Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: UH2IIUNxnk3XzCybixUD+pcmYrpvvMoNXZGTjM9a3m4=
Subject key identifier: AF:DD:95:71:C4:B9:87:F4:05:A6:E4:1B:AD:64:F5:FF:BD:4F:5C:C1
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 0198D515AD66EB9B66516E6F62BEBA17DE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0B2C
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: fevje2pX/dcCbmTnteXb7v4Er1W3CxQjTj/m0+PP/g8=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ad:66:eb:9b:66:51:6e:6f:62:be:ba:17:de:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=afdd9571c4b987f405a6e41bad64f5ffbd4f5cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1f:70:b3:e2:25:91:e4:98:5e:3e:40:e9:aa:
a4:19:c8:44:4f:63:35:4e:9e:a0:96:55:eb:f3:41:
e9:75:0d:49:1a:c0:ff:71:a2:ad:60:87:8c:5d:cb:
7e:ef:f7:f9:64:55:06:c4:fd:36:9d:da:3f:77:61:
80:03:57:2d:e9:7c:45:f1:c3:bc:84:47:32:23:f1:
26:40:c8:6e:99:24:1f:ea:0c:7b:9e:1c:ae:86:ca:
e8:47:22:30:47:e1:be:44:71:e5:58:3d:c3:05:d6:
80:3e:2c:b2:d4:32:c4:cd:cc:29:1a:58:db:19:0c:
35:05:e3:b0:fd:2b:2b:c7:74:d1:c2:a7:f8:88:e4:
54:41:3e:19:39:25:86:47:59:ab:58:8c:98:9a:24:
56:7a:ad:ac:51:69:bc:2a:c8:5d:da:81:97:d0:50:
f3:91:06:ab:3a:1c:08:d2:cc:3e:94:79:df:4f:d1:
84:c5:96:11:01:17:3a:72:05:37:43:68:08:24:89:
f1:72:ab:6f:b7:b9:63:6f:13:9c:60:c7:a1:52:ec:
13:16:b9:74:9f:30:87:1a:42:66:5d:d5:3f:a5:3b:
15:01:9e:f2:d6:1c:92:32:45:ab:79:f8:3e:7c:71:
fc:cc:ce:4d:41:eb:49:07:39:8f:48:ea:db:7e:46:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:DD:95:71:C4:B9:87:F4:05:A6:E4:1B:AD:64:F5:FF:BD:4F:5C:C1
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:7b:9a:83:c5:b6:0f:4c:dc:e9:13:82:9e:3b:fb:55:4e:68:
c6:be:61:e5:28:09:d6:c7:67:1c:87:b3:14:92:97:03:de:01:
ac:53:ea:c8:b4:f0:e8:92:b5:56:2f:93:46:56:09:8a:13:e2:
e2:46:a6:36:25:3e:3c:48:9d:cb:be:55:e5:83:ec:8b:1e:21:
e3:9b:0d:ae:f6:ac:12:3f:2d:95:e8:d7:c4:35:31:04:aa:8d:
e6:a1:64:53:19:bb:60:82:b7:52:85:e1:7b:74:69:d4:92:bc:
a5:92:14:8a:65:7e:d0:eb:1c:23:d2:ee:b5:f1:47:95:07:a1:
28:91:85:03:32:7b:54:d3:de:20:c1:2d:ff:79:45:b2:55:36:
08:36:aa:26:7d:dc:53:15:c9:6f:d8:28:54:a8:e0:0b:42:c3:
1d:0a:9b:16:c0:4b:17:c7:75:56:ca:d8:1d:eb:84:b2:2e:3a:
3b:06:0c:05:54:a0:31:ed:f0:e3:dd:66:19:cf:52:9d:e0:24:
49:9a:03:bb:62:e4:b5:bf:5d:f4:d9:18:d3:2b:89:45:a7:d7:
f9:3c:8a:db:54:5f:68:d4:6c:87:a9:47:c1:c1:1a:a0:a2:de:
ef:a9:54:4f:d3:4d:c4:6f:f7:89:6d:d4:3b:3d:56:d0:99:62:
87:52:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:00 2025 by rpki-client