Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
File: qJKcs0O9888gTEBa8KVTPqSwkzw.mft (raw, json)
Hash identifier: tMOZD2D/Y9so6TyVwxOiyNne0CMAWVjc5pFiyEE2gfI=
Subject key identifier: C5:5D:4C:0D:BD:4D:5C:3F:A4:8D:A8:6B:87:24:38:39:A9:1B:DD:F9
Authority key identifier: A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
Certificate issuer: /CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Certificate serial: 019922559E6A836F46959B1544932613416E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
Manifest number: 0BE6
Signing time: Sun 07 Sep 2025 04:01:00 +0000
Manifest this update: Sun 07 Sep 2025 04:01:00 +0000
Manifest next update: Mon 08 Sep 2025 04:01:00 +0000
Files and hashes: 1: 8nlWTKhyMjB_CH2EMsOrSJHd2IE.roa (hash: mJ1SJpAndBJG+LB/ssF0bKHufcREx+RUY5ZeHveZh6w=)
2: qJKcs0O9888gTEBa8KVTPqSwkzw.crl (hash: p/x9SymazTYzfX/yNiUbpXr9li4CLryXQqF8fUtS+l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:9e:6a:83:6f:46:95:9b:15:44:93:26:13:41:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8929cb343bdf3cf204c405af0a5533ea4b0933c
Validity
Not Before: Sep 7 04:01:00 2025 GMT
Not After : Sep 8 04:01:00 2025 GMT
Subject: CN=c55d4c0dbd4d5c3fa48da86b87243839a91bddf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bb:03:7c:8c:6d:4a:5b:9b:b8:09:2d:9a:77:
b2:a9:24:81:fb:bc:e1:69:84:49:a5:cc:fb:74:a6:
39:0e:e4:ab:1e:67:91:2b:4b:af:1f:33:aa:0e:dd:
8a:27:b8:cf:a9:0b:9e:74:a4:db:cb:e4:8c:1e:0d:
8c:67:f1:78:22:d9:4d:b7:b9:d9:b5:52:5b:9a:ba:
59:b5:34:af:a0:3f:3d:29:3a:7c:58:4a:bc:48:54:
00:22:1e:99:f5:0a:be:df:90:89:04:06:d9:31:89:
1b:f2:90:e0:5b:f5:06:66:e1:50:09:34:ed:ea:b4:
14:40:a7:16:11:06:96:f8:3f:c0:0f:46:1b:5e:72:
61:e7:dd:f7:b4:fe:a5:cb:c5:6b:c1:dd:1b:c8:7c:
3e:b3:34:cd:cf:ef:38:f7:a9:50:61:15:a9:42:d8:
a7:c3:73:b0:b9:03:06:60:4f:d8:34:e3:e3:17:e0:
03:91:24:27:10:45:65:74:56:4b:c8:7a:ef:06:e7:
ce:62:8f:2e:4f:a5:2e:13:14:b8:49:f5:b9:e9:a8:
0d:f7:c9:2f:78:1b:34:57:c0:e3:bb:45:04:01:53:
07:05:03:95:c7:b2:c9:c8:b0:06:5d:b5:0b:e5:ab:
b0:e5:0b:37:e2:3e:58:4f:33:9c:3c:75:1f:f6:08:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5D:4C:0D:BD:4D:5C:3F:A4:8D:A8:6B:87:24:38:39:A9:1B:DD:F9
X509v3 Authority Key Identifier:
keyid:A8:92:9C:B3:43:BD:F3:CF:20:4C:40:5A:F0:A5:53:3E:A4:B0:93:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJKcs0O9888gTEBa8KVTPqSwkzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b7cc36-777e-44b9-ad62-59d44ef7e4ff/1/qJKcs0O9888gTEBa8KVTPqSwkzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a0:e6:81:15:b9:d6:c2:a4:2c:7a:02:0b:15:6b:4f:0a:dd:
68:b9:1e:62:48:1c:b1:38:1e:0d:af:23:4d:f2:65:98:a0:20:
63:a2:b5:81:bd:77:81:61:72:e2:1b:67:73:ca:5d:82:0d:c0:
68:e9:45:3a:fe:44:04:fa:c5:77:83:7a:35:fe:a0:2c:62:69:
55:07:57:d2:cd:31:de:02:4d:d6:d6:90:cc:8b:5c:c1:65:27:
29:7e:3b:dd:49:a4:1e:20:85:e4:77:a1:a7:ad:bd:65:d1:e7:
ea:5b:2f:f6:62:dd:d4:12:d9:22:06:ec:36:f4:3f:e5:11:f6:
9e:33:ca:2c:5e:27:84:17:4c:f2:37:f3:d7:a3:2f:9e:2c:99:
86:9f:62:bb:07:10:ac:90:9e:76:a0:53:e4:dd:01:70:c1:40:
ba:ad:25:85:59:94:04:c9:f6:06:d1:a1:27:ab:a7:34:16:60:
f8:b3:f2:e5:21:61:9c:60:86:7c:d7:73:b3:ac:8c:53:60:8d:
f6:68:a4:b8:12:5a:1f:91:48:24:cc:4e:00:87:07:38:34:d0:
f8:2c:71:68:56:a4:61:91:65:2e:81:7a:51:8f:f2:e3:1a:1f:
a9:ab:87:56:0d:14:f6:42:46:07:5b:07:6a:41:6f:30:a9:79:
68:8a:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:25 2025 by rpki-client