Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
File: qZtHOUN7VflE0iKdFrbm-lmRloc.mft (raw, json)
Hash identifier: DJBUxj8CUwFqBBNvpfpzOjrTVvx1IjBL8Yjuun7kIC8=
Subject key identifier: 2B:E5:D2:58:B5:B7:22:7A:C1:B5:D1:B5:49:CF:85:1B:B5:BF:CC:BE
Authority key identifier: A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
Certificate issuer: /CN=a99b4739437b55f944d2229d16b6e6fa59919687
Certificate serial: 0199228C9827FCFFDF00AF96467C1A924CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:01:03 +0000
Manifest this update: Sun 07 Sep 2025 05:01:03 +0000
Manifest next update: Mon 08 Sep 2025 05:01:03 +0000
Files and hashes: 1: qMxnjU0y2BirW8Msof1Jf0nPV6Y.roa (hash: mETKuHxxI80kK1mEz5SE5kB8etbeHSydtbh41gdDMVo=)
2: qZtHOUN7VflE0iKdFrbm-lmRloc.crl (hash: a8UacsMVjVkvXqNr7A9Uy+GC/lajrJaPSgKBcaw8SEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:98:27:fc:ff:df:00:af:96:46:7c:1a:92:4c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99b4739437b55f944d2229d16b6e6fa59919687
Validity
Not Before: Sep 7 05:01:03 2025 GMT
Not After : Sep 8 05:01:03 2025 GMT
Subject: CN=2be5d258b5b7227ac1b5d1b549cf851bb5bfccbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:50:58:a4:2a:fb:eb:da:9f:ff:13:55:3c:
e9:e6:2e:9d:ca:69:44:e7:2b:13:36:15:ab:9f:6d:
26:8a:18:04:29:51:9b:13:61:5f:86:72:5e:94:74:
ed:7d:99:ac:0e:7c:73:fe:fe:30:fd:98:e6:47:8c:
bd:cf:da:8b:c0:e9:92:7b:a6:29:ce:9a:7c:ec:f9:
a3:9d:50:48:06:3a:c7:87:54:4b:97:af:d9:d9:5f:
72:88:bb:42:2a:36:21:22:44:a6:ef:80:79:9f:63:
90:bd:c7:fb:53:f8:84:64:70:2d:1f:bf:63:25:6f:
6b:db:9e:32:9d:9b:ef:c7:e6:36:2e:77:25:91:fb:
ed:37:8b:73:05:19:de:62:15:fa:e4:7a:41:43:c6:
fd:6f:d1:ae:a3:92:0a:cb:4c:3c:b7:de:b1:7e:e7:
c3:3c:67:b5:4d:74:eb:08:e7:9f:58:30:c2:5e:bc:
46:22:4d:d8:ef:25:bf:aa:8e:f1:6c:52:97:19:5a:
bb:3a:15:b6:bb:7d:9f:79:17:80:e9:4a:f5:4f:0a:
cd:a9:0b:12:0d:61:ed:04:10:65:22:d6:2e:33:2f:
9e:e7:23:01:e8:e3:a3:e6:5b:cb:f3:ee:54:d4:c6:
30:7d:a0:31:e6:9f:9c:8d:50:e4:41:97:55:f4:16:
df:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E5:D2:58:B5:B7:22:7A:C1:B5:D1:B5:49:CF:85:1B:B5:BF:CC:BE
X509v3 Authority Key Identifier:
keyid:A9:9B:47:39:43:7B:55:F9:44:D2:22:9D:16:B6:E6:FA:59:91:96:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZtHOUN7VflE0iKdFrbm-lmRloc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a4114e-db14-44b4-9b25-e47564cd0bae/1/qZtHOUN7VflE0iKdFrbm-lmRloc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5c:c0:f9:5d:14:0a:4a:32:e8:bf:b0:24:4b:97:30:45:28:
8f:e1:45:98:10:d4:fd:b4:26:5e:7c:69:59:1a:4e:d8:45:5a:
90:64:d2:20:7d:4a:0f:bf:3d:ca:2b:b8:aa:e9:ba:b0:cb:82:
f6:ef:0b:c0:af:d5:d7:09:da:8d:dc:95:1a:d5:50:c2:94:c0:
05:bd:57:f2:f7:6b:bb:e8:7c:11:cf:91:63:91:6a:44:f6:0c:
73:f8:81:8f:bf:e4:24:cb:76:6e:3e:92:d4:f8:5a:54:b4:d1:
67:48:fa:ac:cd:cb:8b:5c:5a:58:bb:59:d8:f4:5b:26:9f:10:
9b:5f:ee:00:ad:6e:9b:ba:41:f9:2e:09:37:cc:0f:74:5b:96:
6f:2a:34:b6:5c:fb:44:59:82:dc:97:4a:26:61:f7:5d:02:9f:
93:fb:a7:2d:cc:9b:12:71:70:b5:da:48:f6:fb:47:9d:3f:a6:
a2:49:2c:1e:a1:dc:b2:92:da:3a:c5:0e:96:b8:fa:de:5d:90:
c3:7e:c5:45:3c:32:b9:7c:eb:e0:b6:ff:af:b1:95:17:ad:cb:
3c:ea:88:13:48:a6:2d:b6:19:4a:2c:36:21:92:92:b7:90:97:
00:84:44:73:75:5e:1b:6e:0a:2a:68:76:a2:4f:c5:60:d7:e3:
70:48:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:57 2025 by rpki-client