Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: L4lnwzNWBsmb/ell9UMM+UkM+gCaKTTrzZtfWOvisqA=
Subject key identifier: 20:06:B7:E3:88:C3:7C:F7:50:6E:BF:DD:AA:BB:1F:AD:48:AD:C9:7C
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 0199228CA28BD6872F2BE81059D5BA236509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 0A0A
Signing time: Sun 07 Sep 2025 05:01:05 +0000
Manifest this update: Sun 07 Sep 2025 05:01:05 +0000
Manifest next update: Mon 08 Sep 2025 05:01:05 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: fqBn6DS/peh2iwF29PZ2Z9JCJbg/CxgRVoExy6MARg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a2:8b:d6:87:2f:2b:e8:10:59:d5:ba:23:65:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Sep 7 05:01:05 2025 GMT
Not After : Sep 8 05:01:05 2025 GMT
Subject: CN=2006b7e388c37cf7506ebfddaabb1fad48adc97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:d1:27:a4:3c:fc:38:08:cc:0e:53:7b:12:
63:ba:4b:5d:77:b8:4f:01:5e:10:db:75:50:e0:1e:
7e:fc:c9:54:8f:09:2c:ff:2c:38:aa:67:d6:77:0b:
b6:a9:49:04:fe:fb:d9:1e:07:b5:36:de:fc:67:b6:
4f:29:d1:66:e0:6f:5f:af:b6:dd:18:ff:7f:fc:4b:
0d:f5:69:78:b6:de:14:44:80:ab:c9:53:de:73:9c:
cc:c7:65:81:bf:03:7d:94:31:04:c9:67:52:33:b1:
cd:4b:61:1e:88:32:0a:c2:ca:2a:ae:35:7b:5d:9d:
90:16:4c:03:c6:89:25:2e:22:1f:29:b7:69:5c:d8:
18:63:9d:4f:3b:c9:09:e0:f6:f5:a6:e5:a1:5c:45:
e6:c7:ce:64:88:34:d0:8c:c8:14:3d:d2:1a:53:6c:
3d:fd:d3:cc:a0:48:59:0e:6d:72:f1:87:fd:01:74:
da:d9:50:5f:0a:cb:79:dc:1e:32:fa:31:05:e4:ab:
6b:95:f6:2c:d6:17:1d:67:ad:68:7f:bf:fc:96:85:
56:4f:44:2c:aa:c4:73:b6:57:fe:c5:69:c9:42:d0:
5b:16:46:fd:88:30:58:31:35:cc:8c:71:f3:a4:bc:
82:86:4b:6e:d5:d2:62:44:b2:4d:a1:cd:10:c4:14:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:B7:E3:88:C3:7C:F7:50:6E:BF:DD:AA:BB:1F:AD:48:AD:C9:7C
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:22:55:09:5b:40:f5:b6:d9:84:4c:8a:fd:1d:54:61:da:2d:
f3:7c:65:0e:e0:e3:52:6b:b5:2d:ca:af:21:4f:2d:a7:7b:f2:
4b:d2:a8:36:d4:33:77:d6:91:8b:d0:82:bc:7b:7a:df:a3:0c:
5d:92:b5:9d:27:20:e2:10:63:d0:26:55:77:9c:e6:d7:dd:12:
54:67:08:6a:d9:7b:44:53:8d:9c:e5:fb:2d:e4:09:50:0b:3c:
b8:b6:2a:29:53:9d:43:d2:4e:f3:a6:28:e0:25:49:2f:37:af:
24:65:fa:0d:66:53:f7:32:95:d1:fa:cc:f3:e8:7d:3d:d8:20:
9d:c9:63:94:88:97:01:2d:06:f2:a5:65:c6:3c:d4:11:19:60:
0c:18:33:50:72:b6:d3:df:34:7d:2d:6b:f5:7b:a1:1b:89:0f:
ed:24:23:9e:01:8b:db:58:cc:8f:81:3e:eb:fd:3e:4f:c8:dc:
38:66:ee:fb:86:58:3c:a3:13:ff:db:d7:37:e1:83:1a:ac:19:
a3:ac:13:47:04:c3:62:b9:f0:41:d9:59:ed:1f:65:90:17:f5:
5a:a6:a2:84:21:7a:b7:14:74:0a:2f:fe:21:97:67:86:a7:25:
89:4b:03:96:3b:af:a5:8c:e2:ff:80:5c:17:25:37:18:6b:3b:
7d:19:37:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:23 2025 by rpki-client