Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: btLj7LWE1Jv+Ks0LjTd6hkEYemJiRmYMUHu2hg1OZ6w=
Subject key identifier: F2:A1:15:A0:F7:53:A6:E4:91:C1:B6:E0:DE:E9:39:DF:D4:B9:26:65
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 0198D6CCF5B8D662C5C5A4EC3A50B95474B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 01ED
Signing time: Sat 23 Aug 2025 12:00:13 +0000
Manifest this update: Sat 23 Aug 2025 12:00:13 +0000
Manifest next update: Sun 24 Aug 2025 12:00:13 +0000
Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: gLQy785nGinjckhmLA9IPPyQMTVjYfzDuQhsnOuawaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:f5:b8:d6:62:c5:c5:a4:ec:3a:50:b9:54:74:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Aug 23 12:00:13 2025 GMT
Not After : Aug 24 12:00:13 2025 GMT
Subject: CN=f2a115a0f753a6e491c1b6e0dee939dfd4b92665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:35:ad:13:7a:a3:19:00:16:2b:d9:47:3c:
db:71:71:1a:44:40:e8:a4:05:c7:21:c2:22:33:64:
dd:c8:ac:7d:08:d2:10:d9:1b:4b:22:cc:da:0e:4b:
ad:b5:e7:99:f4:64:e3:cd:fe:86:d5:e5:fb:04:f9:
c0:d6:51:ae:3e:9c:47:ca:b7:6f:a0:cc:5e:0c:ea:
b3:59:30:15:30:1b:cf:e4:2a:84:ad:9f:51:c0:c6:
a7:09:d9:aa:34:9c:c4:2d:4c:1b:56:d9:25:e8:89:
8e:e7:d5:b2:79:d8:30:f0:ec:3a:50:c6:f6:dd:4f:
09:43:ca:57:04:c0:54:7c:89:87:15:2d:45:7d:36:
b8:05:c9:30:b8:f6:61:a0:a3:ef:41:79:58:bd:b7:
5c:8d:ea:c5:e6:4f:d3:85:66:23:7e:ba:cc:21:6e:
67:ab:41:0a:73:6e:5e:81:5c:70:80:31:f1:f4:aa:
ec:44:27:36:86:01:c8:03:8b:29:60:22:78:1c:b5:
8a:13:42:d6:67:4f:03:15:27:64:25:04:b5:e5:68:
52:5d:a2:2b:4a:cb:58:d0:74:03:4b:7e:20:99:b3:
26:52:3d:af:c7:57:94:c4:e6:f2:e6:4b:31:bf:5a:
3d:9a:9f:b8:71:d9:b9:8b:a5:70:81:6e:26:16:89:
cf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A1:15:A0:F7:53:A6:E4:91:C1:B6:E0:DE:E9:39:DF:D4:B9:26:65
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a7:92:88:69:96:e6:ff:00:a8:46:a2:9c:5b:01:a4:2d:f7:
6c:6b:f5:10:c9:4a:5e:e2:bb:0a:1a:e2:4e:b0:fd:6e:f5:05:
58:b2:05:57:61:37:46:f2:af:7d:bf:2c:84:a4:de:3c:dd:ff:
dc:5c:60:bb:6b:c4:b0:7a:fa:30:a4:a7:09:9f:af:8f:a7:11:
55:16:ef:6e:b1:62:5f:f0:c7:3a:dd:ae:8a:5e:46:ce:30:34:
9e:94:04:9d:08:a9:c5:13:42:ba:c7:37:41:46:e9:ab:cb:d8:
a6:bb:10:be:03:0e:df:45:60:92:e1:81:8f:31:93:51:3d:ca:
8e:61:c4:6f:af:da:29:b9:b1:a7:1a:f7:23:aa:13:01:e1:54:
d0:0b:fb:af:5f:19:df:9b:3d:10:3a:34:87:0c:d2:a2:b2:9b:
d2:fa:98:83:c6:69:79:ee:e6:10:89:76:f6:63:77:27:e5:76:
10:33:01:6c:5c:59:54:c8:4e:97:f7:1b:66:12:aa:9e:fd:8c:
cf:0e:1c:49:52:f0:7e:df:d7:54:39:87:33:05:60:55:45:94:
53:19:ec:6d:f8:b7:73:94:3d:78:b9:f3:54:0d:af:85:9b:be:
3a:22:6f:3e:32:f8:34:43:c3:46:53:73:ac:87:34:d3:e8:1a:
51:bd:27:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:04:51 2025 by rpki-client