Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
File: AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json)
Hash identifier: H3lBtxnKszU1uB9rxse2+HIl3hkoySXRB7kFXmsmXeY=
Subject key identifier: 8C:87:AD:5D:9A:C7:2C:31:B5:47:EA:B3:3E:9F:E8:2C:42:6B:AF:2E
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Certificate issuer: /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial: 019960FD6407C5F7AA61229F70C8EB11CBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
Manifest number: 1066
Signing time: Fri 19 Sep 2025 08:00:42 +0000
Manifest this update: Fri 19 Sep 2025 08:00:42 +0000
Manifest next update: Sat 20 Sep 2025 08:00:42 +0000
Files and hashes: 1: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: ij/V3O8nUyqqSzLzmmdik0AAJFaJbG2QO9cJhlVgbkg=)
2: UacNCcU_KJUFuUVDMacLGTYRt1Y.roa (hash: UmEeKvj5iTGiHz9n8Csi6f4hgPZD+m1pw3SMg/RgUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:fd:64:07:c5:f7:aa:61:22:9f:70:c8:eb:11:cb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
Validity
Not Before: Sep 19 08:00:42 2025 GMT
Not After : Sep 20 08:00:42 2025 GMT
Subject: CN=8c87ad5d9ac72c31b547eab33e9fe82c426baf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:15:21:3d:cc:32:9b:55:46:92:3a:97:dc:
9c:06:d3:ca:90:78:34:6d:c4:69:ae:9c:63:df:16:
69:03:bf:cd:a8:5d:86:3b:f2:6a:f8:fc:ce:db:9d:
c7:69:d9:d7:c2:83:99:93:9b:61:bf:9b:0c:09:7e:
06:99:e1:10:73:31:10:78:c8:91:82:8a:a7:95:d3:
ab:e0:13:f5:3e:5d:d4:b8:21:b5:3f:c4:46:77:ca:
85:45:7f:6b:e6:a9:5f:ce:09:e1:9b:56:11:c4:39:
20:df:28:07:c6:01:d4:f3:f7:ce:83:a7:1c:4c:6f:
11:11:18:5d:09:71:4a:f7:0f:2a:d7:fa:ec:79:e2:
77:53:1d:bf:92:56:ea:2f:7b:73:94:b0:80:9b:14:
9e:41:60:ee:c8:cb:12:20:51:f9:b9:2b:d0:37:3e:
0e:9e:b7:ad:45:94:b9:05:0a:38:3f:5e:dd:f0:f5:
32:25:11:82:b6:5d:6f:e3:98:5a:86:65:79:25:52:
a3:68:61:1a:69:2f:44:b0:d7:cb:e4:4e:a7:9b:a1:
54:3e:0b:de:11:09:48:2f:6b:c0:c5:8b:22:7e:e2:
15:0a:5e:10:59:ff:ad:ff:d6:b9:54:b1:c2:7a:00:
89:15:d7:fe:1e:71:2e:00:6d:18:d7:ef:bf:7d:53:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:87:AD:5D:9A:C7:2C:31:B5:47:EA:B3:3E:9F:E8:2C:42:6B:AF:2E
X509v3 Authority Key Identifier:
keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:81:03:23:c3:a4:e6:4c:44:f0:00:01:21:76:3f:af:bc:e9:
3c:f1:56:dd:86:09:d7:fa:71:7e:61:de:12:62:8a:51:87:3c:
a0:35:4b:15:1e:10:fc:e0:93:d8:72:7b:57:1d:93:e3:64:4c:
9d:6b:80:38:4d:4c:29:da:fb:82:2b:47:57:31:78:80:4a:13:
29:96:86:91:69:f5:2a:c6:e7:1f:25:01:bd:48:19:65:3e:32:
73:28:5e:b9:7a:fa:24:a0:46:7d:a4:74:26:13:96:f7:4f:4a:
55:13:58:b2:38:21:cc:ec:a9:57:46:88:e4:77:0f:8a:90:25:
ea:20:87:76:4f:cf:c9:bc:dd:d3:58:e3:38:ba:c7:66:93:6e:
58:46:3f:02:77:55:86:86:69:ff:61:6b:de:1b:b8:17:87:9d:
b2:b6:96:88:10:b0:6c:73:c5:40:e3:a2:b3:33:45:b3:32:e3:
79:6f:61:cd:a1:fd:a5:d4:39:6c:44:11:cc:d5:e2:29:c8:27:
52:91:60:04:99:e9:be:f4:1b:96:8c:1a:0f:dc:18:6d:d2:c4:
17:1c:54:ed:bd:6e:03:d0:66:ee:b8:9e:23:35:c2:1e:46:a3:
4b:ac:f2:cf:88:50:17:cf:3d:df:06:8b:94:fe:ac:7e:24:dc:
c3:52:f8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:05:08 2025 by rpki-client