Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
File: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft (raw, json)
Hash identifier: 0DBOftaM6cEKKTBL8ZQXC2j2yUFwpsZd+JDpxWJxl68=
Subject key identifier: 60:1C:7D:B1:10:DB:90:70:BA:F8:05:8A:C7:1A:F2:33:F6:02:28:17
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 0198D5BBD3349CBFECEB929C65EBCA56D6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
Manifest number: 07F6
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: 4F9izwsHHxNkuKU97mIzesCX1fA.roa (hash: 9EEtKc3sBCyfxrwHugYM/2yhW3k3q6DEwjqGSNZdJ9g=)
2: qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl (hash: Sr/VzuYVAEexG0g4Sjoc7/QeUOtmlBFinrnZOlBHpoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d3:34:9c:bf:ec:eb:92:9c:65:eb:ca:56:d6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=601c7db110db9070baf8058ac71af233f6022817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:ad:9b:8f:c9:bf:68:74:f5:9e:e5:a1:ce:
45:4b:b0:7d:fc:48:b8:6d:ba:a0:eb:2a:b6:61:b1:
b2:b6:9d:3f:aa:34:15:7c:4a:c0:e3:04:b0:db:fd:
6a:65:ee:4b:7c:b7:70:b8:4e:a6:36:f0:32:89:d2:
61:63:6d:17:26:11:ba:dd:e5:cf:2b:a7:2f:76:f2:
ef:87:bf:c6:7f:8d:ac:d5:6a:8d:a3:86:fb:7f:e3:
6f:1e:ad:e7:3c:44:2c:25:06:14:22:6e:fc:03:81:
9d:89:fe:65:1e:8d:75:89:19:a1:10:8c:13:d7:0d:
11:fd:46:48:50:22:d2:08:87:83:43:c0:40:e8:c0:
98:ec:0b:5f:9e:f5:1d:f1:8a:0a:4a:48:11:30:89:
b4:ec:60:c7:5b:cc:ae:d3:46:24:03:e3:74:37:59:
50:35:59:35:53:4b:01:9f:c9:81:8a:94:af:5b:fa:
3f:ce:3d:fc:0e:46:cb:41:ef:20:4f:e2:43:04:03:
c6:26:4f:44:f7:71:0a:3a:b9:9f:a2:8b:80:b9:9e:
9c:72:a1:7d:74:af:82:73:a3:2b:d2:ab:ce:f0:15:
fe:35:4a:f7:24:cf:9d:48:44:0d:b0:6f:8e:b6:23:
bb:6d:50:04:33:b3:09:4d:c3:65:15:23:50:72:4f:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1C:7D:B1:10:DB:90:70:BA:F8:05:8A:C7:1A:F2:33:F6:02:28:17
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e7:50:b2:e4:74:1d:62:53:b0:82:ef:b2:9f:1a:04:01:2a:
c8:54:e2:1d:e9:f5:05:53:36:97:b9:e9:97:73:6a:07:83:61:
53:c3:98:94:a0:f2:22:3f:a3:96:e9:c7:36:c1:85:39:4a:1b:
d1:9e:9e:63:8f:45:49:ec:58:c3:6b:37:03:bc:ea:90:c5:ed:
08:65:00:01:92:97:2b:fb:99:98:c4:b3:e7:31:f7:54:da:3e:
e8:6b:95:e3:53:17:04:1d:01:32:c3:c6:1d:8a:25:cf:65:d7:
3d:2d:65:c8:2a:26:b8:fe:4d:7c:6a:29:83:88:97:ef:32:4a:
27:eb:91:83:7f:4b:cc:df:4c:c4:db:d7:be:92:1d:f2:2b:00:
95:c9:33:00:34:0c:66:87:6a:e9:23:27:0e:4a:fd:98:d7:a8:
7d:70:fa:24:61:ff:4b:c8:68:75:28:9b:0f:e0:2d:ef:b9:9d:
b1:33:db:9d:ed:b3:fc:36:cf:50:d5:41:96:69:0b:a0:19:c9:
1f:10:08:0f:60:20:a4:53:fc:99:c4:e1:73:54:f0:60:fe:de:
b1:15:19:01:b5:ce:ab:55:6d:9b:7c:a3:52:74:03:d2:9e:cb:
f4:9b:3a:cc:c4:6e:92:84:70:c5:fc:f5:35:3e:6e:8c:77:50:
42:4a:8e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:55 2025 by rpki-client