Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
File: qNU0ujy0JM9cXjuiVLojJQgGWLA.mft (raw, json)
Hash identifier: 7pHGwiAFo3nLHmAxhCTNDOpTuts9VjkMrKaGGYllRmA=
Subject key identifier: A2:D5:61:32:20:26:8E:21:8B:A7:7B:85:69:5D:2D:BA:5F:AC:E6:F2
Authority key identifier: A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
Certificate issuer: /CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Certificate serial: 01995F7DC95C90EE319493FBDF1189D2F5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
Manifest number: 07D4
Signing time: Fri 19 Sep 2025 01:01:42 +0000
Manifest this update: Fri 19 Sep 2025 01:01:42 +0000
Manifest next update: Sat 20 Sep 2025 01:01:42 +0000
Files and hashes: 1: oATe-_oISha7IgG23AEM218xrRE.roa (hash: uddGyx2jLyok/qpchLVARkXw2HFXXOE6m1d81wn4B4M=)
2: qNU0ujy0JM9cXjuiVLojJQgGWLA.crl (hash: gPDhV7rBdV257a9B4jo3R9E7pof7wtjUMe8LwoHvzr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:7d:c9:5c:90:ee:31:94:93:fb:df:11:89:d2:f5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d534ba3cb424cf5c5e3ba254ba2325080658b0
Validity
Not Before: Sep 19 01:01:42 2025 GMT
Not After : Sep 20 01:01:42 2025 GMT
Subject: CN=a2d5613220268e218ba77b85695d2dba5face6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:43:7b:e9:fe:59:08:82:53:70:82:39:f8:28:
7f:3f:70:33:39:0d:2a:21:02:c2:51:48:95:a8:c8:
34:17:ec:50:e5:54:91:78:2e:8b:e6:1f:c8:01:ef:
f4:11:8b:f1:fe:13:82:bb:72:7b:c4:88:f2:ca:48:
27:ff:99:56:ef:3f:b5:52:67:20:a6:39:38:92:34:
cd:8f:3f:5e:5b:5a:73:34:6a:6f:5d:b1:fe:ac:7b:
75:ac:11:b2:03:62:40:99:db:49:81:87:3f:1f:fb:
2c:8e:f7:6b:25:ac:74:38:77:e2:1a:d5:5f:e1:67:
a3:48:ca:ef:13:60:c4:16:2b:ba:bb:55:c0:ed:45:
28:ff:83:67:2d:d4:fd:5d:0b:c7:47:65:dc:46:9b:
d7:9a:e6:6c:e9:a3:38:9e:c6:54:53:10:4e:31:e1:
f0:7e:01:c8:17:a7:b8:12:ee:87:99:39:54:11:d6:
b4:7b:a2:27:a9:7b:0c:7c:f1:07:74:b3:16:8c:10:
70:c5:df:81:60:9b:e3:6e:65:da:aa:4a:1a:58:88:
d6:80:55:8c:30:c2:8b:1d:b7:33:66:b6:b7:f0:a3:
49:18:d6:ab:bc:bd:4b:87:12:87:76:f6:78:34:c7:
c6:4b:41:22:67:d3:c9:42:76:3a:94:a0:2a:85:bb:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D5:61:32:20:26:8E:21:8B:A7:7B:85:69:5D:2D:BA:5F:AC:E6:F2
X509v3 Authority Key Identifier:
keyid:A8:D5:34:BA:3C:B4:24:CF:5C:5E:3B:A2:54:BA:23:25:08:06:58:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNU0ujy0JM9cXjuiVLojJQgGWLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/73724a-1d0a-49c3-ac67-e77aed6f6e3a/1/qNU0ujy0JM9cXjuiVLojJQgGWLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:24:21:3c:cb:9e:eb:58:1f:e6:fc:03:60:b3:8c:33:04:13:
05:a9:17:76:91:d4:a2:ac:76:b4:df:99:fd:9c:0a:6a:27:15:
7f:22:b7:20:7d:0c:94:66:7e:be:be:83:37:ea:86:37:3c:51:
ce:ad:84:7a:ab:a6:2c:69:79:74:81:a2:0f:db:5f:e9:68:ce:
a4:2f:77:ce:51:24:be:3b:34:f2:58:dc:13:36:c6:c2:7e:cd:
b3:9b:6e:26:28:a7:63:27:84:f4:3f:a2:d9:76:81:fb:d1:44:
e3:4e:76:d1:2c:39:74:90:3d:5e:b2:c1:0f:c7:dd:37:0c:96:
63:e8:ca:04:ff:fc:24:3b:36:40:a8:f3:5c:8a:cb:7e:1b:89:
70:b9:6d:2b:05:09:3a:9c:f6:48:bd:8f:cb:02:77:32:03:6f:
55:4a:d8:a4:00:e7:4f:19:7d:c7:1f:a2:bf:d2:89:84:27:0d:
96:b9:06:e4:3c:aa:8a:55:5e:98:a7:20:dd:16:84:a2:cb:3a:
dc:2a:fa:ac:9a:58:7d:6b:b6:51:2b:22:03:2c:70:c5:50:0d:
04:e2:69:9b:d2:30:af:37:ac:bc:56:cd:86:3b:c9:d7:98:04:
10:5a:8b:6a:af:96:4a:05:5b:1d:51:58:46:25:76:a4:bf:bd:
43:23:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:23:55 2025 by rpki-client