Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: dWYGDtTZp4/Qd7f8dfWSAL7ajJb5XnmMuEmwoexEuN8=
Subject key identifier: 60:40:9E:A9:DC:AC:21:3B:D5:18:6C:B2:29:CF:63:40:82:85:3E:42
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 019A03A39B39C61859BFC2B1C541A86A53AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 0540
Signing time: Mon 20 Oct 2025 22:00:44 +0000
Manifest this update: Mon 20 Oct 2025 22:00:44 +0000
Manifest next update: Tue 21 Oct 2025 22:00:44 +0000
Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: i2Ln/3wFgZ9DNkkBY7K8XwLfwhpt0w/ln9xyGeBdnbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:9b:39:c6:18:59:bf:c2:b1:c5:41:a8:6a:53:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Oct 20 22:00:44 2025 GMT
Not After : Oct 21 22:00:44 2025 GMT
Subject: CN=60409ea9dcac213bd5186cb229cf634082853e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:1d:a6:90:93:d2:cf:e0:21:d0:92:63:cc:
f2:97:77:e8:a9:15:d6:6d:d7:35:42:a6:99:6a:e0:
ae:d8:47:17:6a:bf:57:de:6f:eb:d8:03:b3:ef:45:
47:89:76:ec:dd:f8:d2:55:3a:c3:2e:06:64:e1:67:
40:31:e3:25:a2:2e:54:09:81:53:d0:95:26:bd:76:
5b:d9:46:53:d6:e6:e3:f4:1b:1d:e6:60:a9:fd:f8:
f4:07:d5:32:64:20:7d:c4:72:2b:6f:58:b3:56:47:
5d:5c:09:17:f7:03:81:61:66:c2:13:8c:49:36:3c:
9a:2a:5d:fb:ec:a7:36:08:74:34:2e:3e:3e:fd:53:
c1:6f:1c:41:cf:02:d3:2e:fe:b4:95:e6:15:3b:ac:
13:b8:f0:2f:9d:0e:2f:e4:ad:89:a0:99:e7:5c:b3:
64:59:ee:cd:58:fe:82:55:b6:45:cf:68:f3:86:dc:
4c:96:3b:68:4d:73:f9:f8:57:ab:e6:0f:87:a5:79:
3e:f6:33:82:ce:e5:a6:72:fb:f6:c1:3b:ec:19:39:
35:a9:57:5a:55:36:28:94:30:70:4a:e4:1b:d5:e6:
4f:00:20:f9:c5:8d:9d:81:3a:9c:a4:52:0a:18:5f:
bf:2d:e6:9e:ab:ba:18:39:5f:69:c4:6a:91:b1:97:
09:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:40:9E:A9:DC:AC:21:3B:D5:18:6C:B2:29:CF:63:40:82:85:3E:42
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e3:77:90:eb:a0:25:9e:0f:49:ff:31:5f:02:ca:de:bc:28:
ef:74:91:0e:8d:9d:20:b3:16:f6:ff:aa:8e:dd:97:a4:8f:eb:
04:17:55:52:33:79:a3:2f:3a:dd:79:ff:e8:7d:ae:01:f2:14:
32:09:a4:d0:41:ab:5a:c3:a6:33:cd:42:93:71:c7:43:a9:f1:
fd:b2:1b:9f:45:fe:70:d2:07:a4:a2:8f:b3:4e:74:b9:93:b9:
32:ef:47:00:1c:25:a7:89:82:90:31:f9:e9:1d:55:ca:2e:0b:
21:05:54:d8:bc:48:ad:d0:78:37:ef:11:50:76:ab:04:8c:d1:
8e:49:6b:9d:71:84:72:3e:6a:3f:e2:d3:01:f8:c1:f9:6c:17:
b7:29:89:80:a2:32:3b:74:60:28:ba:29:fe:e4:b5:3e:17:4e:
02:ee:d6:25:f4:20:01:43:ad:df:19:bf:cd:7e:26:16:5f:bf:
05:02:88:7e:a6:67:26:e2:17:31:5b:85:de:54:98:e6:9f:cf:
af:5d:ea:0d:64:a0:e8:96:36:76:41:74:18:f3:80:43:0d:d7:
9c:9a:83:72:cd:84:ef:fa:27:af:ea:e1:82:65:c4:48:0d:23:
bb:66:23:74:e5:43:19:5a:42:d3:d6:c5:a5:5f:35:0a:a3:01:
e7:34:10:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:39:44 2025 by rpki-client