Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
File: qg-X5jUIIZuWy7IQY0P14bbcWk8.mft (raw, json)
Hash identifier: uqHoAzWyN7zN7PbYfMx/lxok18bnhRpfFEU4+/QGrNc=
Subject key identifier: 84:9C:DD:96:AE:C2:B2:AA:A7:A5:47:08:04:2F:63:3F:C1:29:1B:B0
Authority key identifier: AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
Certificate issuer: /CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Certificate serial: 01984664878431A21D373C155369EDB9600F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
Manifest number: 0305
Signing time: Sat 26 Jul 2025 11:00:49 +0000
Manifest this update: Sat 26 Jul 2025 11:00:49 +0000
Manifest next update: Sun 27 Jul 2025 11:00:49 +0000
Files and hashes: 1: 9AnxnImjEc49reXZMK2FTMayLmk.roa (hash: 8tldiaw0Efa5JT0iNf3f5fRMFBv7jO6PfNRsCAPI7BY=)
2: qg-X5jUIIZuWy7IQY0P14bbcWk8.crl (hash: Kq7mEuZfRVkjXF4UEIQyQ5BLX5BAby29lgZi/GPalt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:87:84:31:a2:1d:37:3c:15:53:69:ed:b9:60:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0f97e63508219b96cbb2106343f5e1b6dc5a4f
Validity
Not Before: Jul 26 11:00:49 2025 GMT
Not After : Jul 27 11:00:49 2025 GMT
Subject: CN=849cdd96aec2b2aaa7a54708042f633fc1291bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:87:37:c6:5d:8b:00:6f:84:b1:6e:57:b7:
f6:26:8d:63:3b:7e:34:89:f9:f5:2e:7e:69:85:67:
42:f0:38:44:78:7c:0e:d9:5d:c6:ea:0e:a9:93:25:
27:66:b2:f3:8e:12:f5:30:ad:07:c1:44:a9:59:78:
e2:e2:c7:38:87:d0:11:77:2b:e8:68:2c:31:94:43:
46:c5:81:11:54:de:de:17:f5:46:19:74:f3:4b:fe:
5e:a1:ce:ca:d3:fc:df:de:27:f3:da:f7:d6:84:85:
22:63:70:ea:ca:ff:b2:14:98:a5:3f:64:fd:04:b0:
f1:d9:b7:7e:d2:ad:c5:b6:2c:04:8f:15:f5:82:97:
0f:76:70:d4:3c:bd:4f:d3:47:6d:64:d0:04:47:e5:
9d:83:ef:6d:e4:4e:df:77:0d:e2:15:f4:a9:bf:53:
f2:3d:56:b7:24:14:e8:3a:2a:c2:7f:6e:83:ab:9d:
e1:82:fa:fa:65:0a:32:f3:26:89:74:42:28:9b:c0:
3d:a8:14:79:1d:fe:9d:85:28:72:27:92:c6:9f:3a:
2e:c4:4e:9d:30:10:83:77:98:91:92:4c:0a:c0:1c:
af:cd:d0:28:e9:0a:2e:a8:50:f4:f5:d2:4b:40:6a:
ff:63:a1:0e:6a:41:4c:eb:a8:46:b1:b2:49:eb:c6:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:DD:96:AE:C2:B2:AA:A7:A5:47:08:04:2F:63:3F:C1:29:1B:B0
X509v3 Authority Key Identifier:
keyid:AA:0F:97:E6:35:08:21:9B:96:CB:B2:10:63:43:F5:E1:B6:DC:5A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qg-X5jUIIZuWy7IQY0P14bbcWk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1b66fe-699a-413b-a2fc-f511fd688eda/1/qg-X5jUIIZuWy7IQY0P14bbcWk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:19:44:42:e9:17:3f:c9:51:a7:29:3d:0a:dc:93:56:ae:d2:
90:96:cc:07:b7:6f:33:4e:19:94:49:23:1e:a3:65:bc:26:b2:
b8:37:e4:0e:f3:a0:aa:a7:04:dd:0b:2b:5a:da:9c:92:e5:8a:
5b:f3:5a:69:da:1b:fd:86:c2:3e:79:ef:70:a4:0f:b5:d8:f9:
29:2c:5e:c3:af:c0:fc:8e:e6:e1:47:15:86:51:5c:27:02:6e:
39:3c:a1:a1:c8:63:0f:d3:1a:9c:13:4f:98:57:10:3c:bb:f5:
1b:e6:fd:8f:e2:4a:54:4c:3f:f9:f3:fb:5b:18:a8:60:98:d4:
2b:e4:73:76:4b:65:5c:8d:0a:a3:2c:27:e4:1a:7b:f8:d3:70:
36:28:4a:34:de:19:6d:1d:e9:f0:43:e4:12:30:d7:89:07:e1:
82:73:fe:65:b4:89:58:af:1b:21:32:e7:21:1f:81:b1:ed:a3:
06:f0:d5:55:94:c1:83:ed:9b:20:fa:1d:04:38:0f:2f:d7:78:
2f:dd:03:b0:bd:85:6f:68:d7:92:e8:bf:6d:10:0a:61:bc:8d:
20:c3:98:6f:51:30:54:23:5e:44:6b:a7:5c:eb:7a:50:ef:b0:
d8:cf:c1:ac:96:34:5e:99:c9:56:06:ae:96:52:38:23:1a:8f:
b6:05:30:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:56:55 2025 by rpki-client