Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
File: qiEQS093IiTRGFaiTt-UZqhE0mw.mft (raw, json)
Hash identifier: CkWRUreTIZccBqfEfYkQFl7WouKufxvhyq3QPB8WUck=
Subject key identifier: F5:7E:BB:1C:C2:C4:4D:EC:4B:1E:0E:13:70:D2:80:75:57:1A:C3:17
Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Certificate issuer: /CN=aa21104b4f772224d11856a24edf9466a844d26c
Certificate serial: 019849D36EF1C1B1A8D1ADF5EFECEF7E075C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
Manifest number: 09FB
Signing time: Sun 27 Jul 2025 03:00:49 +0000
Manifest this update: Sun 27 Jul 2025 03:00:49 +0000
Manifest next update: Mon 28 Jul 2025 03:00:49 +0000
Files and hashes: 1: C9Uc2-MMZLc56ntn-MTlSYOC9E8.roa (hash: 7Vks3Vs+iWpgcZieiS4e05rACvsjBFcyY3uhYDWshE0=)
2: qiEQS093IiTRGFaiTt-UZqhE0mw.crl (hash: StxMOZ1L5PBuIhco0EPC+nAjzdcmnStOftRt+7j/IQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:6e:f1:c1:b1:a8:d1:ad:f5:ef:ec:ef:7e:07:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c
Validity
Not Before: Jul 27 03:00:49 2025 GMT
Not After : Jul 28 03:00:49 2025 GMT
Subject: CN=f57ebb1cc2c44dec4b1e0e1370d28075571ac317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:52:c5:9b:4b:b4:52:9e:3d:27:d6:91:e7:
0d:52:19:88:86:e1:35:21:f7:65:f7:48:39:fb:c2:
2e:40:0b:8e:a5:2a:eb:af:67:66:48:be:17:53:05:
51:06:ad:dd:9d:af:78:24:89:49:05:d3:db:bb:e6:
d1:f9:4a:7d:ea:6c:60:79:19:e0:07:fd:06:85:d0:
78:df:0e:28:44:a3:4d:41:18:36:f0:1c:27:31:d9:
15:b8:db:3b:fd:72:1a:d6:24:b8:c9:6a:24:d4:2c:
b0:41:eb:3a:93:c7:ec:03:6a:b2:49:93:22:7a:9a:
d7:c4:2a:fb:4a:93:fa:fc:f0:f2:bc:fa:07:8a:c4:
d9:f2:7e:84:eb:29:65:d6:fe:13:6b:66:eb:a2:7b:
07:b1:b5:1a:07:49:22:16:18:23:1b:ae:e9:87:e7:
49:8a:b0:4f:4e:a4:38:01:db:fc:89:fe:f0:ba:e6:
3d:55:a1:59:74:2b:b6:29:58:19:57:44:6b:02:0d:
75:82:e7:d6:60:7b:73:8c:f4:fb:96:40:df:61:1a:
24:38:eb:b2:dd:5a:1c:9a:5c:09:96:8c:bd:ea:2c:
27:ce:6a:3e:33:53:83:e7:d7:66:d8:ca:12:4c:f3:
5f:5d:52:2e:08:11:a1:6b:4e:0d:14:63:e9:e7:a5:
78:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7E:BB:1C:C2:C4:4D:EC:4B:1E:0E:13:70:D2:80:75:57:1A:C3:17
X509v3 Authority Key Identifier:
keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d7:35:05:c8:16:1e:f0:15:a2:e9:11:2b:a7:60:22:44:31:
91:98:34:67:ce:a1:ac:18:69:b4:4c:82:5d:d0:6e:62:fd:cf:
19:02:9a:7c:da:38:a7:6f:78:76:19:b1:2a:3f:1e:81:9e:ba:
4b:94:22:f7:83:46:5f:ea:94:1b:68:30:a3:b9:a8:66:43:41:
d9:58:8a:42:20:91:66:5b:f4:6a:fa:83:32:f3:02:3c:ac:37:
cb:86:16:3a:c2:f8:6f:8c:3c:2d:84:9b:a5:b0:1a:9b:65:9e:
80:76:0d:25:5f:16:10:c4:f7:bb:ef:f1:fe:18:40:6e:7a:99:
2c:d3:21:7e:22:af:f5:29:09:1c:33:a1:75:6b:38:90:1c:42:
7a:00:3c:5a:88:29:f1:6b:d3:75:ec:ae:a8:e0:0e:a2:87:33:
7f:56:c8:f7:82:87:0e:97:91:e6:75:2b:a6:5d:12:b1:ca:7e:
f2:b3:27:04:98:28:1a:0b:f0:b3:60:da:bf:8f:2e:96:b0:ab:
44:3f:94:4e:4c:20:b7:78:ec:41:0c:71:4c:61:b6:4f:00:93:
27:45:df:44:71:1d:9f:45:1c:5f:90:44:43:cd:41:d8:98:42:
52:02:05:7f:f8:28:2b:d8:a6:75:e7:1c:91:a9:53:8a:d8:3b:
be:32:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:42 2025 by rpki-client