Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
File: qJhJa40d2CW0hwOPuHyhmbE7k98.mft (raw, json)
Hash identifier: /G5BXnSylCgoPdC9dKcNNImRflGM7i1cazMV7p9oIaY=
Subject key identifier: 44:C0:E2:B8:D4:FA:65:95:52:1F:FC:17:00:DA:99:7A:99:57:0E:A1
Authority key identifier: A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
Certificate issuer: /CN=a898496b8d1dd825b487038fb87ca199b13b93df
Certificate serial: 0198D54E5CD3495EC8E8D24B09C9C9A3DE44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
Manifest number: 1359
Signing time: Sat 23 Aug 2025 05:02:19 +0000
Manifest this update: Sat 23 Aug 2025 05:02:19 +0000
Manifest next update: Sun 24 Aug 2025 05:02:19 +0000
Files and hashes: 1: GWRi8zK93x8vN7fuDHcGs4Qxgx0.roa (hash: hNAeNeysPf3hbEOCV7P9iNZJA7eK1rPR2orO/tOEM8Q=)
2: qJhJa40d2CW0hwOPuHyhmbE7k98.crl (hash: WpXapSV66r6kipdcRYEowkoedsICaxUn8FyNbckHRjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5c:d3:49:5e:c8:e8:d2:4b:09:c9:c9:a3:de:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a898496b8d1dd825b487038fb87ca199b13b93df
Validity
Not Before: Aug 23 05:02:19 2025 GMT
Not After : Aug 24 05:02:19 2025 GMT
Subject: CN=44c0e2b8d4fa6595521ffc1700da997a99570ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:17:9e:46:6c:b2:e9:05:87:9f:4b:b0:7f:
2f:83:2e:84:41:76:03:e1:31:ca:c6:b8:7a:b9:6f:
a1:f3:dc:7a:68:b5:47:7f:3b:ba:83:a0:9c:61:1d:
1b:6f:57:78:c9:fb:6e:4e:80:0f:f6:38:fd:12:51:
9b:c4:b9:9e:48:bf:13:6e:ae:c9:4a:6d:79:86:5d:
51:8f:68:0d:02:8a:f6:e9:cb:9c:35:d0:bf:cb:5d:
b2:ae:ef:b2:66:25:ba:36:aa:d9:19:2c:69:dc:52:
94:7f:5d:8a:8d:32:6e:94:06:8f:09:40:40:be:8d:
c2:c4:f9:8f:fa:ba:ed:f7:08:bf:3b:fa:3f:bc:19:
49:c9:cb:e9:4a:62:44:e3:f3:57:5c:cd:30:1d:66:
0b:a1:64:8f:96:cd:37:6b:18:92:89:fe:ce:3b:ed:
f4:77:5a:58:e3:68:44:ee:8b:ba:e6:86:90:65:2d:
41:25:41:cd:19:36:39:e1:8d:57:97:10:aa:0e:de:
0f:ab:b4:07:3e:e6:18:13:4f:65:26:f0:d4:bc:01:
1c:32:a7:77:27:c2:4d:a3:22:94:4c:06:0f:26:ca:
40:3e:40:15:d6:61:a4:36:df:bd:ff:b5:93:9d:f0:
07:f6:1c:04:6d:54:ae:45:f4:1c:92:c4:ba:21:8c:
d8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C0:E2:B8:D4:FA:65:95:52:1F:FC:17:00:DA:99:7A:99:57:0E:A1
X509v3 Authority Key Identifier:
keyid:A8:98:49:6B:8D:1D:D8:25:B4:87:03:8F:B8:7C:A1:99:B1:3B:93:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJhJa40d2CW0hwOPuHyhmbE7k98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8603e1-9b6b-43a6-b95e-36878f657e12/1/qJhJa40d2CW0hwOPuHyhmbE7k98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:15:3a:75:bd:1f:50:66:27:1e:27:62:d0:85:e3:76:58:d8:
15:d2:52:9c:0b:9c:07:8f:03:75:20:0b:60:b5:df:3a:36:e4:
52:da:74:e0:37:6d:fb:5a:de:df:7b:ae:2b:10:08:e8:bd:63:
4b:6f:ec:55:79:6d:f4:b5:1a:ac:47:38:a3:13:18:74:d3:f5:
4e:12:7a:08:92:07:c3:8c:2b:09:5f:5c:90:d2:c2:f0:43:86:
92:f6:13:a8:a4:08:12:8a:3d:b7:ff:b9:a1:8f:ca:61:ca:9c:
97:92:db:81:95:39:34:71:65:93:5a:f7:61:87:0e:1f:f2:88:
22:34:a8:4e:fe:5a:84:20:2e:27:c1:9b:3d:03:ad:e2:0a:ef:
dd:de:2c:83:06:a6:38:f7:a5:b9:68:cd:32:66:9a:33:0b:25:
7a:83:e1:cd:aa:29:d4:c6:b7:19:9f:7e:9d:3a:3c:72:da:fc:
e5:c8:9b:fa:89:6d:95:ea:ad:6f:34:41:1b:84:a6:1c:75:bc:
a3:16:1f:ee:48:69:cd:44:fc:58:ef:db:7e:2c:3e:ed:c3:16:
00:b1:04:fb:95:81:25:21:27:a8:43:d1:cc:69:63:a8:75:0a:
71:c5:e2:b6:0e:1b:4d:a8:27:35:ec:08:9a:f5:57:53:e9:10:
11:97:d0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:34 2025 by rpki-client