Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File: qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier: 2uPLm2/31Aj3UmwGeaPa8vo8MUfcAb30YKKhlU+h47c=
Subject key identifier: 1F:56:52:61:7E:64:EE:84:C8:B2:4D:41:8B:E6:A1:12:1F:0F:5C:F3
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 0199221EB18ED52665D92371D5B2413BAD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number: 10EA
Signing time: Sun 07 Sep 2025 03:01:00 +0000
Manifest this update: Sun 07 Sep 2025 03:01:00 +0000
Manifest next update: Mon 08 Sep 2025 03:01:00 +0000
Files and hashes: 1: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (hash: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=)
2: X_mEYYeWr9-8-K3hPb_xZPAlhyU.roa (hash: 6DNXGEiBb6ULQJ057yIjE1b50LAb3WIwVPg+KL0u4Kc=)
3: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (hash: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=)
4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: RJ4PRyVAA6hZLl4QorFAyyH5A2GyfNgS1endIwotPLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b1:8e:d5:26:65:d9:23:71:d5:b2:41:3b:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Sep 7 03:01:00 2025 GMT
Not After : Sep 8 03:01:00 2025 GMT
Subject: CN=1f5652617e64ee84c8b24d418be6a1121f0f5cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:97:d9:d1:77:2f:d7:e4:ca:29:95:9e:2f:
51:96:c2:e5:2a:21:00:18:f4:0c:ab:94:2f:32:3c:
87:78:a1:0a:d7:02:62:56:a4:85:13:e0:a7:29:5e:
17:aa:f2:d7:bd:9a:62:d8:f9:e0:b5:e5:28:12:b6:
73:4b:98:d3:19:d3:3d:96:36:61:ab:3a:13:73:ac:
1d:74:0b:d7:b7:54:07:bd:c9:64:06:22:8e:f1:f5:
3a:91:e9:4f:d2:8c:c6:46:99:9d:e3:9d:a4:41:e4:
c4:b1:51:d2:35:1d:76:b1:ad:75:0d:9b:d0:7f:43:
6e:a1:99:99:0c:55:79:8c:69:a1:e3:52:df:dd:2b:
e2:44:1d:a8:f2:85:3c:9d:87:db:c3:c5:7e:23:40:
11:42:ae:99:56:a7:95:d7:5d:9c:22:7b:2d:f0:ed:
8c:8a:46:08:e0:09:c6:84:bb:f1:54:7f:d6:f0:7c:
0d:b4:88:06:2c:0a:81:60:f3:55:1a:d7:ab:74:8d:
92:23:b4:ba:72:17:77:49:0d:56:ee:4a:82:eb:e9:
ec:8b:df:1f:66:53:fc:e1:8e:ef:c6:47:a5:ee:12:
ee:25:4f:e1:2c:76:39:87:ef:83:80:1c:18:e3:12:
bd:3f:bc:9e:50:34:63:67:65:3e:33:bc:70:8e:3b:
c3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:56:52:61:7E:64:EE:84:C8:B2:4D:41:8B:E6:A1:12:1F:0F:5C:F3
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:89:35:b2:f3:ab:65:a6:d6:01:95:83:04:a7:5f:cb:b9:64:
0c:2f:a0:b4:40:23:82:ca:e2:ad:4c:60:52:7f:ef:c3:ab:18:
33:d5:6a:31:34:31:e3:74:17:a4:ec:67:4d:52:4c:9c:fe:c6:
bd:75:49:eb:38:d5:0b:fe:44:b3:13:88:2f:11:5f:8f:12:a0:
37:cd:e9:b2:ab:17:d1:30:4a:1f:03:e6:05:47:2c:c0:4a:dd:
ac:fd:82:de:2d:72:7d:27:90:89:c1:1a:49:19:8f:81:c7:8e:
35:f9:cc:63:01:03:dc:d7:ad:89:9d:55:f9:38:dd:3b:61:34:
00:d8:07:05:e0:5d:7d:a4:96:ce:c3:4c:2e:9e:32:06:b9:02:
7a:e8:88:e0:60:82:60:1d:66:64:3c:51:f5:e2:94:a5:fd:92:
35:9a:9e:42:41:e3:85:be:37:7f:08:df:2c:f4:83:86:90:40:
39:f9:b7:a1:c4:e7:24:d1:27:85:ca:2c:ea:93:fd:91:96:03:
2d:1b:05:6a:8a:5a:e0:a9:23:55:00:3f:f3:3b:50:a9:69:69:
c6:d3:1a:65:af:4b:c5:39:de:19:e4:c2:51:4d:23:f7:96:c7:
8a:41:74:ee:24:88:76:2a:40:04:4a:43:c2:4d:73:a9:bd:79:
5b:9b:87:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:31:37 2025 by rpki-client