Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: 8sZuto2pvJdq2woFHKUoVmwPrAaMfEZL6RFJ7nWFyeg=
Subject key identifier: 8D:0D:90:54:62:23:60:01:E5:AC:04:3E:36:C3:65:16:34:8D:22:17
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019849D3AAD5CFF0901890D3D9344880172D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 12E0
Signing time: Sun 27 Jul 2025 03:01:05 +0000
Manifest this update: Sun 27 Jul 2025 03:01:05 +0000
Manifest next update: Mon 28 Jul 2025 03:01:05 +0000
Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=)
2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=)
3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=)
4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: vvoKLq3lquOpJnquPl356+JpeYbT7ns4LRDaGhmVY/I=)
5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:aa:d5:cf:f0:90:18:90:d3:d9:34:48:80:17:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Jul 27 03:01:05 2025 GMT
Not After : Jul 28 03:01:05 2025 GMT
Subject: CN=8d0d905462236001e5ac043e36c36516348d2217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:03:0d:59:33:fb:6c:de:85:75:b6:20:09:
3a:53:e3:09:e9:60:84:d7:f9:d9:b8:c8:84:6b:d5:
71:34:7a:c7:4d:ad:b8:e9:9c:97:90:24:50:d5:e6:
65:9a:d3:4d:c2:6f:97:fc:23:6c:40:69:eb:28:b5:
ad:3c:c5:54:10:f6:ff:15:a7:df:8b:09:fb:02:d0:
5d:5b:eb:91:9e:68:b6:97:69:49:e0:77:bb:c7:4f:
fa:50:52:21:13:a1:8c:81:5e:54:49:6c:18:30:bf:
0c:da:a3:ef:93:f2:1d:e4:78:a5:db:ba:19:2b:5d:
66:fe:fc:4c:a8:b9:4e:c5:51:63:52:d6:8d:4e:3e:
58:08:02:b3:85:f3:42:12:38:64:02:5b:53:61:dc:
52:8e:56:09:bd:0a:78:72:d3:b2:a1:54:8f:5a:87:
e6:bf:d1:99:7a:89:86:82:3f:16:5f:3b:f4:a2:31:
03:cd:49:2e:fe:a5:6e:90:6e:49:8a:7f:d5:d3:35:
17:dd:65:e0:92:e9:a3:fb:b1:df:ff:5d:5b:a6:01:
c6:e9:5f:c9:2a:e2:28:d1:25:96:53:f4:bf:4a:91:
10:e1:c8:ee:21:90:e3:a0:6a:c3:6d:b5:0d:fd:a4:
d0:e8:c1:30:ea:45:c6:7c:95:69:12:63:e4:f3:c2:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:90:54:62:23:60:01:E5:AC:04:3E:36:C3:65:16:34:8D:22:17
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:3c:b0:12:2e:ec:19:d1:27:9d:e2:74:6e:ed:c5:64:08:97:
62:da:c3:02:91:d1:00:c4:8f:a6:9c:4f:63:03:c0:af:10:ba:
62:6a:6d:0f:65:25:9f:86:9b:53:41:d8:63:5c:ed:66:3a:dc:
9e:6c:72:a6:ea:f2:64:76:18:13:8c:05:e9:b3:e9:a5:35:b5:
0e:7f:3c:91:67:b2:05:23:8c:39:ff:b7:56:da:1b:00:66:ed:
21:4e:f5:70:f0:05:50:e7:49:3f:48:30:5b:96:9c:0e:b3:3c:
95:ff:b6:02:5c:a3:ee:49:e3:8b:8d:cd:b3:70:2a:8c:f5:7a:
8d:0c:c6:8a:f0:fd:d1:23:5b:b7:35:90:42:2d:aa:9b:f7:7e:
13:2e:a3:e6:de:52:da:4f:6d:7d:95:44:2e:62:7f:b6:1c:e6:
bc:45:45:5a:65:4c:b6:3c:20:e5:a3:40:4d:33:b2:33:2b:00:
c4:bf:7a:61:95:78:ab:f7:94:6f:b7:e8:c2:bf:f8:22:48:1f:
1a:68:a5:4b:35:64:75:f5:f5:82:47:49:cd:b3:55:b6:e5:0a:
8d:3a:76:bb:82:e9:ce:de:83:f6:90:c9:d1:75:0d:94:1d:d1:
b7:4b:be:2f:4f:32:76:15:30:d3:8d:e1:91:e2:46:db:7a:b0:
30:9c:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:49:15 2025 by rpki-client