:f2:0d:7f:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2A:D4:9B:D4:CE:D5:2F:89:7E:B8:05:D9:B9:B4:47:C1:14:B2:6F
X509v3 Authority Key Identifier:
keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:80:1e:93:e9:1f:cd:61:c9:6d:5e:56:d4:7a:03:ba:32:35:
70:2c:81:9a:a4:16:f2:f7:75:e2:af:a4:06:c2:9d:e8:30:3a:
46:6d:36:ba:18:cd:6e:fc:1f:88:05:92:62:36:9f:85:2b:f9:
75:1b:c6:8e:24:ba:ad:85:de:86:af:56:6c:0c:38:d2:10:88:
4d:4b:31:51:a4:3a:70:c5:49:b4:ba:97:02:ab:80:87:87:84:
59:da:ee:1c:21:0a:89:85:6e:03:3e:b5:29:46:e7:b9:12:91:
53:a7:f2:ec:d3:dd:3f:0a:fe:ee:7b:3c:5a:c4:6a:50:32:90:
57:e4:54:03:f9:95:db:1b:9e:73:8e:ad:66:5e:67:b3:df:aa:
cc:e3:45:49:1b:e8:0f:8a:ba:05:3e:76:33:df:d6:88:27:28:
93:6f:96:fa:ac:86:a8:43:dc:be:54:bf:dc:71:1d:33:ba:7d:
80:06:e7:36:6e:e2:76:17:e5:7c:d0:60:1b:20:da:96:86:5c:
1c:17:5e:67:b5:5c:b6:57:e9:c4:8d:d8:af:9d:55:ec:6e:2b:
e3:d6:0d:fa:bf:f7:17:04:e6:a8:80:88:bd:60:26:6f:e6:ae:
a9:27:79:5a:c9:9b:ae:05:0b:c9:bb:1d:6e:fd:82:c0:c0:e2:
22:40:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:14:05 2025 by rpki-client