Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
File: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft (raw, json)
Hash identifier: QGyv6YdZOKMuGM1idW+DBmEaAhpVz2foRj4jMuqir/I=
Subject key identifier: 4D:FD:34:89:0A:68:A9:C9:82:7A:E4:A9:44:2B:90:A5:CC:4C:66:BC
Authority key identifier: A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
Certificate issuer: /CN=a98eebed9753f580bea75b352e706325a18d1447
Certificate serial: 01993123E708D33CE56937FFB08AD89746D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 01:01:00 +0000
Manifest this update: Wed 10 Sep 2025 01:01:00 +0000
Manifest next update: Thu 11 Sep 2025 01:01:00 +0000
Files and hashes: 1: 1-W8soB7j9APk25v0dLdeJYYGd64.roa (hash: XIj90J/o3h0TEBJj2DW5RTPwW3YKa0Pa3O9Mz8MU5Ho=)
2: qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl (hash: 452b6nzKSH16X5ex7s7khLwelsSe7muACDQhVQDR8GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:e7:08:d3:3c:e5:69:37:ff:b0:8a:d8:97:46:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98eebed9753f580bea75b352e706325a18d1447
Validity
Not Before: Sep 10 01:01:00 2025 GMT
Not After : Sep 11 01:01:00 2025 GMT
Subject: CN=4dfd34890a68a9c9827ae4a9442b90a5cc4c66bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:b5:54:73:73:7b:8b:4b:68:a9:b1:e9:2f:
c6:ce:6a:47:b0:e4:84:4a:71:01:63:98:e6:ab:d3:
2c:cf:29:3d:b2:6f:9b:af:e5:ce:38:fb:bd:62:5a:
b0:90:8e:9c:ae:8e:83:41:36:64:cd:00:1f:2c:cb:
0f:22:fb:c9:0b:2e:29:ac:73:3f:c9:87:ef:51:49:
db:57:76:81:5f:48:19:8d:c0:60:cc:29:d9:a2:8c:
0e:4d:02:35:1b:51:e9:ac:58:84:3c:31:87:f0:ee:
f2:20:65:30:a3:06:14:9d:8c:dd:b9:db:86:fb:83:
07:e0:32:4c:6a:2c:89:a5:ed:b6:60:5b:bc:a5:43:
a9:98:08:03:cb:73:5d:2b:b7:80:ab:07:19:2d:ee:
b2:d8:50:7c:95:15:cf:6d:65:9d:e8:67:0e:e8:68:
77:50:9e:58:2e:de:ed:5e:c1:c2:91:5b:62:20:b7:
19:e1:17:e2:d7:b8:9b:7c:55:5f:9d:3a:53:70:61:
40:8b:16:5c:cb:da:48:da:21:82:9f:5c:15:21:ef:
9b:99:6e:9e:e7:ca:92:8f:d7:47:ed:dd:7e:11:3f:
71:cc:d1:93:8c:21:5e:20:2b:d4:08:50:91:a7:d2:
f2:e3:9c:c0:99:d1:41:ca:e5:6d:e6:b3:48:85:7f:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FD:34:89:0A:68:A9:C9:82:7A:E4:A9:44:2B:90:A5:CC:4C:66:BC
X509v3 Authority Key Identifier:
keyid:A9:8E:EB:ED:97:53:F5:80:BE:A7:5B:35:2E:70:63:25:A1:8D:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a74744-ed48-4707-a63e-52f6919139c4/1/qY7r7ZdT9YC-p1s1LnBjJaGNFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4b:38:a9:fd:5b:b0:67:e9:a2:64:7f:8b:6a:49:7f:37:2a:
23:03:44:12:9b:1a:15:25:17:0e:97:eb:9b:cc:51:cd:bd:e6:
a6:72:3f:36:ca:93:a1:aa:d1:78:38:4b:ec:f5:08:1e:cf:33:
88:61:a6:60:6d:2e:84:48:4f:9a:8b:94:a2:4a:34:a6:52:54:
81:03:85:3e:de:82:79:c7:7f:89:24:39:99:67:c3:f5:4e:11:
6b:0b:f7:c6:54:9b:c1:1e:61:f6:f0:49:45:b5:3a:d1:50:6b:
17:59:b5:d7:aa:99:6e:38:b6:7a:c3:23:56:97:76:50:ac:2c:
49:24:01:bc:a5:0f:a9:88:48:06:42:98:75:2e:d0:04:c0:b9:
b4:c0:47:e6:e7:57:e7:e7:dc:a2:e3:5f:dd:3f:5d:e0:0c:e9:
00:92:84:69:a6:f9:7e:ec:63:46:ec:f3:e2:58:1a:e5:b6:1e:
f2:af:44:84:c3:b7:31:7c:7a:5f:95:14:00:3b:05:92:f6:2e:
47:24:9e:fe:81:18:d5:c8:35:df:3b:ef:35:a5:17:7a:5a:48:
57:ff:69:5a:8a:77:8d:58:74:e8:f5:89:3a:14:04:08:b2:e5:
8f:b8:91:79:b1:e2:86:08:1f:a3:22:f7:6d:19:59:ef:04:a3:
c9:ce:a6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:08:59 2025 by rpki-client