Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
File: qdeM56IchB2HNUJHdut_9YetBNE.mft (raw, json)
Hash identifier: CaUYIrwfazheAIClWpkMgxJdxuaECyvmGEhGUNpIIj8=
Subject key identifier: 34:61:D6:AF:B8:70:B2:EA:F0:24:CB:20:DC:46:6F:A9:45:E0:D9:EF
Authority key identifier: A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
Certificate issuer: /CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Certificate serial: 019922FAB7EE84769FEE69420B24B5F05A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
Manifest number: 154B
Signing time: Sun 07 Sep 2025 07:01:20 +0000
Manifest this update: Sun 07 Sep 2025 07:01:20 +0000
Manifest next update: Mon 08 Sep 2025 07:01:20 +0000
Files and hashes: 1: mzdjW8d1g2RTbpkDyieCRb4Rhp4.roa (hash: +eSn1whG8BEnu+P7IU1V/ISLWfTeC4hd2INZhTzIgYI=)
2: qdeM56IchB2HNUJHdut_9YetBNE.crl (hash: esaRAXkocutfskUpfp27If1782kUpi5efsrXYuJQefk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b7:ee:84:76:9f:ee:69:42:0b:24:b5:f0:5a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d78ce7a21c841d8735424776eb7ff587ad04d1
Validity
Not Before: Sep 7 07:01:20 2025 GMT
Not After : Sep 8 07:01:20 2025 GMT
Subject: CN=3461d6afb870b2eaf024cb20dc466fa945e0d9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:1c:ac:45:0a:bf:dd:6f:2e:e7:9c:b3:5c:
2c:ab:91:47:a0:db:a0:17:a2:2a:74:9a:58:d1:19:
fa:eb:4f:14:d8:c7:ec:64:95:d1:9c:03:af:5f:13:
ec:9b:bd:d3:1d:f5:91:be:63:47:1c:d8:84:12:b2:
56:38:fa:34:20:64:19:5f:e8:6a:e1:bc:ee:8e:88:
69:c7:3e:08:b5:58:05:e4:cc:6d:a4:56:47:42:0a:
e6:50:c1:9e:46:19:33:ee:6a:70:73:99:ee:e6:1f:
ef:ad:d0:a6:e8:aa:74:d4:0f:67:87:ac:8f:25:09:
c5:e2:38:0a:18:73:ad:65:18:5d:9d:67:9c:8c:b0:
71:dd:a3:87:ab:28:23:3b:34:71:16:47:63:95:10:
cf:04:92:a1:ba:bf:d2:64:5c:af:82:cb:32:06:16:
0b:60:8e:21:1d:fa:cd:65:18:67:9d:ce:a4:73:b0:
fc:3b:5b:61:d7:1f:fc:4d:57:a8:39:2a:16:4a:2d:
b8:13:b2:99:8c:7f:0d:c6:9f:fb:f5:6c:5b:34:d1:
0b:26:f9:f6:a4:6e:3e:f5:da:8d:87:50:ba:e0:05:
ac:3c:fd:fb:a4:ef:bd:a5:e0:9e:c3:31:c5:35:4f:
cf:18:98:f2:40:6b:69:ac:3c:9e:25:d9:a1:06:c1:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:61:D6:AF:B8:70:B2:EA:F0:24:CB:20:DC:46:6F:A9:45:E0:D9:EF
X509v3 Authority Key Identifier:
keyid:A9:D7:8C:E7:A2:1C:84:1D:87:35:42:47:76:EB:7F:F5:87:AD:04:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdeM56IchB2HNUJHdut_9YetBNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/76c8b4-387e-4c04-8f35-c04ee05a7953/1/qdeM56IchB2HNUJHdut_9YetBNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:dc:09:9f:08:d7:48:b6:bb:e4:94:c7:92:ff:6e:8f:2e:d9:
34:f3:61:2d:a2:ed:c6:32:9f:d2:ce:e8:68:a7:a2:8f:f9:51:
f6:f5:8c:b6:8d:77:df:4d:bb:05:da:a8:f7:ca:df:40:2d:96:
ba:86:6a:41:38:74:73:82:cd:42:bc:b7:d3:da:a1:b7:3a:dc:
f6:50:35:6f:32:9d:d2:7b:19:7f:05:98:2a:bc:75:80:32:f2:
6b:50:5a:0e:ab:30:31:98:01:1d:59:91:62:07:3a:93:af:41:
c2:cf:1d:9a:9a:9b:0c:65:a9:ac:9d:4b:d3:eb:ed:a0:84:00:
9a:db:35:b9:22:46:1b:b8:9e:29:14:7e:03:93:0e:52:03:63:
91:49:16:f9:89:a9:d9:58:3d:b3:a3:23:27:07:ce:71:0b:91:
aa:3d:ba:0b:48:d6:ac:c6:cf:ae:e1:de:3b:ec:c7:13:f1:55:
b7:7c:a6:4e:10:fb:cb:0a:09:d1:ca:69:bb:0c:74:36:df:7a:
af:f9:96:4b:38:31:54:41:af:34:90:c3:de:66:8b:05:3b:3e:
70:24:04:7f:22:21:92:31:8c:04:f3:b8:14:6d:d3:4b:ac:0e:
40:12:a0:5f:4d:bf:de:0b:61:93:29:e1:7f:13:0a:e0:e8:fa:
d7:ff:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:13 2025 by rpki-client