Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: z8MyrVx8ZupF+Il6Cjk5Xb/x23tvIhZUI8IWM0XQNLg=
Subject key identifier: 48:CE:03:63:68:B0:EF:F0:42:8A:3A:31:93:B5:E8:4F:68:CA:82:E7
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 0199179A7B1A282630047353EA40860FFA53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 02:00:23 +0000
Manifest this update: Fri 05 Sep 2025 02:00:23 +0000
Manifest next update: Sat 06 Sep 2025 02:00:23 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: 24dtclv9cuUcStlEc4LnDWPL/s2wvDUxrY+K1/UT7gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:9a:7b:1a:28:26:30:04:73:53:ea:40:86:0f:fa:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Sep 5 02:00:23 2025 GMT
Not After : Sep 6 02:00:23 2025 GMT
Subject: CN=48ce036368b0eff0428a3a3193b5e84f68ca82e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:00:67:8c:c4:9e:7f:02:08:d7:00:9f:34:
40:1c:fe:6e:3f:a0:90:6a:18:e0:75:d3:a3:ad:24:
ef:f0:d9:de:13:80:e8:5d:b2:c0:65:0c:c2:d6:dd:
c8:db:d0:20:85:64:dc:1b:ce:16:08:4e:4f:15:68:
5b:97:36:8e:98:e7:18:81:74:cc:ab:18:50:7f:cc:
e9:3c:df:c5:9d:3f:29:a6:10:ea:fe:90:07:cf:33:
81:6d:ef:d9:74:d8:a5:e5:8d:22:c5:25:85:3c:6c:
ff:e0:89:ee:44:58:f4:3d:80:92:03:93:23:8a:9e:
3f:b4:0d:89:fe:97:b3:29:8e:62:19:9f:4f:fb:e9:
1a:9a:e0:05:67:7a:19:23:29:46:80:29:99:2a:99:
fc:d6:03:45:2a:7e:1a:f2:2b:0b:42:67:55:30:cf:
d8:b0:4e:97:8c:17:93:f9:a2:b1:03:e0:5b:c9:1f:
9a:91:fc:43:29:96:e4:d8:f7:41:8b:9f:ab:b3:de:
73:ed:9d:d3:cb:b2:ea:e6:9f:af:28:70:02:4e:15:
00:f7:45:5d:42:83:64:1c:e3:fd:48:1b:80:dd:17:
21:40:72:2c:05:93:10:7b:b0:6c:ec:7a:d8:78:81:
a6:eb:55:b7:74:cf:ac:dd:6a:d0:b2:ff:17:e8:24:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CE:03:63:68:B0:EF:F0:42:8A:3A:31:93:B5:E8:4F:68:CA:82:E7
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3c:ea:71:8b:28:36:0b:be:2c:b6:f4:b8:36:5c:01:bd:2b:
a0:37:82:66:35:72:d2:d5:ad:13:d7:e0:71:ff:05:37:18:b1:
fe:b2:ae:f8:35:cf:52:22:6a:5a:3c:7c:73:ad:02:2c:04:a4:
68:3e:3c:05:11:89:a9:e4:2f:0d:f1:b2:90:6e:7c:eb:01:9e:
df:57:2d:1e:a3:5b:87:9f:a8:cf:b8:ba:97:ad:dc:3f:3d:95:
6e:24:a5:c5:22:15:98:23:50:b9:3b:aa:08:54:11:a1:d8:2f:
4a:0b:4c:13:cb:3f:a9:0c:3d:c6:ba:48:02:18:f9:db:b8:3d:
c5:25:88:55:76:a3:31:52:40:67:4b:40:07:ba:e1:b3:7e:27:
61:34:2d:29:ce:4f:32:b1:f2:81:dd:8a:ec:c5:88:f7:d2:67:
88:61:22:f5:d2:94:f1:35:95:14:49:f7:0c:d9:89:5e:c8:7b:
38:9f:6e:83:31:e4:62:11:d6:e0:8e:47:a8:c6:0a:24:35:73:
45:19:f2:0d:d1:87:b8:ca:73:87:63:e2:fe:2a:51:2c:c4:43:
20:bb:fe:66:02:a9:00:1f:a0:15:99:59:26:2d:69:39:c4:81:
2f:62:e1:76:7f:08:6c:0a:22:08:a4:79:c3:b9:a2:5a:20:7e:
b0:91:35:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:08:14 2025 by rpki-client