Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
File: qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft (raw, json)
Hash identifier: CJcwtPL2ocWfY4jxWMqyQiDVc1KtEkTRKAdhgF3662A=
Subject key identifier: C4:30:85:D8:74:53:FC:E1:B6:2E:45:9E:E7:6E:1F:0D:01:DB:24:1F
Authority key identifier: AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
Certificate issuer: /CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Certificate serial: 019A0ECB917814A008A194747B0D8C8E4100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
Manifest number: 16EA
Signing time: Thu 23 Oct 2025 02:00:13 +0000
Manifest this update: Thu 23 Oct 2025 02:00:13 +0000
Manifest next update: Fri 24 Oct 2025 02:00:13 +0000
Files and hashes: 1: 6IkTOlXjuiMiUAcYz6JmNLyjzkI.roa (hash: lvYkGWBMeYPfRVhHecKPB+lCXAgyiJ169VcA0wekGsU=)
2: e4TuQp4c2N02mdWdlxAx2GM5rFg.roa (hash: TkgW2WEclpl44YPmskP1q4vEinXMPrmbVI0ndJ9d/ec=)
3: qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl (hash: FtaXVKbPkqOkW3PKb+91VMCRU7mwqNICsq3kceI9sqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:cb:91:78:14:a0:08:a1:94:74:7b:0d:8c:8e:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3aed91f29b2cc7d3e05f240d99137581d9b5b3
Validity
Not Before: Oct 23 02:00:13 2025 GMT
Not After : Oct 24 02:00:13 2025 GMT
Subject: CN=c43085d87453fce1b62e459ee76e1f0d01db241f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:88:fc:54:20:f4:a0:cd:0d:c2:2e:ee:fc:
1e:2a:3e:3c:17:e3:d0:a5:28:b0:50:03:b8:ef:09:
a8:2d:4e:1b:c2:7e:0e:66:8e:c6:af:50:83:70:26:
44:3f:89:c3:98:81:eb:11:a2:95:bb:50:08:4a:83:
dd:f0:22:b3:d2:c1:26:03:87:80:83:2e:9a:9d:08:
f6:96:6f:f7:ef:a4:12:c4:e1:86:3a:37:91:88:34:
e3:fb:42:a7:50:db:cb:d8:86:dc:fa:4d:e5:2c:e8:
22:2e:92:8e:a5:e9:48:90:a2:4b:6c:58:09:0d:b2:
5c:92:59:6e:93:0b:75:00:4e:e4:76:43:7d:34:d0:
a4:84:84:84:65:4d:dd:f7:86:d5:a1:7b:72:8d:4c:
b7:d4:67:6e:6c:40:a6:52:1c:a3:07:f1:50:57:9f:
83:2d:29:ab:50:7b:d6:5a:78:aa:99:25:1d:71:d3:
25:24:df:81:cf:3b:95:01:09:ef:b8:31:84:f0:ed:
45:b6:0e:8a:1d:a2:c3:54:d2:9a:6d:34:ef:45:42:
58:07:62:c6:21:58:f7:7a:4d:92:90:6a:f6:bf:ca:
60:d8:be:b8:04:d6:9d:a8:de:5a:a3:2c:7e:8c:f4:
24:ae:49:b3:73:0b:38:f1:e5:ec:c8:20:ff:3b:59:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:85:D8:74:53:FC:E1:B6:2E:45:9E:E7:6E:1F:0D:01:DB:24:1F
X509v3 Authority Key Identifier:
keyid:AA:3A:ED:91:F2:9B:2C:C7:D3:E0:5F:24:0D:99:13:75:81:D9:B5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjrtkfKbLMfT4F8kDZkTdYHZtbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e0f63-ef7a-4662-b046-04e1eb2a9328/1/qjrtkfKbLMfT4F8kDZkTdYHZtbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:79:92:1b:96:3c:a3:d9:41:73:de:a6:7d:ec:61:03:4c:94:
92:7c:76:ae:fe:d2:48:31:03:09:51:e6:fb:42:49:04:0f:9b:
df:69:41:9f:2e:e1:bc:45:21:42:3c:c8:0f:5e:04:40:19:db:
98:6d:3d:e3:99:0f:88:44:2f:d7:66:57:d3:d0:20:d5:15:c0:
06:bd:d5:57:de:d1:9c:c9:8d:c9:22:b7:89:9b:52:46:dc:74:
4c:33:1e:0f:45:15:16:9a:49:0f:e0:25:1c:ab:de:c7:51:47:
17:06:18:53:e8:b4:9b:57:ae:25:f7:73:59:ed:59:db:0a:65:
ae:db:f0:fc:25:8e:36:ae:dd:77:46:05:11:0d:c7:37:f0:a0:
dd:46:73:83:9a:cb:56:74:be:76:65:aa:11:af:c6:5a:a2:10:
98:c3:c4:bc:97:d1:46:41:1f:f8:45:4c:51:74:ca:d0:30:05:
5c:63:09:3f:26:75:f6:ed:3e:d4:bd:e5:b6:d6:23:da:60:e5:
b6:3f:0a:09:15:fd:b8:a4:39:11:e2:32:ab:22:4b:f7:2f:9c:
9a:2e:ce:a8:8a:d2:eb:e4:13:92:d8:83:34:3d:9d:45:6a:78:
22:e9:e4:7c:75:d6:c8:f9:1a:82:18:40:d8:78:88:39:78:05:
20:c8:61:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:06:19 2025 by rpki-client