Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: 6rwpB6+cPqQr7PmEQij8FFVmkQtFXqfl0U3p4EN80Rs=
Subject key identifier: B0:64:06:A5:01:90:7D:5F:8A:5E:3B:36:C9:21:B1:F2:E2:03:09:D5
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019A1F1A862ADC269E6800131B7DF5EE36F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 0297
Signing time: Sun 26 Oct 2025 06:00:23 +0000
Manifest this update: Sun 26 Oct 2025 06:00:23 +0000
Manifest next update: Mon 27 Oct 2025 06:00:23 +0000
Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: XgGg/+mRQ01PI81keo3WxUNJ6audv5GhtTIEdVsCXKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:86:2a:dc:26:9e:68:00:13:1b:7d:f5:ee:36:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Oct 26 06:00:23 2025 GMT
Not After : Oct 27 06:00:23 2025 GMT
Subject: CN=b06406a501907d5f8a5e3b36c921b1f2e20309d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0f:60:65:e1:95:69:d8:fd:1c:de:c2:e3:8c:
12:63:23:d3:32:94:73:e9:6f:9a:55:df:66:c7:f6:
a9:43:c8:be:45:1e:8e:0a:ea:a3:69:ac:c1:5b:50:
33:1f:49:0a:82:6a:90:1d:de:56:30:90:06:90:20:
a1:36:39:66:73:3c:67:22:d2:8b:c5:1a:a8:f0:96:
ec:de:83:e9:76:d5:1a:42:0a:c7:e3:81:cb:7b:7e:
9a:ab:a8:3a:8f:97:6e:da:26:e7:98:3c:ff:8c:d8:
86:4a:11:fd:58:39:68:6a:94:24:fa:62:7d:f3:db:
81:04:f7:55:9c:e9:de:b2:be:48:62:48:a4:c1:96:
0e:97:03:4b:12:7f:d5:2f:3c:61:c2:2c:c6:0e:6c:
09:68:3d:71:50:55:cd:73:84:53:65:ec:e8:19:5a:
17:33:d1:a0:9b:5f:15:84:30:24:56:c1:98:e0:4b:
df:35:d0:c4:89:c9:3d:6b:43:2b:ab:5c:5d:91:59:
f8:46:c9:3e:f3:99:0b:f1:49:68:66:ce:16:b0:5e:
47:5c:f8:5c:81:22:fa:1e:ca:4b:59:93:79:46:90:
0c:b7:64:ea:ea:17:ea:f6:15:94:16:79:40:ed:5a:
80:cd:03:e4:92:63:46:08:6b:58:14:c4:0c:9a:19:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:64:06:A5:01:90:7D:5F:8A:5E:3B:36:C9:21:B1:F2:E2:03:09:D5
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:37:ad:e8:90:b5:3b:31:21:a4:7b:6a:a6:38:6e:e3:c4:
a1:b7:7d:26:9f:d2:47:26:3a:34:05:f1:72:09:40:36:3f:d8:
e3:58:22:85:e8:4d:b5:23:f8:da:ea:b4:55:b0:c6:7b:f9:4b:
8b:d3:90:31:5b:f3:80:33:b6:e7:86:20:a7:a1:20:e1:dd:eb:
54:2d:e9:01:65:b9:8f:ab:0a:c1:5b:fa:9b:8c:81:d3:fa:ac:
6f:69:5e:c9:44:ac:8a:d8:52:60:e1:ae:24:e8:68:e2:59:04:
b1:09:af:ac:bf:20:9c:44:0b:42:ce:54:6b:94:9b:39:93:05:
0f:ad:3f:57:45:b0:3d:e2:76:ef:63:0b:ea:56:ff:0f:6a:83:
8d:70:f6:54:48:f5:f7:d9:f8:ca:4f:8d:84:a3:fc:44:af:ca:
01:58:96:c9:dd:5a:df:82:50:b5:43:b4:9e:4d:43:d3:83:9e:
2f:1a:b2:f6:f0:5b:73:5b:0d:78:4f:e7:4d:79:68:89:d4:b1:
6d:f0:b8:0e:08:33:f7:2a:72:ae:fa:84:0b:a5:fa:31:06:a9:
13:13:94:51:eb:3d:71:2c:65:ad:9d:bd:4e:09:bf:c9:79:24:
c1:ee:77:c5:92:ff:fe:09:9d:65:c8:25:8e:22:60:78:32:f9:
ad:eb:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:50:01 2025 by rpki-client