Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: mcwT2qkCmzo0UiroLUeSlCnsdrqI86PgMLbZMhUGYtg=
Subject key identifier: A4:1D:70:F2:65:80:C3:FC:17:FD:BE:E3:FB:EE:47:4C:EC:1C:78:BD
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 0198D4A7FA6F9B48C75A224536EEEB6BECA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: 4B
Signing time: Sat 23 Aug 2025 02:00:35 +0000
Manifest this update: Sat 23 Aug 2025 02:00:35 +0000
Manifest next update: Sun 24 Aug 2025 02:00:35 +0000
Files and hashes: 1: 8Q0mj8ELLT0l3qpTNfSPe5yevws.roa (hash: 5QH/DPp/MLTxOyf+/vEAFoLpbGaLA0S+MvXcD7V2QGQ=)
2: n8grRcjYI8DzhU_PyxKKYOTlQMo.roa (hash: xgJvnRHC/iqc2iSgxKESHKwatBFYEv01jlV2QZqtIKM=)
3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: /dhjXr71na0R3T+YRvIDb7kv/gTvY83cr1xbtdzPT3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:fa:6f:9b:48:c7:5a:22:45:36:ee:eb:6b:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Aug 23 02:00:35 2025 GMT
Not After : Aug 24 02:00:35 2025 GMT
Subject: CN=a41d70f26580c3fc17fdbee3fbee474cec1c78bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:67:cc:7e:a8:6d:77:2e:ad:cf:8a:30:00:8a:
90:ee:09:28:17:2e:27:e6:c4:ab:ce:ca:5c:ff:c6:
be:fa:7b:cd:bf:56:13:41:ed:00:ed:b2:48:b4:15:
3f:df:6d:44:c1:bc:cd:d1:1d:c8:f0:40:a0:a3:93:
e0:39:06:9d:76:61:03:c9:62:5d:9e:26:10:f2:04:
dc:32:3b:e4:71:e9:48:7f:69:9b:27:52:08:70:f0:
84:6a:72:b9:f3:a1:82:1d:cf:53:2e:0d:87:27:26:
7a:88:99:f7:31:7a:9d:3d:1e:33:17:c1:24:a5:ab:
37:6e:02:e1:42:b4:a0:d3:3e:6d:73:cf:a8:34:a2:
b6:dc:e1:ba:08:59:ac:9a:14:28:21:f7:f0:44:67:
30:36:4e:50:c8:a5:99:68:8e:cf:d8:9c:f7:94:70:
51:ce:5b:8e:9e:df:f0:b0:81:e9:0d:3d:04:07:2b:
0a:a8:6f:e1:6b:0e:e8:2e:1f:54:98:3b:01:bf:b8:
b3:4e:4c:94:e8:4a:bd:8e:5a:52:35:ab:88:31:85:
e3:61:90:32:2e:07:36:1d:82:0a:89:d6:c4:94:1f:
cd:a0:59:fa:9c:f7:ef:ad:98:95:90:5c:19:f0:7e:
87:46:74:d3:dc:92:63:1e:4f:b5:00:7d:33:b3:65:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1D:70:F2:65:80:C3:FC:17:FD:BE:E3:FB:EE:47:4C:EC:1C:78:BD
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:91:d7:a6:01:c3:5e:b2:38:f3:d2:eb:31:d2:84:98:9a:ed:
e0:29:5c:a5:9d:24:83:9d:3e:6d:55:07:f9:4b:47:46:ab:53:
d6:02:8b:36:a2:fb:55:a1:75:bb:16:ee:9f:16:4b:30:36:37:
5f:44:c4:4b:7d:fe:5a:57:c0:fe:5b:8e:29:8b:66:9b:1e:f8:
62:9a:8a:39:38:e7:36:90:ef:18:12:34:f0:c1:97:dd:58:7c:
51:d5:c3:36:7a:b0:ce:9c:04:15:d8:96:63:f2:63:93:98:a5:
d3:7f:0a:c6:df:03:3e:ba:42:9f:a4:5d:2d:13:97:32:19:ee:
1a:22:d6:eb:b6:96:56:98:0a:1e:aa:44:4d:0d:77:14:4a:e0:
70:e3:8b:d3:d7:4d:05:00:ee:61:5a:eb:b1:74:bf:cf:c8:5b:
09:cc:aa:3e:08:b5:50:05:de:2c:c6:40:93:7a:ea:35:9c:0e:
ce:f8:24:3f:a3:09:2b:6b:17:50:d9:a9:b1:2c:b7:fe:21:b3:
ba:61:4d:f4:11:e8:67:53:73:a3:ac:8d:c4:a4:9f:c2:14:83:
78:ef:4e:3b:79:69:fd:8b:7c:56:6a:51:73:4d:e5:09:cd:0b:
23:fe:9c:c4:d8:c7:01:28:36:f2:dc:f2:d5:3f:e2:6f:62:87:
70:75:87:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:42 2025 by rpki-client