Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: 5lCdYJvGeWR7lkvpZghMIsQ49WzduUKdHU6IYYTlagA=
Subject key identifier: B0:96:79:35:98:C4:74:99:D0:2B:8F:90:EA:59:75:F0:3B:A4:B1:B8
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 0199FCFD1D1C3091C1049C88836F488FE5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: CTedhf-UDhDCo0gKWN1eFB95iME.roa (hash: Vr6y6sdI8B/BSyNE6gcBQftZW1dE4fIdtomKsz3LLNE=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: 1kl6iPnIDGwA77hi3k0q7xBKbBNYWS+68RFza6X1XbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1d:1c:30:91:c1:04:9c:88:83:6f:48:8f:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=b096793598c47499d02b8f90ea5975f03ba4b1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:6a:35:87:da:b6:97:23:d3:ca:f8:13:b9:
cb:dd:f2:9f:c6:a9:54:79:69:ff:43:46:3b:af:f9:
32:1a:06:c3:6b:e3:5b:47:89:a4:4d:80:1e:00:ab:
52:bf:df:2c:b4:af:95:46:ce:b1:52:b6:bd:53:ad:
a1:0b:2e:7c:4a:ec:13:6f:01:6e:22:b1:a3:4c:7a:
ec:b6:9f:b0:30:97:ba:9a:40:ea:90:e2:7d:2b:24:
3c:43:0f:c6:14:71:46:8f:62:2c:b2:ec:d8:57:1c:
19:c0:51:e6:39:a2:93:6d:08:d3:c6:d0:a2:7a:4d:
51:c5:10:80:25:a7:1d:98:96:d4:b2:36:ab:30:11:
c4:df:a0:f4:a4:8e:47:1e:87:e8:16:1b:a6:53:b9:
e2:ae:78:c9:da:75:24:6e:d9:70:07:4e:a3:63:ec:
e9:35:98:bc:ef:f7:bc:47:72:42:28:fd:7b:ae:e3:
a0:97:af:40:b3:3d:d9:b6:79:b7:e8:2d:43:b1:6d:
ce:93:bc:fa:b7:35:e0:9d:87:3f:25:e6:19:f3:c4:
e0:00:48:db:3c:78:70:0b:4a:3b:e1:4e:3c:c8:5a:
62:08:11:ab:51:f8:f1:88:10:27:bc:c9:ab:fa:a6:
ed:2a:ba:d4:2b:7a:b3:f2:70:86:5c:9c:25:12:86:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:96:79:35:98:C4:74:99:D0:2B:8F:90:EA:59:75:F0:3B:A4:B1:B8
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cf:d9:4c:d9:5d:90:6e:74:a5:c0:15:e0:ae:f0:3f:7f:ef:
c4:69:44:f5:3e:fb:bf:2e:4f:c7:17:0c:58:72:00:90:84:72:
18:e1:15:e9:57:0e:1b:6e:bb:b2:cb:0d:c0:89:21:cd:55:09:
76:d3:c9:48:04:ee:96:1e:7f:06:c3:c6:f0:ca:f3:72:c3:ac:
ec:a6:7c:a3:f2:21:de:b7:18:1c:ef:dc:92:aa:63:9b:1f:41:
ce:70:29:0f:37:fe:90:63:e4:75:e6:6c:8f:20:0e:7b:a2:89:
76:55:a0:52:89:40:a9:97:50:fe:1b:84:e5:99:73:f0:bd:de:
37:48:e1:76:78:dc:79:fb:15:0f:b1:14:9d:5e:43:a6:ef:27:
29:8a:04:03:4b:07:92:26:dc:0f:f5:6b:39:a3:8e:4c:29:8f:
59:d3:66:9e:db:6f:3b:04:29:4a:47:26:78:95:f6:88:a8:2d:
d2:87:a2:2d:cf:e3:9f:55:08:2e:af:76:fa:fb:f3:01:a6:44:
1f:46:9d:22:74:ae:dd:11:75:b8:01:8f:93:d2:db:15:4b:d6:
d8:ce:5b:3a:77:a5:48:08:27:34:6a:f8:eb:a3:e7:32:ca:75:
75:67:4b:1c:f0:4b:3c:5b:cb:54:1a:be:6f:3f:0b:68:6a:78:
1e:00:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:30 2025 by rpki-client