Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier: qzuK8rQOqCKM7iAXATFurxxFRp/4BuXi4W19YdMs6Tw=
Subject key identifier: 52:93:FF:94:B6:0A:EB:76:87:A8:35:DA:5A:9F:A2:E6:43:51:99:F4
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 01993123CE818D61E8DD571D971BA3A5CF41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number: 0391
Signing time: Wed 10 Sep 2025 01:00:54 +0000
Manifest this update: Wed 10 Sep 2025 01:00:54 +0000
Manifest next update: Thu 11 Sep 2025 01:00:54 +0000
Files and hashes: 1: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: z3g82yefLAl3TvRekhYGoQW/TIYDpu32c28Mewd1gLU=)
2: nK8r6BW7X2Id54DEAsyFnRHZOsA.roa (hash: ++ZMcQT7NmyLhSBPeMlDbkE+/3o7EgGxMfB7gUiQzt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:ce:81:8d:61:e8:dd:57:1d:97:1b:a3:a5:cf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Sep 10 01:00:54 2025 GMT
Not After : Sep 11 01:00:54 2025 GMT
Subject: CN=5293ff94b60aeb7687a835da5a9fa2e6435199f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:36:b0:c9:d3:59:db:4a:58:51:22:4c:21:
86:96:2b:43:0f:46:bc:21:18:da:e4:65:8b:7e:7a:
34:68:20:44:38:d9:8b:19:b4:8d:a5:e8:48:9c:0f:
f4:9e:c0:f4:c2:b9:1d:58:cf:ef:55:63:4d:83:94:
b3:0c:8b:f8:a8:d5:72:25:f7:3c:d5:2d:c7:14:cf:
72:32:64:45:cb:06:ca:96:2c:0d:30:b1:cd:af:a1:
b9:8b:3f:5a:03:0c:93:2d:c7:11:fd:f6:1d:34:65:
67:3a:f0:9e:d2:01:e5:3b:c7:45:10:d4:18:48:04:
d9:49:d9:d4:66:c4:b1:c0:d6:99:89:6a:c7:ae:47:
38:df:92:4e:3f:86:9f:47:61:c4:75:35:4d:f6:2f:
5d:0d:c5:40:6c:96:59:75:8a:1e:dd:ee:51:63:20:
df:56:7d:63:e7:8b:b3:2e:8c:d8:42:6f:93:f1:96:
f8:93:80:e1:78:ce:ea:ff:6c:eb:16:23:40:76:1c:
d8:5a:08:d7:08:3f:c8:d6:ac:8b:5e:94:c6:23:3c:
1c:f0:f6:cf:b5:01:92:a1:8b:c1:21:7a:f4:4c:bd:
05:32:2a:64:4e:5f:03:e4:bf:f0:e0:7f:93:85:3f:
6e:e8:99:c6:79:fa:77:8b:d2:b4:9b:10:b5:ea:3d:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:93:FF:94:B6:0A:EB:76:87:A8:35:DA:5A:9F:A2:E6:43:51:99:F4
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:30:23:c8:03:17:58:2e:97:0a:84:3c:04:2a:53:93:c6:20:
d6:5c:4f:37:9c:55:8a:b3:ac:3a:86:41:71:39:82:9e:7d:d9:
a4:5a:cb:c1:1a:9f:d5:a9:81:34:9e:a9:1c:31:9f:91:01:73:
7c:89:07:e1:e7:17:0e:d4:f4:59:bd:ef:60:9f:b5:6f:88:3f:
f8:8b:a1:1f:21:1c:5c:6c:0a:00:57:a8:c4:97:c9:23:73:d1:
e4:fa:64:91:fc:c5:22:ac:ca:c8:fa:f4:bf:2b:d3:16:56:ef:
54:46:b8:40:6f:f6:da:d4:04:49:65:c2:a2:6c:d1:bd:fd:07:
57:61:79:2c:72:fa:c1:e2:19:9d:b4:b6:4a:7e:8a:2d:0f:39:
10:e7:e6:7d:6c:c5:75:46:9d:12:4f:58:72:d6:44:21:2f:cc:
de:76:e8:d9:72:31:97:94:8d:b1:e2:78:65:5f:78:80:74:26:
90:64:e7:f1:08:0c:92:83:94:f9:cd:b0:d9:44:18:d3:fa:79:
e9:24:12:a0:ec:f7:b5:7b:9a:42:2a:cf:97:7b:c2:34:da:7b:
33:a7:20:27:4a:94:80:1f:20:16:2e:b6:db:51:98:af:45:99:
f6:1b:df:ff:db:51:2a:cb:12:f1:1a:62:3d:ce:dd:2a:13:12:
92:ba:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:50:44 2025 by rpki-client