Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: PRhuBJdZCI8gL3syNsHsyEEB8/ylmgsjIdAurjU0/S0=
Subject key identifier: C7:09:B3:E5:E4:11:D8:DB:C5:67:31:EF:E7:7A:E4:1C:DD:E9:8F:47
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 0198D4E01604548D8E4F6336F869569DBE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0A34
Signing time: Sat 23 Aug 2025 03:01:52 +0000
Manifest this update: Sat 23 Aug 2025 03:01:52 +0000
Manifest next update: Sun 24 Aug 2025 03:01:52 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: rXD55vlIbiMbt07tv0cLODXNJnGRUDOU5ANKoMogA9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:16:04:54:8d:8e:4f:63:36:f8:69:56:9d:be:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Aug 23 03:01:52 2025 GMT
Not After : Aug 24 03:01:52 2025 GMT
Subject: CN=c709b3e5e411d8dbc56731efe77ae41cdde98f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:16:fb:75:b4:3f:20:58:09:f0:06:8b:6d:
3d:63:b2:cb:26:11:17:af:0f:6e:37:39:9c:3c:d2:
0c:03:30:f0:e3:1a:02:8e:2b:ff:7f:d9:d8:6b:bb:
87:14:69:45:b3:67:42:ff:76:62:28:0d:73:df:98:
29:2b:30:61:58:e1:84:7a:71:75:d4:d4:15:58:88:
52:e2:37:6c:5c:d2:e0:4f:ac:16:a3:20:64:95:37:
68:4d:52:64:57:2f:1f:fc:6f:51:ba:55:6a:2f:60:
53:d1:00:03:92:66:bd:ab:59:96:4e:df:d5:fb:0f:
91:2e:b2:24:7d:3d:96:d5:e9:ad:ae:2b:1a:f6:81:
30:92:2e:04:56:a3:fc:26:ab:4a:19:10:ad:16:ab:
88:04:21:33:5b:36:60:7a:fc:a1:90:f7:87:0c:8f:
ac:30:3d:a2:31:dd:c1:62:d8:b0:11:1e:e7:10:db:
22:aa:72:76:3b:0a:40:84:7c:8c:df:5f:28:a1:f4:
06:a3:48:c0:46:d8:53:64:21:26:3e:df:3a:b6:c1:
83:2c:d8:85:30:cf:dd:50:0b:1a:d0:66:5c:9d:9e:
8d:7b:85:d1:9e:a2:15:32:d5:3f:f4:4d:4e:6c:e2:
80:47:0d:2f:1a:34:c9:a3:41:a3:42:e9:1a:4c:47:
99:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:09:B3:E5:E4:11:D8:DB:C5:67:31:EF:E7:7A:E4:1C:DD:E9:8F:47
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:92:ea:cb:13:c3:8b:e4:0b:92:85:18:94:19:a1:1f:8e:d7:
a6:ab:6e:bd:e3:81:16:7f:6d:99:63:b4:a5:39:c6:69:ba:7b:
38:c6:16:79:0c:d6:9a:f1:33:18:77:9d:5d:86:20:d1:58:92:
a0:25:06:c5:7d:bc:5c:d0:79:10:c8:29:d8:bf:a6:40:f5:cb:
6c:d9:ae:76:21:fd:57:78:7f:fd:81:66:fb:f4:f2:44:f3:e7:
59:fe:45:dd:13:d0:6d:1a:0e:80:71:12:14:46:c8:7e:3e:40:
c2:11:cc:32:f3:83:b7:34:89:c7:cc:49:a2:56:58:fe:d3:d7:
a0:92:97:79:46:20:6b:23:3e:8e:f2:0f:fa:8d:f0:46:c2:e6:
b7:6d:f5:b2:da:4f:4c:be:b8:84:c1:85:18:06:f3:ef:1c:dc:
fc:40:15:4b:50:f6:38:ff:ad:3a:4c:17:6b:d3:40:00:72:11:
d1:7b:11:dc:99:6d:91:21:4e:73:01:ba:70:6c:bb:68:31:26:
b9:65:44:46:af:87:e5:5c:d3:0f:1e:fd:3d:e7:12:ca:2e:fd:
8f:7f:eb:77:ea:3d:99:d4:99:fd:16:7b:8b:15:11:be:04:f9:
3a:ab:9c:31:d5:47:f4:17:11:6a:f8:6a:21:9e:ca:70:e7:87:
32:37:53:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:39 2025 by rpki-client