Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: XdHC7ZYuz+6vVEqRDnffnzz07y8GDU0nXtewGMzzUvg=
Subject key identifier: C3:64:92:D0:D8:9B:BC:2F:D0:DA:2C:63:9A:F5:BE:5D:E9:A7:36:F9
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 019933809FB0BB07AADBCFB47565705241E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 1359
Signing time: Wed 10 Sep 2025 12:01:31 +0000
Manifest this update: Wed 10 Sep 2025 12:01:31 +0000
Manifest next update: Thu 11 Sep 2025 12:01:31 +0000
Files and hashes: 1: 3uOrqvmP8Ja1Ais3wLBFc-Yv8js.roa (hash: exOhjbpn5m/SyHb+kmTmnk1GW2qg2u8lsLmmerL5o9w=)
2: IzP3cDAX9aykSDzKdoH0u3AyA2M.roa (hash: NC8YDjUxW5EM3pV7QmdgO/vAJ9HwNpXuNP3EpqENObk=)
3: f2dJVu8muGYFnZFPcMivMl98KP8.roa (hash: rWmOSQ2QhYKl4L1IyTfTDLKWAGfQI+Kz8vdUqnsATxs=)
4: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: PhONZEk2RkqnjJS9yXRMqUEaUJ6jqwllxicxD8cKRLE=)
5: svOlfPLlFDJ0sGLcz6b_IG_H3W0.roa (hash: zsvLBGGbQT+oIT4diXH9qGrVZIYbNUKP7yL6prMLg/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:9f:b0:bb:07:aa:db:cf:b4:75:65:70:52:41:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Sep 10 12:01:31 2025 GMT
Not After : Sep 11 12:01:31 2025 GMT
Subject: CN=c36492d0d89bbc2fd0da2c639af5be5de9a736f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:0c:00:83:25:99:f0:23:94:26:b0:55:69:
0c:f0:f2:85:4a:18:a9:d9:46:b6:c1:65:c4:c9:ad:
80:d3:9e:7d:8d:0b:56:0c:29:d9:f6:9a:08:ae:de:
88:7c:9f:68:39:ad:f7:8f:e9:cf:62:8d:9e:5b:0c:
58:de:64:07:b2:61:07:2c:4e:54:69:7d:bb:e9:db:
5a:f8:74:7c:d4:6c:a7:22:3c:19:e8:a2:5c:6a:c2:
3d:64:55:e3:65:18:c7:4a:7b:94:a2:c7:4d:59:f2:
c6:9e:21:8b:32:7a:2e:15:3e:31:37:57:32:b9:2c:
73:b6:8e:7e:1e:2e:75:80:9d:c3:84:39:80:fd:43:
e6:e9:03:d0:fa:6e:5f:62:68:26:bb:13:0f:f9:20:
28:78:14:4c:76:f5:62:ad:0b:2f:23:7f:df:22:59:
87:c4:5c:00:83:4f:f7:08:25:9a:9d:20:e8:b5:02:
11:33:8e:48:4e:0d:e2:ef:1c:fe:11:c0:d3:30:b2:
d9:24:7b:2d:c8:2e:1e:02:7d:3d:b5:c7:d5:f0:67:
4b:d6:86:31:6f:5f:d3:38:c9:c2:c5:99:0f:8d:4f:
e1:88:8b:b9:34:9a:e2:8b:33:6d:78:bf:f8:dd:8f:
0a:77:50:44:51:0c:07:0f:30:ef:82:f8:70:22:7f:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:64:92:D0:D8:9B:BC:2F:D0:DA:2C:63:9A:F5:BE:5D:E9:A7:36:F9
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1c:a9:84:fc:1f:97:8b:c0:83:c2:5c:26:40:e1:1f:85:76:
6b:83:bc:36:d4:58:ec:d3:af:25:e5:bb:df:1e:6f:6c:97:11:
34:7f:bd:1d:fb:c6:a3:7f:4f:69:f6:c6:ff:ba:14:6a:ae:23:
50:09:e8:a3:cd:30:c2:8a:8b:67:d4:6f:59:38:c4:c1:74:23:
e9:98:74:25:42:20:45:c1:1a:93:31:78:07:05:49:db:ca:50:
ee:f1:06:28:07:7f:01:1b:95:c2:43:68:59:4b:4e:5b:77:86:
25:aa:22:3e:e9:39:c0:25:6e:22:94:dd:93:4b:d0:6e:97:e7:
b9:52:8f:63:9e:7b:5d:e1:07:40:18:bc:74:22:f9:1e:13:56:
3d:5c:8a:4c:cc:ed:69:65:4a:8d:83:ed:17:3c:47:6c:88:ba:
1c:b9:8f:8b:5e:d1:cf:92:f0:64:01:a1:ce:44:42:96:a6:0a:
8a:32:e9:fe:e6:c7:80:dd:83:82:f7:52:33:e3:19:4f:6f:2b:
a5:46:cf:73:b8:7a:a4:f4:6e:96:db:b7:fa:f9:bd:23:e9:83:
a2:bd:1c:64:98:85:28:2b:8a:f7:92:d4:18:77:79:5c:2b:09:
73:98:95:13:7f:5b:ce:a5:94:d9:4b:f9:91:71:5e:81:60:9b:
2f:e6:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:22:27 2025 by rpki-client