Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: vrEMPsSzOyR/bC3lZ3CuSa8QbNNaMx1limnSoPbgcHI=
Subject key identifier: B4:0E:AD:D7:0A:95:6D:74:D6:B2:4D:8E:28:11:1C:27:2A:AE:94:00
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 0199FE46CF93FD1EC0B37E5E7D6A2BB29DAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 03CA
Signing time: Sun 19 Oct 2025 21:01:17 +0000
Manifest this update: Sun 19 Oct 2025 21:01:17 +0000
Manifest next update: Mon 20 Oct 2025 21:01:17 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: s5MrdKqUlyRb2CQPSihOpZsekaar0Ltf+0KtUXH0AdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:cf:93:fd:1e:c0:b3:7e:5e:7d:6a:2b:b2:9d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Oct 19 21:01:17 2025 GMT
Not After : Oct 20 21:01:17 2025 GMT
Subject: CN=b40eadd70a956d74d6b24d8e28111c272aae9400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:16:f9:5d:c5:7c:82:ae:39:6a:30:e2:02:
36:26:3d:1e:5f:ca:40:97:b5:d6:bf:3c:ad:02:91:
1c:e9:dd:89:c0:61:12:f2:30:3d:03:03:c5:10:2e:
0c:b0:19:87:fa:31:39:8d:59:92:91:ad:8e:19:0e:
f2:57:70:16:e5:f7:55:15:1b:f7:a3:ba:61:e3:93:
9a:a4:f6:f5:58:81:c6:43:1a:1e:4a:48:36:49:3f:
7e:eb:3a:0a:92:50:eb:fa:d2:67:36:9f:28:d3:c4:
9d:90:5c:10:66:b8:6c:23:6a:4f:15:82:69:a6:3c:
dd:fd:2f:76:24:9c:47:a1:9b:15:5f:ec:bc:5f:15:
3b:b0:ab:16:31:94:95:0f:11:30:2b:a4:40:75:0a:
2a:08:a5:e3:3f:db:fe:8b:40:24:21:3d:77:50:82:
f7:60:83:ab:56:0b:bc:48:42:00:b0:f3:a5:d7:e6:
e5:21:8e:ba:2c:62:b2:84:9b:e9:bf:b2:ca:7a:03:
8b:33:c4:19:2c:8a:98:ab:f3:14:e4:58:60:53:aa:
9d:af:75:68:55:0b:ea:a0:98:f6:21:6e:b9:2e:be:
10:dc:1d:a0:5d:cf:bc:f4:59:54:ed:be:f8:4f:42:
eb:c5:6b:20:b4:49:78:4e:e1:66:f6:a2:b0:68:de:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0E:AD:D7:0A:95:6D:74:D6:B2:4D:8E:28:11:1C:27:2A:AE:94:00
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:72:08:93:36:c8:db:3e:7c:d9:d7:9f:df:02:31:8d:f4:
53:c4:af:c7:83:45:24:68:64:14:7a:d7:02:8c:2f:94:11:96:
3f:f6:de:6b:ef:5b:16:d3:d3:ba:35:53:5d:cd:4d:90:60:2f:
b3:d8:b9:39:c6:7b:9c:9a:e5:72:a4:e5:cd:4e:4b:f0:8d:4e:
fb:64:2f:4d:fd:6c:e2:48:7a:4d:9f:ca:b6:b4:d6:43:14:40:
e9:03:a1:b4:e5:6b:bd:7a:e5:c7:bd:83:4b:22:03:4c:cf:0f:
70:c0:21:09:cb:8e:b4:1f:4f:c1:43:62:4d:96:fe:3c:92:20:
c3:d3:6d:09:e0:21:a7:62:32:ac:05:5b:82:1d:ba:ec:80:14:
78:92:d8:2c:ee:5d:1b:58:27:7c:5a:e8:42:bc:42:59:e8:30:
f3:d1:1d:bd:09:45:11:b4:15:c5:07:76:6c:a8:e2:8c:16:e4:
06:6d:b7:03:75:e6:8b:2f:08:dc:e3:fb:07:5e:a0:b4:bc:83:
99:21:37:65:62:0a:ff:e0:de:35:fb:ce:e3:75:ab:55:fc:45:
a3:27:cb:4f:dc:d3:26:7c:bd:85:c6:06:4e:e6:55:f5:2e:b9:
39:07:e6:e8:50:24:0f:eb:5d:ec:66:6c:4c:2f:4e:9e:be:18:
8f:5b:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:42 2025 by rpki-client