Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: xR2ERBjpeeo1Xr5+fGZO5LXVLkb3zwpWd4IhtOW1eRc=
Subject key identifier: 24:C1:72:1B:E8:9B:6B:F0:E6:CD:4E:85:A2:4D:DB:C1:85:4E:66:FF
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 0199511C1DBAB46122A6947B398ABAA7010E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0BFA
Signing time: Tue 16 Sep 2025 06:00:21 +0000
Manifest this update: Tue 16 Sep 2025 06:00:21 +0000
Manifest next update: Wed 17 Sep 2025 06:00:21 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: JP+WlWGBNy+QQBVkg+Nf1/uiKe39B8WwTOHZk5Jn/bQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:1c:1d:ba:b4:61:22:a6:94:7b:39:8a:ba:a7:01:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Sep 16 06:00:21 2025 GMT
Not After : Sep 17 06:00:21 2025 GMT
Subject: CN=24c1721be89b6bf0e6cd4e85a24ddbc1854e66ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:30:58:ef:1f:22:5d:34:b0:e2:d8:40:f4:
9a:fc:7b:12:fe:54:69:1a:9e:c8:dc:2c:fc:0f:6c:
1b:ae:ff:39:f5:f5:0e:e8:d7:d6:a6:57:90:e7:b2:
6d:b2:41:b2:a8:c1:84:8f:18:06:98:ff:d2:34:9d:
26:9c:96:b1:3e:eb:28:2a:e8:91:ef:a5:22:52:55:
24:ed:d7:c0:bd:30:18:9b:d2:8f:49:31:fe:66:04:
12:1e:46:5c:7f:a2:a8:83:27:e6:a9:8e:80:93:51:
21:d7:2f:24:4b:ba:89:3a:f7:a4:9e:cd:4c:d5:13:
4e:b9:74:45:7f:8d:9b:7f:13:07:4e:02:23:46:3f:
4f:52:59:f6:86:2d:12:8a:2a:84:f1:14:7f:ef:28:
79:30:a9:30:46:c7:b1:62:bc:aa:8b:2a:56:f1:31:
e3:0f:0a:c4:a3:bd:e2:1f:22:65:c6:b0:40:46:5c:
8c:29:b7:f7:51:7a:d4:ed:6b:b1:6e:84:7e:ad:58:
36:15:af:26:8f:9a:f9:9a:a8:61:b9:11:fc:6b:0c:
93:ba:d7:e5:f7:ec:fc:9b:bd:e9:37:4f:07:6b:ff:
c2:8a:89:19:cf:24:83:b5:ac:3c:8c:d9:5a:3d:49:
96:f7:63:a8:8a:77:22:35:50:46:7b:aa:ca:49:ec:
48:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C1:72:1B:E8:9B:6B:F0:E6:CD:4E:85:A2:4D:DB:C1:85:4E:66:FF
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:72:5c:1d:70:91:6e:32:d7:34:a2:86:82:33:ee:41:b8:16:
61:9c:6a:3b:5d:e7:3c:c7:83:50:4b:6c:f8:fb:c7:b9:e0:c9:
1e:6d:3d:fa:d9:58:08:eb:d9:f6:bd:86:c2:2e:6d:fe:f3:7a:
6a:d2:a6:5e:73:14:7e:ab:a8:71:4c:70:2e:6f:0b:bb:04:b9:
8f:92:f6:fe:9b:50:b4:64:47:a8:32:3f:d5:cc:b7:7d:08:15:
68:77:ec:1b:15:4b:a3:89:b9:d1:d4:53:d4:98:ea:1a:25:4b:
ef:7e:32:c9:e3:e9:fb:78:16:ab:8d:08:b0:56:00:b9:2d:79:
06:ad:c3:a7:b7:03:e4:16:4f:32:cd:b3:06:fe:4b:f7:32:89:
13:d8:35:84:ba:f4:42:f2:c6:26:1d:b1:4f:08:e6:ff:f3:e3:
80:6b:9a:fa:36:71:2d:d9:8d:17:0e:5b:f8:93:58:aa:e4:18:
e1:83:c9:bd:ff:8e:0c:6a:96:1e:bf:51:4d:2f:ca:7a:e4:33:
c1:22:ee:c9:e0:89:ad:67:9d:15:85:ff:4c:a7:b0:8e:79:9f:
64:a7:92:84:97:c3:83:cd:f6:bf:d8:e3:75:07:df:06:08:28:
44:a6:cd:db:1f:7a:79:e7:f7:c5:2c:85:fa:f1:f0:a9:49:87:
f3:ca:f4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 08:43:49 2025 by rpki-client