
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: Xji0StcmuALtJ3Fn1JUNBtk5yAvzyY97m1GnnFjvmDA=
Subject key identifier: 80:8B:38:27:FB:DE:FA:7E:D7:66:16:9E:48:8A:A9:D0:E6:40:DB:93
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 019931246D73660F39529CCF7186CBDF6C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 01:01:34 +0000
Manifest this update: Wed 10 Sep 2025 01:01:34 +0000
Manifest next update: Thu 11 Sep 2025 01:01:34 +0000
Files and hashes: 1: USQ6h1BmGX_5l6r9JsziO1Ui1Vw.roa (hash: W3xrS1zgc7QMM+ux8ilDAtn6lUWxhEYKoHwrzSB4Kb8=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: ZOFPKHzSKG/atH5aljh63ihBm7OCeoD9Y3hv/NXlcHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:24:6d:73:66:0f:39:52:9c:cf:71:86:cb:df:6c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Sep 10 01:01:34 2025 GMT
Not After : Sep 11 01:01:34 2025 GMT
Subject: CN=808b3827fbdefa7ed766169e488aa9d0e640db93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7d:cc:37:5c:fd:ae:83:be:23:e1:f6:0c:c9:
fc:59:28:4d:ac:93:b4:0e:2a:3a:ee:88:23:5f:71:
d0:85:0c:80:cd:6b:f9:cc:90:75:44:80:78:1d:80:
71:a2:89:86:af:2f:67:8b:2a:9c:07:6e:f2:16:24:
55:02:78:90:75:79:35:cc:06:b5:ac:0f:88:2f:0e:
87:69:59:b6:e8:9b:34:97:8a:a8:91:c3:8a:af:f7:
44:58:5b:8a:c8:f9:ea:c5:4d:31:c3:4e:1a:57:c8:
ad:09:b0:4d:22:66:54:2c:8f:03:64:7d:b2:fa:8f:
d3:a9:77:45:58:69:99:b6:a5:f1:14:99:ec:bd:8b:
49:75:4b:4e:b5:07:15:07:88:39:bb:bf:ee:cd:fe:
99:38:b8:ac:c0:35:a6:f9:7f:61:d0:b4:59:c3:bd:
50:8c:56:07:6b:9b:3d:2c:d4:d8:78:f2:1f:3a:8f:
d5:23:08:e5:b6:d4:65:f9:3c:df:e4:08:a6:77:0d:
54:93:0d:ea:9a:a1:6f:49:2b:cd:b6:9f:5f:4b:63:
82:85:57:21:2b:89:ed:34:8d:5b:a8:93:3a:07:d4:
b2:d3:92:8c:bf:4a:38:c2:84:b7:c0:73:44:69:cc:
58:4f:ee:11:ea:24:bb:e4:2b:f6:88:07:0b:9b:92:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8B:38:27:FB:DE:FA:7E:D7:66:16:9E:48:8A:A9:D0:E6:40:DB:93
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:9c:35:fd:1d:e0:d0:4f:de:35:7f:09:90:10:86:6c:b7:c4:
99:23:94:2d:09:7e:76:e6:53:8b:20:4e:41:ab:b8:a2:25:be:
62:68:8c:45:17:47:11:93:d3:39:a0:4f:d0:6a:ab:d2:9b:42:
75:8e:3d:0a:3c:69:8e:6c:3f:94:3e:fc:33:ca:0e:f1:36:52:
6c:23:13:1a:e1:fb:d7:ba:80:df:b1:4b:61:49:5a:11:cd:00:
6f:9c:41:f5:55:5a:51:27:c3:0e:cb:59:29:c0:ca:d4:49:f9:
6e:de:c4:c4:e2:bd:c7:a1:15:8d:8f:c2:14:0c:24:3f:96:c8:
ef:07:77:ba:ee:e3:d1:9f:e4:c6:a7:91:e6:05:5a:04:79:e7:
73:e9:e2:b3:51:45:9c:f2:0b:8c:fa:49:62:98:c2:2a:47:3a:
bb:78:aa:30:ac:d6:67:32:12:1a:37:da:bd:d4:f3:b6:da:1f:
46:97:f9:e8:44:2b:f9:ef:33:a4:42:87:c6:e9:58:9c:58:aa:
54:4f:a8:1a:a7:54:f8:88:68:6e:80:fd:a0:83:01:96:92:86:
bb:31:52:1c:c5:e6:a5:52:9c:58:52:a2:86:6f:b7:ad:66:48:
0a:bf:b9:14:c0:ce:b5:18:f8:93:67:f4:9e:4c:c9:da:1b:96:
ed:59:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 09:42:01 2025 by rpki-client