Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: OsG6Dq6GfwlHmqMY8LPHWgJUIHRvpjqSiVvJCTRx0Dk=
Subject key identifier: 21:19:10:9B:0F:D9:83:E9:39:E8:DA:C9:E5:40:C6:82:53:E0:E6:D6
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 0199221EFC0BA0F1F8BE360CD9A6DF297697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0A5C
Signing time: Sun 07 Sep 2025 03:01:19 +0000
Manifest this update: Sun 07 Sep 2025 03:01:19 +0000
Manifest next update: Mon 08 Sep 2025 03:01:19 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: MIz0RmL9oXiiGro0smvSrdBQDghj5Q6VMW1bOohL4lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:fc:0b:a0:f1:f8:be:36:0c:d9:a6:df:29:76:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Sep 7 03:01:19 2025 GMT
Not After : Sep 8 03:01:19 2025 GMT
Subject: CN=2119109b0fd983e939e8dac9e540c68253e0e6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:7f:d3:ce:ed:56:6d:f7:c8:62:3c:e6:59:
a5:da:d0:1c:a9:a9:62:46:14:79:89:c0:34:c1:54:
82:21:13:f3:9c:92:98:ea:f0:d6:d6:d3:67:fc:fb:
20:87:2f:08:1f:11:dd:9e:0c:f7:95:3e:f5:76:ad:
87:de:71:f1:ce:61:5c:b0:ce:ea:51:15:99:7b:d0:
b1:ec:f8:f7:48:f7:33:2d:40:c3:f5:da:a6:ce:01:
0d:12:8c:31:1b:60:d4:78:16:c9:57:b5:91:e1:ee:
6b:b5:ec:64:bd:79:a2:8f:1a:0d:51:00:fe:37:1f:
d6:12:e5:a9:a4:9c:ad:29:be:65:ac:3f:a5:9f:96:
3d:2c:19:72:98:88:16:a2:f6:b4:1a:3e:63:fa:13:
f3:73:3a:e9:8f:17:40:cc:9a:6e:82:46:65:ad:76:
5c:6b:7c:40:77:b2:44:90:fc:f0:e4:b3:38:0c:ba:
b7:91:19:cc:bf:f6:73:4b:24:fc:71:c3:49:f2:9f:
54:d4:f9:1d:63:76:fe:6e:93:e2:a4:71:b3:68:d5:
b2:35:c8:26:6a:73:7b:75:4f:70:25:fe:33:5c:95:
c9:13:2c:ba:15:51:ad:21:df:e6:42:2d:63:20:1a:
18:c4:0f:05:a4:09:3b:7f:17:b3:b7:dc:f0:1c:fc:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:10:9B:0F:D9:83:E9:39:E8:DA:C9:E5:40:C6:82:53:E0:E6:D6
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:60:91:eb:2b:cd:37:32:16:bf:d3:4e:f0:6c:54:fd:d4:8f:
a0:82:f4:02:61:5f:bd:40:df:de:83:b7:80:1b:fc:a0:e9:ba:
01:78:e5:05:05:34:08:13:be:86:b3:bf:d4:c1:6a:4f:5f:d4:
c5:19:47:4d:1d:9b:cd:1f:24:91:35:6e:08:1b:a4:9e:f2:e1:
9c:0f:1d:8f:5b:39:4b:0f:90:4c:c6:29:a0:92:f0:a5:e4:df:
87:0f:dc:34:46:c3:85:5f:db:f2:0a:09:ad:98:87:35:ad:b1:
59:27:8b:cc:36:2a:3a:66:58:be:ac:7e:cb:76:c6:6f:bc:aa:
af:26:ea:5f:f3:c2:98:0b:95:91:7f:a2:3d:9b:ba:bf:c3:9a:
e5:f4:df:08:37:2e:c7:6e:79:0b:0d:5e:26:d4:1a:1a:64:c9:
2d:7d:d7:fa:f7:db:6b:29:0c:49:74:ae:44:88:20:2b:20:20:
19:0f:a9:dd:0c:c3:18:96:43:4e:1c:e9:c0:db:1d:b3:09:60:
af:cf:84:36:d0:8f:1e:ed:b3:bf:ea:ad:7b:c9:ae:0b:7e:88:
97:27:79:c3:fd:f5:01:b5:8a:39:6c:27:1f:04:5b:7d:ee:71:
00:2f:39:c0:f9:e4:99:e0:6b:2b:7f:9c:fc:79:93:1c:f2:67:
be:7a:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:53 2025 by rpki-client