Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
File: qjHJjjyrghyE3e_yBp4CJZvW5hw.mft (raw, json)
Hash identifier: naYVXrvFfVQq2qtHHnutK7xegAxVyMLYZtCRaDJk5g4=
Subject key identifier: 76:93:6C:7D:A2:2D:C5:6E:5F:93:EB:72:7A:5D:EC:6C:57:07:53:DC
Authority key identifier: AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
Certificate issuer: /CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Certificate serial: 0199FEEC02C265846C3D56218583F6377081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
Manifest number: 0C54
Signing time: Mon 20 Oct 2025 00:01:43 +0000
Manifest this update: Mon 20 Oct 2025 00:01:43 +0000
Manifest next update: Tue 21 Oct 2025 00:01:43 +0000
Files and hashes: 1: AIeHAMlo02ixYJZr9DxoRfeqC_w.roa (hash: r/OyoKCdS9zD7ksUp6W0p8pqS4rPDdjM46a0P82mb/E=)
2: qjHJjjyrghyE3e_yBp4CJZvW5hw.crl (hash: Nf5rbcSUAHGoIquSpJHTAjvFUF11U4VK5xIyMJX8XJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:ec:02:c2:65:84:6c:3d:56:21:85:83:f6:37:70:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31c98e3cab821c84ddeff2069e02259bd6e61c
Validity
Not Before: Oct 20 00:01:43 2025 GMT
Not After : Oct 21 00:01:43 2025 GMT
Subject: CN=76936c7da22dc56e5f93eb727a5dec6c570753dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:fb:a4:75:d4:30:83:88:d0:eb:60:24:b2:
4d:f7:bf:2c:2d:25:7d:d0:bd:c0:9e:0d:91:ab:92:
49:e9:e6:25:70:71:81:ed:79:03:8f:85:e4:c4:a4:
ac:90:a1:e6:2d:9f:ec:44:87:dc:68:b0:cb:15:de:
7e:f9:40:0c:82:6e:ea:4b:bf:a2:da:6d:36:36:a6:
e6:e3:f2:75:88:3e:e1:e7:6a:50:3a:c6:0c:0d:22:
c8:14:68:c2:74:98:e9:37:40:d0:6e:80:a5:02:36:
46:19:84:76:9f:5b:d2:07:1a:de:69:ee:70:8e:3c:
d7:79:9d:7f:aa:07:c1:f9:a6:2b:32:84:2a:9d:73:
65:36:c9:6b:c0:9b:c5:6b:2c:a1:0d:b1:9e:09:86:
28:89:eb:d0:f0:e5:f2:1d:0e:2e:c6:b7:a7:f2:f5:
c6:93:65:13:ae:6a:34:58:23:d1:b9:ca:88:4e:c3:
8f:50:85:4a:bc:4b:5b:9c:f0:8e:76:8e:0c:13:41:
ea:61:fc:b5:06:eb:6f:29:11:b6:5e:89:32:da:52:
b2:ce:63:78:1d:a8:80:78:da:b4:28:36:96:31:19:
12:7f:0f:7b:15:a1:1d:01:f3:59:12:d6:28:0e:34:
19:46:35:60:f6:fe:43:53:f8:20:28:28:f9:16:a6:
4a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:6C:7D:A2:2D:C5:6E:5F:93:EB:72:7A:5D:EC:6C:57:07:53:DC
X509v3 Authority Key Identifier:
keyid:AA:31:C9:8E:3C:AB:82:1C:84:DD:EF:F2:06:9E:02:25:9B:D6:E6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHJjjyrghyE3e_yBp4CJZvW5hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4b1d56-d25f-4f64-8a0c-05bff31c53fe/1/qjHJjjyrghyE3e_yBp4CJZvW5hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:97:5b:4b:e5:3a:d4:99:03:89:b2:91:90:df:d8:0b:3d:65:
dc:c7:37:b6:e7:48:93:a7:20:97:df:bf:b9:1a:f7:90:6d:d5:
c7:97:f2:7d:ad:94:43:bc:c6:f6:f4:ed:b2:8c:af:0c:4b:e1:
09:ac:ac:9f:29:3f:db:51:03:c6:ce:7a:5f:00:b4:71:78:ee:
b6:67:ec:86:43:aa:ee:19:a7:b7:78:08:1b:93:4d:5a:7a:00:
5a:9b:37:23:84:04:40:ab:3c:b4:7b:07:de:98:32:62:28:82:
6f:c5:22:02:e9:e2:0e:be:ee:3d:97:23:8f:17:5c:2c:52:27:
46:d5:e3:cb:c1:08:45:67:3b:4d:eb:9d:b8:a1:41:45:a8:8a:
b5:d4:72:1f:2c:28:e5:6f:5a:f4:6c:bf:70:00:4c:df:6a:af:
e8:46:63:7e:48:11:9f:5a:f7:a7:14:d2:63:e8:13:f9:03:3d:
9c:43:59:85:8c:46:04:17:9d:fc:92:bd:fc:09:40:c6:bc:99:
91:0a:30:d9:31:6d:df:5f:c9:dc:13:7d:88:c9:6f:38:56:83:
91:76:71:0f:e1:cb:4c:15:13:32:cd:27:df:fe:fc:9f:6f:8f:
af:1e:84:43:b4:01:50:4e:ab:94:8c:ef:2b:66:0d:56:6f:e3:
01:6d:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:56 2025 by rpki-client