Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier: NCH9I95AGy7aJhwhg3mH1nzFRtNG9582W3VIwzBsZpQ=
Subject key identifier: A2:5F:A7:00:F2:77:E7:5B:B0:FA:0C:A9:FA:D1:F7:9C:35:83:AF:89
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 019922C3749CE658D2146809414E8FF8C676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 06:00:58 +0000
Manifest this update: Sun 07 Sep 2025 06:00:58 +0000
Manifest next update: Mon 08 Sep 2025 06:00:58 +0000
Files and hashes: 1: eo9SLFo6ECy5DSd_dzNUwxtWG90.roa (hash: rwEptqLCRKuvmeB6qGhTimOttQv2kDracTxXGRGGlyc=)
2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: 5IC2BT29QOiKZEB9lLRJgYYdxVL8nV04lul6V9nuOv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:74:9c:e6:58:d2:14:68:09:41:4e:8f:f8:c6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Sep 7 06:00:58 2025 GMT
Not After : Sep 8 06:00:58 2025 GMT
Subject: CN=a25fa700f277e75bb0fa0ca9fad1f79c3583af89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:3f:39:21:cb:2c:55:26:89:0e:7c:b4:74:
f8:13:4a:d7:3f:c4:0c:73:bf:c2:4f:eb:7e:3d:19:
b7:d4:8d:b4:05:d1:e9:f5:c8:9b:1a:0b:55:52:87:
10:03:a3:15:64:31:c3:fd:f3:1b:05:be:0a:a5:ce:
b3:af:3b:7a:f3:4f:26:79:ec:0f:18:f5:08:b1:2b:
b3:3b:22:06:53:b5:90:a8:17:5a:db:e0:ce:69:32:
6b:e1:d4:d9:48:8b:11:00:1a:77:0e:bc:79:f7:17:
34:c0:45:23:dd:74:10:0d:b4:c0:7e:0b:55:3d:cd:
4a:95:20:09:27:0f:fc:84:56:14:c1:50:08:d5:02:
81:dc:dc:a8:66:7b:14:6f:84:07:0c:75:77:e9:5f:
58:26:db:d5:4a:c8:12:98:8d:46:3f:f7:5d:a4:e9:
09:bc:2d:54:66:a2:8d:f1:9d:3c:d1:5e:c4:04:55:
a4:31:6b:42:ef:ef:4e:a4:bc:92:9f:1a:bd:7e:1c:
e9:4d:07:23:fa:41:a0:84:7e:63:25:0b:20:81:16:
14:09:34:66:a1:6a:bf:86:f6:fd:51:99:6c:9d:d7:
8b:09:07:25:ce:35:db:f6:8d:2c:19:ed:8e:7e:e9:
6b:be:fe:f4:6d:04:29:b4:39:d5:cc:79:45:43:a6:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5F:A7:00:F2:77:E7:5B:B0:FA:0C:A9:FA:D1:F7:9C:35:83:AF:89
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:53:41:44:cb:c9:f1:42:61:03:3b:8d:a2:a2:cd:48:bc:19:
fc:fc:a5:33:45:5b:20:d3:59:63:c8:0f:51:3a:fa:2c:1e:ec:
70:70:98:55:3d:62:cf:e9:a1:c4:5d:1b:59:73:d9:bb:22:3e:
f5:08:08:71:73:2e:ec:d1:73:1a:92:6c:bc:f6:eb:08:a1:51:
c7:09:e0:3e:14:09:e5:14:7e:e8:9d:02:bd:95:92:2e:ee:9c:
aa:2a:a6:ca:6b:2f:ab:21:45:0f:a1:34:83:d5:cd:b0:22:9f:
ae:96:69:a8:44:5c:0e:66:87:7b:10:8a:4c:7f:3f:db:37:7f:
da:57:32:08:47:49:bc:df:a6:e8:e4:6d:0f:b7:6a:83:bf:43:
03:17:c6:31:b8:5e:0e:fc:0a:98:a3:62:be:fb:35:21:e9:ab:
af:4a:a2:49:7e:e4:1b:3c:76:77:b8:27:c6:52:71:ed:8f:ba:
21:3c:d3:49:bf:c5:6b:f9:24:14:10:29:50:b0:af:49:37:5f:
b7:9c:a5:ca:26:58:3a:3a:31:8c:bf:b9:64:b6:2e:67:cb:c0:
a3:10:20:b5:78:b8:27:26:65:72:fe:95:c2:a2:23:c2:f4:b1:
2f:a2:a0:86:f7:e5:80:fb:b7:73:64:47:e3:ef:7b:3a:c8:8c:
4a:c9:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:37 2025 by rpki-client