Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: MocTJGjeCtl/9bpw6YymP/yDW4slr88seAqVUGYBeOI=
Subject key identifier: 96:B5:56:0F:7F:DF:45:1D:00:E2:56:A7:8E:77:2B:D9:F1:D1:AB:FD
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 019931918316A30AF10A278194B459F0876A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 021C
Signing time: Wed 10 Sep 2025 03:00:43 +0000
Manifest this update: Wed 10 Sep 2025 03:00:43 +0000
Manifest next update: Thu 11 Sep 2025 03:00:43 +0000
Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: yThNW6U0FFVfWgkDEaa+7lE53PjTkLaGBIoWF04v2NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:83:16:a3:0a:f1:0a:27:81:94:b4:59:f0:87:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Sep 10 03:00:43 2025 GMT
Not After : Sep 11 03:00:43 2025 GMT
Subject: CN=96b5560f7fdf451d00e256a78e772bd9f1d1abfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:23:2e:90:a6:58:17:be:2a:53:7b:35:1a:65:
89:5b:79:58:c5:f6:86:41:ad:6e:89:f2:c5:f8:02:
41:31:b0:d6:0b:d5:35:ff:68:61:87:59:92:51:55:
40:66:8c:99:11:bd:39:ae:73:c7:8e:3a:b8:9e:2b:
c6:13:c1:53:7a:c1:33:3a:81:86:3a:db:90:d5:56:
6d:07:93:bd:89:f9:aa:45:7f:2a:e7:cf:4f:61:70:
59:d8:96:12:28:6c:15:e0:98:96:fa:3f:a5:da:06:
0e:65:7f:52:68:26:cc:b4:cf:9f:0c:99:12:50:89:
84:57:57:9e:35:26:2e:8d:6f:db:96:9a:aa:68:ba:
a6:62:c5:ab:69:b8:e0:d4:19:2e:64:fb:7d:e9:a9:
19:fd:e1:c9:d2:f2:62:70:f9:57:19:42:c5:0e:84:
e1:1e:33:e5:bf:9b:30:36:6c:b1:d5:89:29:5e:a6:
c6:9c:21:e5:df:52:2f:88:d9:b5:05:c0:3c:9e:22:
bb:9f:82:a1:bc:40:e1:de:c9:26:a7:e8:2c:bf:61:
37:7a:7d:84:45:8c:ae:d5:36:66:2d:82:d6:d7:88:
23:fe:93:9d:16:59:d0:9b:44:73:d5:0f:4e:23:c2:
be:45:8e:ca:4b:c5:85:40:7a:1c:ab:69:29:3c:0c:
19:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B5:56:0F:7F:DF:45:1D:00:E2:56:A7:8E:77:2B:D9:F1:D1:AB:FD
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b5:18:82:ab:26:16:ba:bf:10:20:bc:4d:c9:70:ee:3e:78:
ce:1a:6c:31:c8:3f:62:e2:77:d9:ca:22:8c:91:be:be:e2:f2:
c8:9a:a4:c5:25:34:a2:55:42:45:32:f9:0e:65:87:01:4a:9b:
e3:73:18:7e:a5:06:db:e6:51:14:82:61:87:8c:cd:24:69:76:
15:86:5f:c4:12:dc:51:3a:7c:af:36:2c:d8:bc:99:37:57:27:
50:f9:1e:96:da:10:d4:6f:bf:ed:f0:10:f3:96:b4:9a:be:a9:
55:e8:55:a3:a2:66:d6:38:c7:ad:a7:c6:69:f0:94:73:72:8c:
55:f6:ca:b6:ef:56:eb:59:01:46:ab:ce:d1:19:56:49:33:dd:
48:a8:bf:08:e0:84:66:6a:58:da:91:55:2a:16:0e:3a:eb:82:
f0:37:b8:f0:0e:af:39:df:1d:a6:af:f0:57:ae:c4:76:2f:50:
f0:0a:e9:ff:87:9e:22:0f:a8:54:29:ab:e1:e1:83:19:e9:81:
3d:5b:05:58:73:c2:0c:6b:39:d3:90:a8:71:f2:12:8d:6a:3e:
c6:eb:c6:66:35:87:d4:69:e2:72:22:7e:7c:02:7c:f8:14:41:
98:57:2d:2a:59:7e:c2:ab:00:43:2e:82:61:8c:ca:45:b9:05:
11:3f:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:22:34 2025 by rpki-client