Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
File: qjHuUSwaViq56UEKgx9y_UMYiS4.mft (raw, json)
Hash identifier: y4QBcQY3oSrsJQHeTcWpdxjlyMyigmum5ClVM0Gqx6w=
Subject key identifier: 52:99:DA:9A:90:DC:90:42:E6:92:B6:B8:74:61:03:6C:68:82:5D:FB
Authority key identifier: AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
Certificate issuer: /CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Certificate serial: 0198D5BBF5B240D5A64E88F0CDC1A998E357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
Manifest number: 0923
Signing time: Sat 23 Aug 2025 07:02:01 +0000
Manifest this update: Sat 23 Aug 2025 07:02:01 +0000
Manifest next update: Sun 24 Aug 2025 07:02:01 +0000
Files and hashes: 1: TrtR0Owq5Xkx-biJC8Ej_IhK1Ag.roa (hash: a1F6oMMLvEFRIYoQInrH9FMRLmJcoCgIJF0JoxM2u7Q=)
2: qjHuUSwaViq56UEKgx9y_UMYiS4.crl (hash: wnefAOrb8iRMzYwsF7ZAnq33OIMOqAxoEzR6xIztlNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f5:b2:40:d5:a6:4e:88:f0:cd:c1:a9:98:e3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa31ee512c1a562ab9e9410a831f72fd4318892e
Validity
Not Before: Aug 23 07:02:01 2025 GMT
Not After : Aug 24 07:02:01 2025 GMT
Subject: CN=5299da9a90dc9042e692b6b87461036c68825dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:2f:a1:9a:f2:1a:e7:e5:69:1f:ba:5e:5e:
9b:d9:53:76:ed:a1:15:61:9d:e8:75:3a:fa:d1:2e:
ae:41:b2:30:34:e3:31:ba:29:08:cc:32:c6:e7:83:
b3:55:bf:70:5e:f2:e2:6c:29:96:13:4d:4e:ee:f1:
aa:63:4b:0b:74:75:bd:39:41:c0:4f:59:fd:c2:97:
02:59:7c:1c:22:9e:bd:b1:cd:96:bc:87:df:83:03:
11:4f:54:ec:d0:4c:22:7b:db:51:69:d7:58:fb:75:
04:05:a8:39:11:bf:b1:7f:00:ce:82:22:ef:17:45:
5a:a2:13:7a:7a:8e:6e:b4:ab:24:3e:72:c6:09:7a:
b5:26:34:05:3e:ad:49:f2:2c:cf:9b:ba:ae:db:11:
9c:be:4f:88:a0:a7:51:30:ab:58:9e:a8:99:91:d6:
cf:4a:44:ab:ab:66:90:d0:89:30:ec:37:07:7b:58:
8a:3e:0c:7b:e7:69:cc:33:7b:e4:29:00:ab:2b:19:
1b:63:e5:bf:eb:11:89:c2:3d:12:7b:c8:08:2e:0d:
99:ed:a8:db:e2:c2:54:ff:11:da:fa:82:ef:61:89:
02:63:dc:bc:23:35:e0:68:9a:9d:21:d9:29:ed:f8:
95:93:dd:1f:3e:e4:83:17:dc:0c:60:9a:ef:fe:8f:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:99:DA:9A:90:DC:90:42:E6:92:B6:B8:74:61:03:6C:68:82:5D:FB
X509v3 Authority Key Identifier:
keyid:AA:31:EE:51:2C:1A:56:2A:B9:E9:41:0A:83:1F:72:FD:43:18:89:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjHuUSwaViq56UEKgx9y_UMYiS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7ef54-bdb0-450a-8646-ee08146e3713/1/qjHuUSwaViq56UEKgx9y_UMYiS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ef:33:2f:5f:6c:b8:82:db:8e:50:3b:5d:03:6f:a5:d6:e2:
e0:73:ab:cd:35:6f:96:4e:1d:ff:d5:4c:73:6c:0b:20:ef:45:
9a:5c:1f:5b:a8:c9:51:9b:79:5e:83:95:88:16:b5:0c:55:f9:
d0:75:33:77:fe:46:ec:53:e3:5c:e6:26:a6:21:9e:b0:77:d5:
d2:20:e0:ce:20:91:14:05:73:50:a5:f0:14:6d:af:9a:6a:58:
85:47:c7:04:cf:b8:b5:1b:84:16:a7:78:7e:d2:13:a7:76:bb:
24:97:c5:e9:90:0b:51:b3:81:46:50:1c:13:d1:d0:25:cb:a6:
a6:d4:06:18:e8:b2:4d:c8:04:3c:2e:5e:36:6c:7c:23:16:4e:
7a:c4:69:0a:17:96:18:d3:e9:7d:5f:90:2d:34:51:a2:2e:af:
e4:41:4a:51:67:b7:4c:12:04:d1:fb:2b:0c:f8:b1:fa:ee:23:
0c:d1:07:8a:a6:bf:de:8e:23:61:3f:12:af:d7:5c:46:2e:e5:
02:f6:83:2a:b3:2d:c7:49:bb:a6:0c:d9:8b:3d:2a:5f:32:21:
3b:3a:ae:1e:e6:92:3c:a3:e7:d2:34:4a:da:b7:e8:c4:df:d5:
3f:59:24:bd:2f:de:f6:a6:d0:c1:2f:ef:62:cd:e8:bc:36:78:
75:ab:de:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:51 2025 by rpki-client