Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: KC/Me2Z5j1njjpZvcQ5bRouHe+QlC7tDGRXzNt/gip4=
Subject key identifier: 67:74:71:3C:0A:AD:BC:AD:C6:86:AD:61:1D:8A:A7:5E:7E:FF:93:5E
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 019844AC733403F10975BCF8DBEE47496E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 03:00:08 +0000
Manifest this update: Sat 26 Jul 2025 03:00:08 +0000
Manifest next update: Sun 27 Jul 2025 03:00:08 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: oyV4ycftQuz35tz6/6XGypO1wS/DX+VOegg4iQuKf3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:73:34:03:f1:09:75:bc:f8:db:ee:47:49:6e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Jul 26 03:00:08 2025 GMT
Not After : Jul 27 03:00:08 2025 GMT
Subject: CN=6774713c0aadbcadc686ad611d8aa75e7eff935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:5e:3e:2e:dc:6a:5f:44:1a:08:cd:f6:0c:
70:09:ce:d8:3d:b1:4f:a0:84:74:5b:31:59:c0:a8:
7c:d8:ad:03:8b:6e:77:75:7c:6e:99:d7:e8:bd:81:
aa:14:8b:c4:f3:8e:b8:e2:e1:dd:1f:d3:3c:8f:bf:
ab:88:e9:44:28:5d:9e:35:e8:66:a3:8a:a3:57:22:
8c:7c:cc:37:f7:07:c5:fc:6b:79:a8:49:32:96:8a:
e8:38:e1:2a:a2:78:2d:1c:bb:b2:84:6a:18:f6:39:
3f:22:ce:79:41:5b:24:b1:a6:76:bd:d5:8c:06:5d:
c6:ad:31:21:18:0e:a3:ca:55:92:c0:26:e1:08:db:
e3:3a:eb:6b:0e:3a:82:92:0b:6c:52:9e:60:82:65:
ad:c5:99:2e:26:65:0f:b7:8a:d7:9d:be:f4:37:0b:
90:6a:ac:2d:0e:14:40:83:9c:85:bb:a6:01:e2:7d:
b5:b3:7b:7f:23:b0:a1:95:5d:f3:c0:c7:92:8d:d9:
c8:52:77:78:7b:e7:73:d8:cb:dc:7c:7b:c4:e6:4b:
5b:cd:e7:ba:3b:9b:3e:50:34:0f:da:e4:8f:34:d2:
aa:7f:97:4b:aa:0b:14:d3:de:3a:f7:fc:b9:d4:11:
dc:ae:27:e2:78:05:00:2b:32:bb:09:4a:42:99:db:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:74:71:3C:0A:AD:BC:AD:C6:86:AD:61:1D:8A:A7:5E:7E:FF:93:5E
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b1:55:15:76:b8:f3:cf:c8:bb:eb:37:ff:95:e8:2f:3a:f2:
f7:00:60:f3:ab:10:bf:2b:ed:7d:d8:72:0d:1d:12:74:a0:34:
61:d2:54:6f:e7:7b:17:e3:a5:01:b9:1a:d7:a1:44:ef:5b:4e:
34:2c:1b:08:8b:e6:26:96:1b:69:4a:bf:2d:27:5b:a4:43:53:
e4:08:38:af:a2:ad:c4:3f:e4:f8:57:7d:36:29:7d:a9:2d:06:
be:43:95:45:85:bd:30:a8:e9:c8:7a:76:55:64:55:07:19:f5:
95:35:ed:d0:7b:7c:83:b9:a4:cc:59:2a:ff:f3:60:32:99:a6:
e9:6b:fd:ab:1d:0f:e2:66:0f:95:9d:3d:c9:95:74:3b:88:b1:
9f:0f:52:6d:05:99:9c:b8:cc:b7:3b:a5:39:8e:9f:bb:d3:1d:
0b:19:73:ca:e4:cb:07:12:96:92:d2:b5:8b:71:7f:d7:35:7b:
d9:9f:fa:3c:fc:a5:e0:99:aa:b0:9b:41:55:78:46:1e:d8:28:
ce:42:87:41:e2:1d:a4:b6:5c:33:b9:82:7e:54:7f:81:f8:2c:
ac:06:2a:33:f3:8b:34:8c:1e:ec:82:bc:fb:33:71:84:1b:2d:
e0:ef:1c:42:9a:0b:ea:1b:f3:0b:57:b3:9b:66:4f:3d:51:ec:
20:4a:f1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:46:39 2025 by rpki-client