Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: tacYMD+TZP2qXmWmpdSYac68G23djtwb3amrrMWFiCM=
Subject key identifier: D1:AF:15:2C:50:84:55:CC:A2:C8:87:95:92:17:61:C4:B8:EC:69:C5
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 0198D6607A8EB6185EBD6CA68DBE6B1CBF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 0539
Signing time: Sat 23 Aug 2025 10:01:43 +0000
Manifest this update: Sat 23 Aug 2025 10:01:43 +0000
Manifest next update: Sun 24 Aug 2025 10:01:43 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: /xNlPvQhICH1E1SztAc7oOtYSUYlbOoixP2gMet3v+M=)
2: hlgUeTS6IBRaopiSVrOUgC-_wJs.roa (hash: LdBAJrgqIH+Vij0f6svoaKnmeA18Z44APvKHCC4L9FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7a:8e:b6:18:5e:bd:6c:a6:8d:be:6b:1c:bf:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Aug 23 10:01:43 2025 GMT
Not After : Aug 24 10:01:43 2025 GMT
Subject: CN=d1af152c508455cca2c88795921761c4b8ec69c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:7f:ad:fc:42:ff:64:da:5f:8f:21:36:9f:
13:60:df:98:8d:87:fc:fa:c9:95:ce:c2:39:2e:e4:
b6:84:db:83:d7:d5:00:72:e2:ab:21:b2:f4:ae:c1:
ef:e0:e9:6d:c6:b2:c8:84:59:e0:4c:1a:b3:0b:c7:
fd:6c:89:51:f0:c9:32:4a:f9:93:57:82:e7:96:c5:
23:5a:38:41:fe:b7:6c:69:b4:7d:30:1f:cd:52:94:
94:7f:d9:c5:19:15:e9:98:23:5e:42:7f:05:c1:ed:
10:fa:b4:a1:59:02:8b:70:42:b2:ec:c1:00:d6:84:
b4:a1:49:54:36:3b:e3:ca:94:c4:15:1f:98:84:54:
60:59:d6:fa:b4:1a:fa:26:4a:19:49:6a:54:40:c2:
98:8c:86:2a:5c:00:55:0e:96:7b:51:f5:df:75:73:
80:a7:19:1f:10:7d:be:3b:d6:6f:d9:a5:1d:07:63:
06:07:94:0e:5d:04:82:27:dc:df:52:7b:da:12:47:
57:d3:49:ab:ed:a9:d7:8e:96:08:16:6e:8c:6d:ad:
ee:8d:03:11:57:6c:31:31:6a:d6:81:c0:68:09:5e:
76:22:5b:41:bf:d8:82:a5:1d:52:51:9e:6f:37:df:
aa:54:f6:01:68:66:95:e4:f2:80:1c:5f:5b:cb:60:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AF:15:2C:50:84:55:CC:A2:C8:87:95:92:17:61:C4:B8:EC:69:C5
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:36:1f:a0:ce:8c:30:11:fe:ca:da:a1:bb:14:40:a9:67:54:
d2:f4:e7:79:04:d8:e6:ba:3d:43:90:98:d7:89:a9:30:0e:2e:
ef:a1:76:38:5d:b6:11:d6:74:d9:84:aa:ea:ea:55:83:9f:5b:
41:a6:da:8e:ee:b5:24:f7:87:79:6c:2d:1c:f4:c2:34:b7:ba:
cf:0d:71:63:f9:37:32:cd:f9:af:53:bb:fb:f7:1b:80:89:14:
13:d7:0b:ab:c3:6a:01:fe:4b:65:f6:48:4c:70:b4:ff:92:c5:
4f:97:77:26:c7:8a:97:21:57:4e:8d:2c:9f:18:21:d3:60:33:
c0:36:e7:75:d8:91:0a:8b:86:6d:31:1c:cd:55:8e:60:05:d2:
fa:9b:a3:8a:56:b2:38:22:4f:ce:b2:37:14:4f:ca:59:c1:71:
93:5b:2d:70:eb:0d:00:47:2f:f7:69:2f:67:57:15:29:e4:23:
7c:41:d8:c2:0b:70:71:ec:c7:82:ba:f3:9e:68:77:9a:aa:cd:
7f:35:9d:a8:8b:d8:0d:8b:21:34:cb:0a:44:7c:92:b7:2f:b0:
2a:51:11:03:62:cb:eb:28:46:f4:90:16:63:60:a1:3b:c3:1c:
41:13:a4:4d:f2:ab:7f:33:2b:2b:92:a5:01:74:70:24:ef:4f:
99:ae:9a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:42:31 2025 by rpki-client