Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: bjy704a6Yid4C2Gjm0gchQNgUlqlqjXv8MUUWPzJqyA=
Subject key identifier: 18:D2:FB:4D:9B:D5:E8:3F:EC:38:35:E4:7E:9B:84:8D:1D:75:DC:46
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 0198D54E592741168342C872F0CCE8A78B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: TqbJIkdVzJI8WqG0pmptHy3YU04kuP/jSUWP89pJbUU=)
2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:59:27:41:16:83:42:c8:72:f0:cc:e8:a7:8b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=18d2fb4d9bd5e83fec3835e47e9b848d1d75dc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:68:e1:de:af:63:b2:83:17:ff:d3:d9:1f:
85:5b:f2:d7:d9:bd:1d:be:e4:6e:8a:44:0e:d4:b2:
16:46:45:80:5f:de:de:f8:5c:50:79:af:91:9c:5f:
b8:67:2c:ee:45:d3:5c:7c:d6:ba:90:cb:55:1b:34:
b8:dc:1f:38:38:0c:8f:d7:70:e6:c6:fc:25:1a:64:
95:17:8f:3c:79:49:2b:26:0c:0e:b6:ec:21:69:67:
29:b3:87:23:69:d8:be:28:86:3c:34:eb:14:c7:5c:
f8:2b:e3:f2:ce:60:59:0b:f8:a0:62:a3:ac:47:dc:
2f:4e:63:c4:e2:d5:46:7c:59:cb:f9:48:9b:55:37:
ff:2e:86:78:06:a9:99:fb:cf:f1:b1:61:ca:26:4e:
4c:32:dd:df:82:fd:9f:b5:9e:04:64:7b:2a:b4:75:
7d:eb:e3:11:e3:9d:4f:68:12:bc:27:d7:dd:b9:f3:
0a:e0:5b:91:38:20:13:8d:ff:33:e0:32:f9:0c:d2:
15:d9:94:a9:05:5c:54:7a:e0:14:6f:f6:60:a6:e8:
ec:12:f0:a1:2b:62:ae:ca:e9:7b:45:44:50:71:f0:
48:6c:be:84:c5:72:f8:97:26:88:17:b1:1b:24:af:
97:cd:10:10:bc:91:64:e1:d4:b1:4e:ff:c4:ee:0f:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D2:FB:4D:9B:D5:E8:3F:EC:38:35:E4:7E:9B:84:8D:1D:75:DC:46
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1f:dc:b5:9e:ea:c7:84:c4:bd:9d:0f:0b:ae:f0:e8:ac:91:
94:7a:5c:39:2a:26:50:b6:e8:a4:5f:24:db:dd:7e:72:1c:6e:
71:71:bd:37:ee:3a:ef:a8:60:45:09:4c:04:3d:24:37:e1:f4:
15:5f:79:3c:94:71:7a:39:32:be:bb:eb:e9:d9:16:fb:2e:f8:
ae:fa:9e:ee:83:bb:d4:6e:53:4f:a2:71:61:d4:39:39:b2:93:
fe:33:50:5c:8b:16:56:1a:9e:d0:c4:3d:bf:f9:94:31:35:cc:
e5:a2:11:e0:01:6d:03:95:38:f8:34:3b:81:45:18:5e:d3:ef:
67:33:1c:57:97:b0:59:6b:cd:fd:2c:89:c8:ac:c2:b7:b5:9c:
49:45:9a:e0:4e:45:84:15:8d:25:44:54:08:1e:0a:5a:e9:fe:
e1:88:5f:6a:c6:61:c7:90:b4:bc:f0:c6:28:cc:93:b4:ee:20:
ac:b8:6d:9e:7a:0d:4e:6e:e6:a8:a2:13:62:ae:c8:7c:a5:60:
0b:5b:4c:74:70:77:25:08:c5:ed:e4:74:fb:9f:4c:5e:86:af:
19:5b:69:6f:40:b9:d5:98:0a:f3:5e:54:46:94:d0:12:de:d8:
0a:e0:98:ac:8b:c0:18:c2:50:1d:b2:e9:25:e5:2e:ec:62:e5:
cd:f7:c5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:33 2025 by rpki-client