Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
File: qiEQS093IiTRGFaiTt-UZqhE0mw.mft (raw, json)
Hash identifier: +a8X9bFARJ/k8gXtOSROzqFFSEeEgth81sGUpdphNCE=
Subject key identifier: 81:A5:FF:7B:36:AD:9B:FB:D7:E7:6F:0F:C6:31:73:E1:33:7F:40:6D
Authority key identifier: AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
Certificate issuer: /CN=aa21104b4f772224d11856a24edf9466a844d26c
Certificate serial: 0197C86FFCEF164AF9CE3B0C216BD5AFADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
Manifest number: 09B8
Signing time: Wed 02 Jul 2025 00:01:11 +0000
Manifest this update: Wed 02 Jul 2025 00:01:11 +0000
Manifest next update: Thu 03 Jul 2025 00:01:11 +0000
Files and hashes: 1: C9Uc2-MMZLc56ntn-MTlSYOC9E8.roa (hash: 7Vks3Vs+iWpgcZieiS4e05rACvsjBFcyY3uhYDWshE0=)
2: qiEQS093IiTRGFaiTt-UZqhE0mw.crl (hash: xv62MuaWBKTFLC7M8PPLByONWHgrL1iwJE0hFo8vkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:6f:fc:ef:16:4a:f9:ce:3b:0c:21:6b:d5:af:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa21104b4f772224d11856a24edf9466a844d26c
Validity
Not Before: Jul 2 00:01:11 2025 GMT
Not After : Jul 3 00:01:11 2025 GMT
Subject: CN=81a5ff7b36ad9bfbd7e76f0fc63173e1337f406d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a8:81:a7:92:f5:d1:69:a4:61:c2:89:bd:57:
4d:04:43:93:a6:69:d6:3b:24:2f:6b:9b:64:4d:e8:
d2:2e:80:6a:11:78:c1:13:96:f9:00:76:b3:ab:86:
a2:14:e2:8f:31:1e:44:c4:07:de:b9:95:3c:62:96:
5e:26:3c:0d:44:c4:0d:a4:97:5b:17:fc:1b:6b:b3:
e4:47:9b:bc:2a:9b:eb:d5:70:da:ae:8b:c5:56:8d:
e5:8e:ea:0f:82:87:07:e3:c8:94:70:1f:98:69:46:
3c:f2:b1:d2:87:f0:cb:10:37:dc:03:3d:34:85:cd:
6e:b0:12:91:13:20:00:dd:24:76:c7:ca:ac:f8:24:
26:3a:4e:7f:30:86:52:ab:fb:9c:d8:0e:e3:68:a5:
0c:f2:be:1b:8b:ad:22:7d:7b:f8:c5:d2:a5:ee:6e:
dc:e8:41:e1:9b:4b:64:79:37:04:99:32:2a:4e:8b:
66:c6:12:67:bb:f5:1d:1f:37:37:5b:41:0c:3f:9b:
44:81:0d:52:34:0b:98:f5:2f:49:86:e0:ac:11:7f:
fa:0b:4b:51:cb:4a:9f:11:0a:f8:cf:38:80:64:22:
00:76:b8:00:cf:36:f4:c0:c1:32:96:11:9b:75:d2:
49:39:b8:8e:66:49:17:02:27:63:26:f4:8a:04:67:
51:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A5:FF:7B:36:AD:9B:FB:D7:E7:6F:0F:C6:31:73:E1:33:7F:40:6D
X509v3 Authority Key Identifier:
keyid:AA:21:10:4B:4F:77:22:24:D1:18:56:A2:4E:DF:94:66:A8:44:D2:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiEQS093IiTRGFaiTt-UZqhE0mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/qiEQS093IiTRGFaiTt-UZqhE0mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:08:3e:6a:27:1f:62:c7:0d:6b:15:b3:83:d9:fa:1f:c5:8e:
c3:a0:2a:7c:0e:a8:56:48:86:c7:d7:a8:4a:8a:1c:03:4e:a1:
25:36:74:9e:0a:27:ae:b5:d1:1b:be:9d:3b:6e:62:fc:6e:42:
3f:c7:f7:89:48:64:92:74:9f:b7:5c:c1:15:2c:52:26:eb:ef:
80:22:7d:cd:a6:0e:c1:ed:fa:09:bb:70:7c:bd:2a:ca:5a:df:
42:9c:6b:6f:3e:96:fb:b8:a6:27:57:d7:1e:4d:d0:80:6e:85:
dd:b1:1b:41:c8:cc:a7:80:a4:7e:16:1e:aa:89:04:4d:bf:a4:
86:4e:ca:20:42:e3:3a:03:67:b3:51:78:89:ed:f8:f2:c8:b9:
85:8e:41:19:99:4e:8b:cc:7c:e5:2a:65:ef:dc:b6:dc:d1:af:
4e:83:48:e7:27:90:fa:ea:5a:58:76:f1:35:7c:02:9a:85:da:
a8:9d:fb:94:e5:be:73:96:da:0d:d2:35:69:54:ea:9b:e6:96:
38:0d:5b:14:fb:1a:e1:72:c5:bd:72:9c:67:70:fa:54:a3:17:
c5:2c:39:4b:94:5f:6c:1d:90:ca:28:f5:c7:68:1a:39:aa:e9:
0b:5a:7f:83:eb:a9:77:47:c4:27:8b:0f:08:62:e0:84:13:d2:
d4:5e:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:26:14 2025 by rpki-client