Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft
File: qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft (raw, json)
Hash identifier: f3317YhVyHyjXnNg48ndYKlFEwoOuGbs4MwAZVQS0FA=
Subject key identifier: 65:2D:2C:5D:EA:49:AF:FF:90:AC:C1:6D:C9:26:B1:F5:C3:40:EE:D8
Authority key identifier: A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35
Certificate issuer: /CN=a8ab7d68d69a52aa50c799990b9218419c147935
Certificate serial: 0198296D08AFAEE78922B71F2FC4745E8773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft
Manifest number: 1B
Signing time: Sun 20 Jul 2025 20:01:08 +0000
Manifest this update: Sun 20 Jul 2025 20:01:08 +0000
Manifest next update: Mon 21 Jul 2025 20:01:08 +0000
Files and hashes: 1: QfAqEIrfh5GlI2pgvhMIdjzs2sM.roa (hash: dMt2CrdZCWtAfbu3OjW6t5fx1eVLHzaohbZwBE6VIR4=)
2: qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl (hash: PcTnWYl9whQNJPjGsLuIcH6zFEXMizH34WkTeP82z8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:6d:08:af:ae:e7:89:22:b7:1f:2f:c4:74:5e:87:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ab7d68d69a52aa50c799990b9218419c147935
Validity
Not Before: Jul 20 20:01:08 2025 GMT
Not After : Jul 21 20:01:08 2025 GMT
Subject: CN=652d2c5dea49afff90acc16dc926b1f5c340eed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:82:ad:65:ba:f8:2b:11:ca:93:99:35:97:
48:e5:10:bd:f7:b7:12:54:4b:f4:e9:68:00:da:a0:
00:be:8b:27:6d:fe:36:77:7a:71:8e:2e:be:20:61:
64:f5:b9:70:89:3a:35:6b:ad:a4:c9:34:a9:ab:de:
16:f9:f4:1b:7f:68:4c:23:36:b6:ef:aa:db:fd:a1:
c7:5a:37:99:f6:86:76:06:f9:57:29:21:b4:12:ae:
37:9e:69:d4:1b:5e:44:f7:d7:40:b6:cd:36:d0:fd:
a2:2c:71:27:98:7c:51:7f:be:f9:3c:f0:f3:ab:4f:
82:7e:25:bf:9c:e3:d9:9c:e7:62:be:f2:33:94:25:
9a:6d:38:73:5c:3c:60:d6:be:57:e4:81:ef:a2:b9:
70:76:60:96:93:23:ea:1d:69:e8:f1:fd:0e:f7:f8:
6b:ed:0b:86:f6:a3:e7:4b:87:bc:d8:f7:3d:4b:58:
9c:ab:15:75:ee:fb:4b:7b:77:7a:69:5b:13:e6:89:
44:4c:e5:90:35:54:79:0a:86:9b:f3:2f:27:9c:5f:
3f:1d:37:3f:58:24:b5:3b:32:dd:c6:5d:85:32:75:
ed:b7:03:9c:9e:df:92:92:76:3c:8c:cf:2d:30:ef:
ed:15:b2:6a:35:e9:af:75:70:e7:b5:04:8c:19:3d:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:2C:5D:EA:49:AF:FF:90:AC:C1:6D:C9:26:B1:F5:C3:40:EE:D8
X509v3 Authority Key Identifier:
keyid:A8:AB:7D:68:D6:9A:52:AA:50:C7:99:99:0B:92:18:41:9C:14:79:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKt9aNaaUqpQx5mZC5IYQZwUeTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ec725-4d8d-4311-934f-3880552a5439/1/qKt9aNaaUqpQx5mZC5IYQZwUeTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6e:ed:8c:69:27:0b:45:9e:69:76:21:a2:50:66:00:7e:fe:
39:15:b9:08:79:9f:de:8e:5c:9c:9f:cc:f7:37:5e:8e:ba:62:
8e:26:74:e7:40:01:bf:9d:e3:b5:a7:6a:c5:ee:c8:9f:50:9f:
ce:38:ba:b9:0a:dd:8c:5e:8a:bb:80:13:31:9e:5f:2d:dd:81:
ca:3c:b1:fd:8f:35:bc:d3:56:00:a4:cc:e2:9b:d8:01:51:36:
69:f5:54:52:f7:d2:70:39:65:1c:f3:b0:4e:e4:1e:87:ed:dc:
c9:04:c7:24:2b:3f:c7:56:89:0c:c4:c0:22:a0:dd:53:97:ec:
98:1a:c5:28:96:bb:aa:45:a8:9a:44:f5:e7:5a:f6:94:df:38:
e9:85:3b:7f:6e:4d:25:13:d0:13:f2:8c:1a:d4:a0:40:4f:7f:
9c:d9:d1:08:05:96:67:5e:fd:06:84:26:7a:28:08:e1:14:94:
6c:08:fc:76:15:cf:b3:fd:da:f4:a0:62:d3:f7:46:a7:b8:f1:
81:32:5a:89:fd:b8:5c:af:06:15:2d:ce:06:42:a7:53:c6:22:
11:cb:73:f1:aa:3e:ac:f1:d1:72:cb:6c:71:20:e8:54:a0:c8:
cf:75:bf:c3:8b:be:6e:bd:61:0b:6f:61:08:36:56:ea:c0:b0:
b1:54:49:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:19:54 2025 by rpki-client