Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json)
Hash identifier: KcOh3F0pFEbIQtG5odCOa4JLm9vDpoPWVbuH8Fx8N9o=
Subject key identifier: 18:F5:DC:77:94:0C:87:57:EC:7B:CF:81:36:D0:B8:5A:C4:25:0B:B8
Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Certificate serial: 0199221E758CA1C56470A45E44D83C8AA8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:45 +0000
Manifest this update: Sun 07 Sep 2025 03:00:45 +0000
Manifest next update: Mon 08 Sep 2025 03:00:45 +0000
Files and hashes: 1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=)
2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: 6O4nSmA7VH//NFQ9I6Oeu11A4IqGNJanC54cQt0ruwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:75:8c:a1:c5:64:70:a4:5e:44:d8:3c:8a:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb
Validity
Not Before: Sep 7 03:00:45 2025 GMT
Not After : Sep 8 03:00:45 2025 GMT
Subject: CN=18f5dc77940c8757ec7bcf8136d0b85ac4250bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:22:76:a2:db:f8:78:0d:cd:6c:db:44:65:
74:ad:d6:57:45:34:b2:c2:66:c6:66:47:c2:d8:6e:
0b:78:bf:dd:6b:68:2b:2e:cb:8b:c1:97:ed:53:ff:
47:32:6c:65:3f:16:2a:c1:ce:b4:f1:54:cb:99:c1:
c4:c3:5f:69:50:64:f0:a4:36:e6:ca:a0:e2:a6:67:
61:7c:8e:19:5b:d1:3d:48:ce:8f:9a:0e:b6:f2:52:
47:76:8e:6a:9f:7b:ec:b7:6a:a9:7b:1c:59:96:ec:
46:fa:96:97:1c:c7:f9:92:cb:b1:c4:1f:59:31:8c:
24:34:15:7c:cd:bc:ec:55:14:e1:82:e6:b3:74:3a:
ae:12:af:58:ed:58:c2:b5:f8:9e:e2:8c:33:e5:3e:
c7:64:fd:bb:53:26:8f:b6:29:9e:3f:61:2d:19:5c:
fb:c3:56:5c:9c:c7:6d:41:60:47:7b:4d:66:93:e9:
32:cb:d6:9e:45:56:3d:f7:7d:97:7a:f2:04:7d:2a:
99:7b:84:0a:4c:c7:af:c2:b7:3e:a4:d7:49:fe:4c:
7c:f3:6e:b7:68:14:c5:98:53:f6:c6:95:32:b6:dd:
f0:e3:fd:7b:69:47:b3:09:06:4f:6c:6a:31:4e:db:
7c:f0:70:09:54:31:c6:2a:41:c8:d1:fe:57:97:a2:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F5:DC:77:94:0C:87:57:EC:7B:CF:81:36:D0:B8:5A:C4:25:0B:B8
X509v3 Authority Key Identifier:
keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:22:b8:22:15:a4:e0:ec:f8:4c:b9:07:82:e3:b7:b4:07:1c:
c6:23:c3:c7:89:9e:8d:9f:a1:a5:d8:4a:60:45:06:3f:4b:d7:
db:0f:eb:4c:ac:7f:d9:bf:32:6f:3b:ba:56:b4:c8:26:ef:b7:
b7:9f:1a:f7:6b:89:e2:41:a8:dc:87:1a:7f:07:20:6d:89:29:
f3:1e:6b:48:38:4d:9a:75:42:6d:01:9e:47:6d:3f:2d:93:68:
07:be:23:1b:cb:aa:4d:5e:5c:a7:59:4f:5f:7a:43:20:9e:42:
12:8a:28:be:1e:0f:10:d4:3d:0b:2f:fd:a5:40:65:2f:21:f2:
58:3e:7d:65:72:04:21:6e:67:7e:23:d7:98:55:c6:aa:b0:23:
a2:23:62:76:28:b8:5f:0b:27:a1:00:48:87:68:4b:0e:8a:7b:
5e:3d:00:79:6a:db:27:b0:d0:ad:2c:5f:dd:71:53:be:92:e6:
79:0a:e5:93:f8:bd:89:86:c6:4b:56:5e:93:3e:d5:d6:bc:34:
21:b6:f4:75:c4:85:2d:e8:6b:d0:a0:eb:6a:f0:22:de:42:2c:
be:b7:77:cf:f8:77:82:50:dc:a2:76:9d:78:4b:fe:a3:ff:0e:
3d:6e:66:2f:1b:d9:61:e6:8e:67:28:e0:04:7d:23:e3:f9:80:
ff:8f:6e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:53 2025 by rpki-client