Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: ZFBRT1boHOWgZTcCH8g85l7HXkBGGan9/JIWTxqohWw=
Subject key identifier: E7:34:9E:11:83:A6:F7:49:E0:B3:FF:32:89:F6:30:2A:15:15:D3:31
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 01991809D8036D3B64A93CAFE5345DFA37BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 04C6
Signing time: Fri 05 Sep 2025 04:02:02 +0000
Manifest this update: Fri 05 Sep 2025 04:02:02 +0000
Manifest next update: Sat 06 Sep 2025 04:02:02 +0000
Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: 2vxpDzFvjzoWmuvnTxhXPN2yTkewCgmHxjatQn6rkWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:d8:03:6d:3b:64:a9:3c:af:e5:34:5d:fa:37:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Sep 5 04:02:02 2025 GMT
Not After : Sep 6 04:02:02 2025 GMT
Subject: CN=e7349e1183a6f749e0b3ff3289f6302a1515d331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:25:15:52:05:12:fe:3e:ec:80:45:d7:61:51:
19:c6:4c:a6:40:74:bc:b4:f9:fc:c7:40:85:2f:b0:
2b:10:20:ad:be:2c:92:08:2b:62:87:9d:a3:fb:a4:
2b:2e:51:f0:0f:e3:47:36:c9:73:18:6a:a8:fe:40:
15:aa:56:60:23:ff:34:8e:f3:57:7e:65:9f:56:ab:
da:31:7b:a0:6b:ea:46:4f:66:cb:3a:bd:6f:81:12:
70:01:8e:bc:61:df:5b:cd:85:e7:61:5f:78:f3:58:
c6:be:ea:98:3a:1e:2d:21:f6:ed:08:67:6b:30:cc:
55:27:1a:22:7f:a2:04:8d:49:07:74:b1:6d:cb:f9:
49:dc:09:ce:11:1c:eb:e9:db:ee:32:e9:41:24:c1:
e9:de:36:54:b2:0c:01:31:3e:ba:e8:92:6c:4c:da:
d9:0a:32:52:c8:49:22:cb:5f:54:bd:29:73:58:a8:
4f:0f:93:a8:ae:a9:36:8f:94:b8:38:e3:f0:c9:8b:
19:08:ff:76:aa:3d:cf:ea:c5:eb:a9:12:c8:47:67:
16:61:bb:41:6c:56:6a:c9:9c:54:13:7f:8f:22:be:
82:5b:ee:ff:d5:61:19:42:ef:2e:7f:57:fd:76:73:
51:b3:58:94:e9:07:a7:2d:44:b7:52:55:da:0e:48:
46:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:34:9E:11:83:A6:F7:49:E0:B3:FF:32:89:F6:30:2A:15:15:D3:31
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ed:e0:27:d7:e3:b8:4c:2e:0a:d0:8d:e5:f6:ed:71:56:1f:
6d:eb:f3:b3:ae:33:5f:c8:59:11:9b:da:80:66:36:7b:ca:26:
df:c3:64:6f:31:02:45:ed:c4:a1:2c:aa:83:04:ea:b4:83:85:
d1:f5:bc:c9:8d:21:dc:01:7f:08:3f:df:51:61:0b:33:46:7c:
f9:09:54:14:94:25:89:80:88:62:da:b8:56:a6:24:49:51:ae:
fe:45:12:f6:30:c7:da:81:5f:f8:e5:19:e0:8d:d8:5f:14:07:
e6:6d:f0:c1:7a:68:38:29:57:47:63:82:71:a2:2a:fb:d1:b1:
4c:bb:a6:f1:81:4a:b7:46:b6:26:cd:77:8c:84:5e:5b:3c:06:
84:fa:64:1a:d4:02:bf:97:35:79:28:a0:be:26:49:8a:7c:28:
e2:44:09:0b:27:49:1d:c5:15:4b:36:ff:4e:96:cc:a3:d4:56:
c9:b6:3a:18:74:8c:7e:d7:ed:fb:03:82:a7:7e:f4:fb:c2:44:
64:92:79:0e:fd:33:df:fe:9d:d7:c6:97:ff:bc:1f:2e:5a:99:
00:64:fb:01:25:1d:aa:1f:5b:95:08:cc:b9:06:c7:9f:6c:09:
f3:1f:e1:ac:ec:a9:f8:af:2d:39:07:a0:04:7c:c9:cf:98:6b:
3c:78:ec:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 11:11:07 2025 by rpki-client