Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: jNypKpNr/kV3GbREBdxqRI/bX4GYurAfn1tly7KRsdg=
Subject key identifier: 73:DB:BB:E2:EF:54:EB:78:52:69:89:4C:68:F5:D7:F5:9D:DE:87:2E
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019845F631F9D5CFBE15CF5123E6D5A5341F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 01A2
Signing time: Sat 26 Jul 2025 09:00:19 +0000
Manifest this update: Sat 26 Jul 2025 09:00:19 +0000
Manifest next update: Sun 27 Jul 2025 09:00:19 +0000
Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: PRbSygkn3C+qKJ1NuE989PgbZN5n0o47I/faUIUmgbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:31:f9:d5:cf:be:15:cf:51:23:e6:d5:a5:34:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Jul 26 09:00:19 2025 GMT
Not After : Jul 27 09:00:19 2025 GMT
Subject: CN=73dbbbe2ef54eb785269894c68f5d7f59dde872e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:fd:47:3b:8b:d9:74:1c:94:37:a6:55:bd:
77:cb:08:ca:8f:20:d6:6e:20:8e:60:c1:ed:df:0e:
58:80:d6:bc:1c:7b:25:3f:af:99:f0:96:69:5e:32:
62:7b:ae:ee:d2:a8:ad:f7:e2:ea:52:4c:47:d5:fb:
8b:34:31:d1:22:76:8c:4e:b2:51:85:28:ef:0f:f4:
5d:d5:dc:94:50:8f:55:24:b2:80:2e:75:c6:d3:13:
fb:1e:41:7f:a3:a3:5c:24:52:74:84:68:e5:13:37:
c3:2e:b8:77:67:f0:7b:0d:af:5f:6c:fc:ce:f3:8a:
99:d4:72:f4:38:4a:cd:c6:5f:83:79:35:db:50:d3:
71:05:53:e2:b6:db:48:87:f9:70:87:bf:8b:f5:99:
e2:28:c3:88:8b:b8:32:f4:1b:32:f4:c4:f1:9a:5e:
5c:19:d8:bb:8d:5f:22:3c:fd:f8:54:f6:ad:74:d8:
8a:b2:ea:22:ec:88:2a:3c:35:fb:f6:02:b2:2d:fe:
ce:04:ae:12:e7:80:f9:7f:a9:3c:ba:ee:6e:37:9b:
1f:70:f5:77:cf:4b:1e:b2:36:5f:b8:25:9d:18:e2:
aa:cc:a8:50:4e:ca:03:46:36:13:ff:cb:57:af:a2:
81:2c:5b:34:16:c1:5f:44:5c:1d:cc:68:7b:54:cd:
b9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DB:BB:E2:EF:54:EB:78:52:69:89:4C:68:F5:D7:F5:9D:DE:87:2E
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:d9:30:84:0e:39:68:e4:4c:1f:3d:0b:e7:c1:eb:f0:22:
2b:18:a2:d5:b0:7b:11:d3:a5:97:c9:3c:23:de:6c:9b:b7:a3:
0c:f0:65:ae:49:5b:b1:5d:4a:75:c9:6b:9c:b9:e5:ca:b9:56:
6c:aa:69:2d:f1:04:42:f0:c9:a4:e5:0c:a6:88:18:8d:4d:e8:
f9:2f:50:9a:ac:12:7d:23:59:7d:f9:6b:74:90:ee:ac:fe:58:
97:93:31:76:cb:c3:dd:b4:5a:7a:53:a9:ab:e7:38:d1:3a:45:
6c:0d:3a:5e:8a:2d:bf:de:04:ae:30:78:8f:c6:26:21:51:1a:
42:91:82:77:e8:99:33:f7:35:e6:16:01:c8:35:d5:55:26:b0:
f4:10:2f:e8:01:5a:93:56:58:be:53:6b:7f:3a:8d:f6:5e:8e:
35:b4:a7:b7:3c:31:2f:8e:2d:2f:b4:84:f2:85:ea:7c:0f:09:
e0:84:96:d3:36:7a:f9:8a:ea:8a:15:67:4c:01:c5:3c:4e:e6:
ba:28:9c:79:cc:e3:69:5e:54:a0:64:f1:8a:c8:a2:36:39:57:
e4:9e:f7:dd:45:a8:47:ae:49:a4:a6:83:06:3b:18:4e:d8:a5:
8a:20:53:e2:57:f8:83:21:32:38:a7:12:14:3d:a7:c1:0f:aa:
0a:2e:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:25:49 2025 by rpki-client