Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: 0upeEK3uX4wl9Y+b6QMPtKY14piwOhNmxr1IWe432Q0=
Subject key identifier: 35:F4:65:BB:BE:3A:6D:44:D6:60:D3:40:2E:E9:52:B1:D1:DA:6A:DF
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 0198D65F8552ACAB437BCC71E7CA0708F13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 12BB
Signing time: Sat 23 Aug 2025 10:00:40 +0000
Manifest this update: Sat 23 Aug 2025 10:00:40 +0000
Manifest next update: Sun 24 Aug 2025 10:00:40 +0000
Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=)
2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: SpjPD+ggp3juBIqKvJplXv6G7gsLV3vZG6U9B9UnNic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:85:52:ac:ab:43:7b:cc:71:e7:ca:07:08:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Aug 23 10:00:40 2025 GMT
Not After : Aug 24 10:00:40 2025 GMT
Subject: CN=35f465bbbe3a6d44d660d3402ee952b1d1da6adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:d3:27:d6:ea:be:8f:dd:42:73:0b:69:f3:
09:7b:bf:8f:26:9d:f7:f8:35:86:c4:3a:74:b8:6c:
02:01:b3:08:12:34:29:ad:6c:8b:ca:8d:f9:88:67:
df:53:e1:40:57:67:20:9a:0c:7c:27:be:87:bc:a2:
c0:28:40:a6:e5:56:4c:b3:7b:70:cf:a1:18:79:32:
67:f0:24:3b:10:63:07:c4:9d:81:08:16:38:09:d4:
4a:97:a0:19:f6:b7:d5:e1:35:45:74:07:fd:6e:b1:
72:83:b7:74:3c:4e:71:fb:57:f7:fc:a1:e4:fd:83:
8b:62:67:b6:9b:7a:d9:a1:a6:30:e6:c4:a5:a9:40:
70:bb:bd:c2:0e:69:ee:e1:bc:90:c4:c7:9a:a8:5e:
94:0a:b6:d5:fa:d2:08:20:f8:4c:58:d1:08:ef:68:
48:8d:95:b0:29:80:89:00:f4:c1:50:7e:80:4f:36:
80:3f:b1:95:ea:34:87:56:7b:e3:3f:3b:4e:c7:bc:
91:ce:c9:4d:9c:56:07:21:c5:f2:ba:d5:db:9f:a5:
06:05:29:9a:a4:0d:0b:71:f8:6b:a7:b2:21:0a:4c:
5f:57:08:d7:b3:78:cc:3f:09:77:56:f5:52:cf:14:
69:c7:70:68:bf:d6:83:23:d3:e1:4f:0e:b8:2a:fc:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F4:65:BB:BE:3A:6D:44:D6:60:D3:40:2E:E9:52:B1:D1:DA:6A:DF
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:58:49:01:6a:b2:0a:e7:55:e4:ff:d6:3e:04:b4:cf:1d:d1:
d5:b9:cb:6b:c9:13:18:15:c9:99:09:a8:ba:ea:4e:d7:1a:1f:
57:12:cf:03:af:f3:b6:c2:82:08:ae:04:82:aa:43:d3:6c:2e:
9d:15:c0:5f:cd:2f:e3:11:e3:7a:ee:01:21:d8:cb:6a:24:13:
aa:2f:cc:fd:ed:39:ab:77:05:77:3c:48:24:99:86:ba:5f:47:
23:ef:02:84:a3:b6:94:67:5b:eb:48:b3:d1:0c:bf:53:74:12:
ea:02:47:34:72:d4:5f:20:2c:12:e2:fd:a8:a2:68:41:a9:9a:
ef:3c:8e:74:8f:8e:ec:9f:e2:50:1b:15:2b:a3:92:12:2c:72:
d8:fe:a2:56:61:7d:70:ff:ee:1a:3f:62:40:23:8e:42:12:75:
64:04:18:66:35:31:e3:a2:51:3d:95:7e:8d:28:7e:9f:7f:4a:
e1:3d:de:a4:89:cd:7f:2a:43:f0:f1:ab:3a:32:36:9c:79:16:
de:67:26:4c:86:4d:37:01:a1:14:86:9b:17:38:9d:2f:21:16:
11:f3:bf:a5:82:40:17:21:c3:7b:5f:cc:6a:34:e1:cc:03:8f:
da:a6:2f:45:2e:58:63:68:07:79:52:94:ee:4c:46:1a:2e:26:
3e:10:f7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:17 2025 by rpki-client