Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
File: qXjDZVxaYJcS51UQDZiJKuHI5es.mft (raw, json)
Hash identifier: gAOw51OhSP9iwtZ0BYqwUVHmTijVU/sr5ggFu1XPHJA=
Subject key identifier: EB:A4:5B:45:53:FA:C9:2F:25:A8:8B:5F:D7:9E:A9:C6:7D:E2:24:CC
Authority key identifier: A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
Certificate issuer: /CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Certificate serial: 0198D7A957F79308D96D94A5D6828992D3DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 16:00:56 +0000
Manifest this update: Sat 23 Aug 2025 16:00:56 +0000
Manifest next update: Sun 24 Aug 2025 16:00:56 +0000
Files and hashes: 1: Yumm02n0U4zsJjWwtlYyB2Z-w4U.roa (hash: AJmjRPnoBgkPh5HzaY6seqwxdSiWYHbug0JOYxi/OM8=)
2: qXjDZVxaYJcS51UQDZiJKuHI5es.crl (hash: YaUCChFRfW5xuZgqDtohbG8Fn3tWhVjbEyi45Bb46rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:57:f7:93:08:d9:6d:94:a5:d6:82:89:92:d3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a978c3655c5a609712e755100d98892ae1c8e5eb
Validity
Not Before: Aug 23 16:00:56 2025 GMT
Not After : Aug 24 16:00:56 2025 GMT
Subject: CN=eba45b4553fac92f25a88b5fd79ea9c67de224cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:20:3b:e0:7a:43:45:93:9a:ba:27:3c:25:
3b:43:21:60:9f:6d:f5:a8:cd:b0:4a:01:32:25:33:
2b:94:1b:96:55:e5:88:de:6a:6e:ed:0d:02:04:cf:
f0:2d:95:c0:4f:69:e9:f2:92:26:f1:d5:5d:eb:3d:
ba:03:36:a3:01:9b:8c:eb:41:ea:c3:98:d4:77:ee:
f4:51:ce:55:ee:d9:04:c9:41:65:ac:2d:aa:5c:01:
f8:5b:14:a3:f9:7a:f3:3b:29:75:f4:28:da:57:0d:
f3:11:68:b5:b7:0c:89:cc:20:81:f6:a0:0e:80:2d:
c1:e5:df:87:6a:18:e8:72:18:cd:80:09:ad:5e:9c:
37:c1:c0:f1:34:a3:66:43:b4:a5:17:d3:a2:a4:82:
37:04:36:2f:c3:24:2f:31:5d:4b:cf:cb:60:2e:ba:
d9:78:39:4f:5e:8c:25:3a:66:f7:ae:37:84:ba:08:
7e:29:b0:bf:76:80:e4:f4:a4:08:75:05:5d:cc:70:
da:b6:d0:52:ca:78:1b:9c:97:af:b0:16:39:84:18:
0c:b3:d0:ff:23:71:5d:92:77:ba:24:a1:90:c5:49:
f4:4a:1f:9f:eb:14:11:6d:a3:0a:23:68:78:96:a1:
01:b6:1a:84:60:3e:53:fd:56:17:ee:95:2d:b9:86:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A4:5B:45:53:FA:C9:2F:25:A8:8B:5F:D7:9E:A9:C6:7D:E2:24:CC
X509v3 Authority Key Identifier:
keyid:A9:78:C3:65:5C:5A:60:97:12:E7:55:10:0D:98:89:2A:E1:C8:E5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXjDZVxaYJcS51UQDZiJKuHI5es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da614b-dd19-41e0-a7c4-66fd23eec34d/1/qXjDZVxaYJcS51UQDZiJKuHI5es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:53:62:2d:50:ba:0e:2b:c0:27:bd:18:98:30:3c:07:e8:44:
06:88:5b:3a:4b:82:3a:9d:45:ab:18:fa:29:c5:98:cf:c4:c1:
8b:87:83:e2:80:d4:7c:7b:ac:e2:a5:9b:19:a5:9e:0a:49:4f:
07:f5:7f:87:a3:1e:b2:e9:da:90:a4:c8:bd:9b:21:92:5f:47:
33:ad:ef:a5:8b:b8:b5:67:f4:62:04:1a:0c:71:2c:0b:02:33:
39:ec:a8:2b:35:3f:ad:74:75:4d:13:25:47:8b:6e:1a:94:02:
88:9a:4f:a7:b2:b9:d2:ee:61:ce:83:be:bc:d5:0a:a6:da:28:
b8:bd:ab:dc:22:1f:af:32:05:15:c7:7d:18:96:05:df:ed:db:
99:19:ab:cc:b2:3c:0a:7e:59:b6:2a:05:0e:c4:ea:66:63:84:
c2:3b:06:2d:3a:8f:a5:3f:81:0e:be:82:69:e7:f3:51:c6:46:
17:d1:3f:b5:4f:ec:6a:0e:4e:01:04:ff:71:e1:92:31:f4:17:
75:31:55:8b:56:31:ce:b1:13:ee:b8:c2:80:af:86:77:d7:ca:
c6:b2:df:59:cc:fc:a5:d9:2f:74:a2:0a:54:c7:47:9f:f6:5f:
ec:73:bc:94:e2:60:48:3f:08:57:2f:72:16:54:62:27:3a:9b:
a0:1c:a0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:34:49 2025 by rpki-client