Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: im+D22CuljdARy6D4+KXCV0XhTm/ZEmlGojnYKtsZ68=
Subject key identifier: 29:E2:A6:6E:0C:59:9F:19:CC:9D:18:D7:34:84:64:A8:C2:11:7A:C5
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 0198D65FE31037EF643E1059D9E1BC94F7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 12DC
Signing time: Sat 23 Aug 2025 10:01:04 +0000
Manifest this update: Sat 23 Aug 2025 10:01:04 +0000
Manifest next update: Sun 24 Aug 2025 10:01:04 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: L75NNEz8et2uDGXJJHWldhVwj/MIIvcNd6OelOeHQ2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e3:10:37:ef:64:3e:10:59:d9:e1:bc:94:f7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Aug 23 10:01:04 2025 GMT
Not After : Aug 24 10:01:04 2025 GMT
Subject: CN=29e2a66e0c599f19cc9d18d7348464a8c2117ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:35:23:11:d4:dc:97:f9:2d:fa:41:d0:b7:
99:20:80:5a:8e:4b:21:eb:1e:ce:f2:5c:43:18:a1:
a0:5b:23:42:4b:d9:7d:46:f5:0b:20:1c:96:81:0f:
60:1d:34:cf:a6:32:4e:82:74:e7:38:b3:25:0b:f1:
ef:84:de:93:57:d0:46:3c:27:99:7b:60:aa:7c:63:
2d:7a:77:04:ab:9b:c2:72:2b:9b:55:7f:43:f6:17:
f0:80:a1:1a:86:cd:c6:4e:ec:4c:33:95:dd:ed:2a:
bd:18:d6:d8:78:82:ab:cd:16:22:8a:cf:81:cb:47:
e7:23:eb:3d:41:98:f3:bc:24:f0:36:d6:95:7f:ff:
b8:5d:a6:c7:c9:11:ae:25:b6:ab:94:0c:8d:80:df:
be:76:1b:2e:50:c7:94:37:f2:7e:cb:80:b5:80:30:
2d:62:fb:01:22:98:7b:5e:74:ad:86:de:6c:19:12:
dc:04:6e:fe:12:83:b1:23:42:14:e4:0a:8c:2a:d8:
f9:86:da:a7:8d:45:60:65:25:12:33:d9:83:65:d5:
7d:9b:54:d8:e5:bb:6b:c0:05:87:1a:5c:f1:63:e0:
fa:5d:fa:cc:ae:32:26:ad:d0:02:b2:c2:c4:ef:da:
42:df:91:af:b1:7a:df:a3:cc:f5:0f:b1:d7:e0:25:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E2:A6:6E:0C:59:9F:19:CC:9D:18:D7:34:84:64:A8:C2:11:7A:C5
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4e:16:fe:4a:9e:66:ee:b0:db:02:7f:2a:5a:a3:ed:59:24:
c5:7a:34:a9:f4:52:ef:c5:1b:0e:99:41:eb:e0:e6:b9:76:ee:
3d:1f:ed:fe:9d:37:47:c1:cc:43:e2:85:07:a6:0e:4d:69:29:
d3:d4:15:c5:56:31:cd:77:b2:6b:85:de:08:1f:77:ea:b8:2c:
64:cd:24:84:f6:0c:d5:a3:0d:25:79:13:4b:05:85:8e:bc:90:
51:a7:a7:05:84:9e:a3:78:e6:f4:fc:53:02:90:43:22:ca:29:
02:fc:d3:37:34:5c:46:8f:59:48:b0:72:62:c7:76:bf:0c:a9:
ce:6d:dd:ca:ca:ae:bd:30:19:e8:fb:75:98:cc:13:d0:eb:61:
ff:55:ea:1a:a3:cc:01:28:1e:e1:c7:45:e4:f1:a2:0d:b5:8b:
f5:ab:2d:47:08:98:22:58:79:e1:e5:34:6e:f9:78:52:00:c6:
52:83:4f:04:d3:a9:86:fd:f8:b6:52:49:c9:c4:bd:e0:1d:58:
4c:b1:fc:41:55:26:dc:c2:26:2a:c9:36:4e:9b:8f:c2:c8:59:
49:e6:69:51:aa:16:bc:2c:9f:a3:45:74:e1:a0:12:d7:9b:ba:
18:92:e9:02:bb:2f:8e:ad:28:13:00:c0:e4:cb:e9:25:9e:be:
63:4a:a7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:32 2025 by rpki-client