Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: ciHvHJq976DAQsTpj3IoTuSxFcyvRnx9Ma7xj6vqZg0=
Subject key identifier: 90:CD:54:32:EC:6A:FE:D7:74:A8:2E:DF:AE:06:AC:6E:4D:94:0A:0F
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 01995A206E1EA8EFBE8E7719F38E87A9A892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0D23
Signing time: Thu 18 Sep 2025 00:01:38 +0000
Manifest this update: Thu 18 Sep 2025 00:01:38 +0000
Manifest next update: Fri 19 Sep 2025 00:01:38 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: vZlpbS6wAnKQ4BdOaggvhriyIIg/+SmPNZgVceQavFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 21:38:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5a:20:6e:1e:a8:ef:be:8e:77:19:f3:8e:87:a9:a8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Sep 18 00:01:38 2025 GMT
Not After : Sep 19 00:01:38 2025 GMT
Subject: CN=90cd5432ec6afed774a82edfae06ac6e4d940a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:57:f5:d9:c5:7a:88:62:42:6b:12:81:cd:
6e:d1:db:94:4d:f1:91:6e:8b:be:2f:c9:93:16:d8:
d7:dd:1e:8c:60:fe:47:48:be:ec:ca:c9:92:bd:b0:
82:df:28:f2:b9:e3:20:2f:a0:b5:62:c9:f7:b1:da:
f9:f3:3a:00:25:bf:00:5a:fb:fa:1b:2e:ac:41:1d:
c4:62:6b:98:f9:98:3e:8c:95:ea:5b:df:d0:9b:cb:
e9:f9:43:06:cc:67:56:4b:72:59:54:80:5d:53:d4:
88:24:0a:af:7d:52:2d:a8:53:76:2c:9f:fe:71:22:
08:a7:f8:9e:ce:2f:1b:2a:ba:77:11:96:3e:e7:1b:
2d:2e:4a:35:50:47:f7:cd:1b:7f:b0:f6:b9:a8:7b:
94:2f:8d:7a:1d:a9:39:80:b8:0c:ca:58:34:6b:7e:
1e:0b:27:99:3a:f2:5d:8b:c0:03:a7:99:79:f3:c2:
ef:cb:3a:28:dd:83:42:c2:9d:0e:8f:fc:6c:23:03:
32:56:71:d7:4e:67:ee:18:d0:ea:c7:41:a7:e8:cf:
c8:70:9b:1a:08:1c:63:3e:a0:01:3b:78:92:4f:f9:
d5:2b:20:5a:13:da:32:1e:60:69:e2:54:00:b7:6f:
84:a8:64:b6:67:dd:03:9a:29:d0:bf:09:17:a3:3a:
e8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CD:54:32:EC:6A:FE:D7:74:A8:2E:DF:AE:06:AC:6E:4D:94:0A:0F
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:07:92:2f:7e:85:3d:51:14:c3:58:e3:ab:6f:8e:fa:fc:77:
c0:da:09:6d:43:7e:f5:f3:ca:f7:76:7f:12:06:c1:96:bc:e2:
4c:6d:e4:aa:14:ba:29:37:19:15:4f:34:74:b4:8b:cc:08:89:
70:d3:b8:2b:19:6c:db:e6:6f:b0:7c:2b:1b:eb:d8:78:23:47:
73:ae:de:ba:36:49:5e:2b:14:3d:1c:ea:0c:c5:c8:c0:d7:35:
37:87:6e:3d:7a:af:84:99:c8:51:3b:fb:17:56:bf:7c:2d:55:
5a:cf:e6:83:db:01:fa:e9:38:50:28:85:ab:d9:6a:dd:79:8a:
68:1d:bd:7d:96:55:ac:f2:8e:11:a4:d5:a5:7c:3d:ff:fe:4b:
0f:10:19:3a:de:5b:70:4a:32:37:16:22:cd:aa:d3:d9:5a:1a:
17:38:43:74:e3:cd:53:37:6b:4e:d4:b5:78:99:3b:c3:5b:93:
d1:3c:04:91:9c:59:11:d1:e7:0f:b9:2f:35:8e:14:df:97:c0:
ce:94:bf:3b:87:0c:a6:2c:42:8e:88:99:53:ae:5c:3d:c5:f4:
99:7f:5b:67:11:2f:6c:06:ee:1a:01:2d:3a:02:f7:43:b1:21:
55:ce:63:99:cd:74:d2:87:62:26:64:d5:f7:62:d3:88:eb:fc:
19:ba:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:44:20 2025 by rpki-client