Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
File: qag61DyItM5E6CDhFd6cU34qVKY.mft (raw, json)
Hash identifier: HLBMyZuAfpkFoPAZ/PwVr/DfdCn+kqloX5+J2YDbzhM=
Subject key identifier: C1:C6:B2:CD:7E:29:AE:E5:3E:7D:F3:B8:5C:4C:95:A5:76:36:1B:C8
Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
Certificate issuer: /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Certificate serial: 01991809F07A33B7609A8DFA6FDF6384A6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
Manifest number: 090C
Signing time: Fri 05 Sep 2025 04:02:08 +0000
Manifest this update: Fri 05 Sep 2025 04:02:08 +0000
Manifest next update: Sat 06 Sep 2025 04:02:08 +0000
Files and hashes: 1: 3JUWGQsOPBFoC4I-OGs1qaLU-CQ.roa (hash: HAn/ErTzS/Zebt/yY2233fhmAXGMbizcG23F8CM++/Q=)
2: qag61DyItM5E6CDhFd6cU34qVKY.crl (hash: ddgsD0gXYjJjHNSRODMS46vnkGA65eCUVRixxESs2Z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:f0:7a:33:b7:60:9a:8d:fa:6f:df:63:84:a6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Validity
Not Before: Sep 5 04:02:08 2025 GMT
Not After : Sep 6 04:02:08 2025 GMT
Subject: CN=c1c6b2cd7e29aee53e7df3b85c4c95a576361bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:60:fc:9c:72:fc:ad:80:e1:84:52:95:07:
85:1f:6a:74:46:2e:40:df:49:53:66:20:d0:d8:73:
13:57:c1:c9:38:55:71:82:48:5c:5a:eb:02:54:59:
24:d2:6b:9e:a6:76:3c:45:d5:31:42:7f:10:94:d7:
93:97:68:6f:28:52:29:06:b2:0c:80:85:91:d5:98:
6e:01:99:16:da:23:1f:87:49:ed:8e:da:44:aa:c2:
23:db:37:76:85:8c:0e:94:80:8b:f1:b9:14:2d:89:
49:fb:16:de:5d:3e:c5:51:b0:de:1a:22:67:8e:60:
7a:45:97:c3:f8:59:af:35:b4:51:f9:9d:e2:4f:a3:
04:1a:a6:02:db:36:21:2f:59:ef:ec:66:4b:ca:2e:
66:f2:ab:78:f6:3a:61:3d:2b:5d:15:f3:07:80:ba:
20:b7:4c:60:b2:d6:49:6d:74:19:37:0b:ab:5c:7b:
b8:02:ec:51:96:aa:00:fe:db:02:91:ef:07:e8:8e:
47:f0:b1:4f:74:df:02:58:96:11:c4:df:03:19:07:
7a:fe:4d:77:de:56:0d:42:28:06:6e:40:55:d6:5a:
63:43:8f:ef:b5:0d:cc:4b:0d:57:2f:9a:a3:dc:ef:
cd:cf:d4:f5:0b:a5:22:59:cf:87:f7:4a:ac:0b:a6:
9c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C6:B2:CD:7E:29:AE:E5:3E:7D:F3:B8:5C:4C:95:A5:76:36:1B:C8
X509v3 Authority Key Identifier:
keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e1:04:49:8b:f1:de:21:5c:c9:3d:b6:63:31:78:90:c7:df:
0b:07:15:73:27:00:1a:a1:72:02:3e:41:5e:f6:04:1d:b1:51:
2f:14:1a:44:21:d1:87:e5:bf:af:91:91:44:8a:5f:8c:9d:38:
d0:39:13:99:b0:55:60:19:3a:41:9e:9e:89:2c:12:e9:86:b0:
c9:a1:6d:49:58:ee:82:8d:72:ef:72:fa:d8:7c:5d:fa:91:f8:
57:20:7c:02:cb:c3:5b:28:80:a9:a3:ff:e8:a2:6b:22:74:f1:
7b:e4:cf:08:6c:62:16:3a:5a:56:46:a1:c5:ac:85:78:37:60:
47:dc:83:31:35:f7:c9:78:ed:07:38:dd:9f:ee:cb:04:7b:7a:
48:c3:ed:bb:63:08:2b:f4:07:cf:d0:34:eb:4b:2a:5f:bd:07:
84:b0:e8:94:fa:4a:89:0c:bb:de:f7:29:ff:6f:d0:c0:b4:b6:
a4:d5:a9:fa:9d:89:46:91:d0:87:f6:f7:d9:47:4c:fa:01:2b:
3a:d2:7d:a6:03:a8:db:96:f7:51:9d:aa:04:8e:07:2a:73:a9:
d9:20:a3:3f:4b:e0:74:86:4f:b8:6d:0c:f2:cb:d8:2e:64:fa:
3a:ca:71:41:2b:07:76:b3:65:17:ee:55:4f:c3:22:50:5e:44:
44:b7:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:52:40 2025 by rpki-client