Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
File: qujptNjblGuyDM9RJ5cHXIr9g80.mft (raw, json)
Hash identifier: NJ79bec/BdxMOcEDsqnBUuDjYBDcprrnQjUkN8ND+as=
Subject key identifier: 47:82:2D:14:7B:77:A5:BE:DD:C8:27:41:C1:3A:46:A1:AF:F8:C1:F1
Authority key identifier: AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
Certificate issuer: /CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Certificate serial: 0198D660F1025910E131D9D17CCC31150832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
Manifest number: 04A4
Signing time: Sat 23 Aug 2025 10:02:14 +0000
Manifest this update: Sat 23 Aug 2025 10:02:14 +0000
Manifest next update: Sun 24 Aug 2025 10:02:14 +0000
Files and hashes: 1: ABD8LSpm9Ko-5zn9g0r9GsemMIA.roa (hash: 1zcaf+BfE0QK77Rl0YVNTPqdqeAJJr/C/HmAQhJgCmY=)
2: qujptNjblGuyDM9RJ5cHXIr9g80.crl (hash: Ow7h0xhlTG/oIe+aA457NOY3V8DncWeCMBrZrn/3090=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f1:02:59:10:e1:31:d9:d1:7c:cc:31:15:08:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae8e9b4d8db946bb20ccf512797075c8afd83cd
Validity
Not Before: Aug 23 10:02:14 2025 GMT
Not After : Aug 24 10:02:14 2025 GMT
Subject: CN=47822d147b77a5beddc82741c13a46a1aff8c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:9f:00:90:47:62:37:78:61:95:14:43:8f:
22:3e:9f:6a:70:ff:46:f4:0c:14:ea:e4:d5:ad:b5:
5a:ea:92:94:ca:0c:dc:65:00:6f:3d:d2:f4:76:4a:
c6:dd:8f:9f:ca:77:bd:75:00:06:d0:86:e8:53:91:
7b:d2:ff:d5:03:e9:e0:fd:e3:72:a9:ae:7f:d3:14:
5f:38:22:77:5d:6a:e6:93:3a:1d:8e:da:0a:4f:bf:
0e:6f:7e:d8:f2:40:a6:f1:3f:6a:c5:7b:73:00:50:
97:91:d5:26:fd:05:53:aa:be:7e:ec:14:61:d7:8a:
8f:f3:ce:63:ca:05:85:e7:cb:54:9e:fb:c3:48:74:
7f:87:11:cb:05:52:b8:56:db:2d:ce:35:09:b7:a8:
b2:c2:93:6c:ba:52:a6:a1:94:4c:f7:5c:9e:32:4d:
28:f4:37:16:aa:49:21:d9:1b:cd:4f:1f:bc:64:d6:
73:c7:fc:f2:d5:63:01:20:d4:de:d6:0b:06:63:64:
4b:04:21:37:e0:25:54:8c:42:44:6f:fc:e5:14:ca:
61:d4:dc:3c:7c:d0:da:ef:b7:31:a2:bd:24:64:82:
b3:ce:1e:09:a4:f4:fe:88:e3:e3:95:89:6a:2f:c2:
3a:34:f8:da:fe:0c:2e:a4:84:c8:3f:09:85:00:58:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:82:2D:14:7B:77:A5:BE:DD:C8:27:41:C1:3A:46:A1:AF:F8:C1:F1
X509v3 Authority Key Identifier:
keyid:AA:E8:E9:B4:D8:DB:94:6B:B2:0C:CF:51:27:97:07:5C:8A:FD:83:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qujptNjblGuyDM9RJ5cHXIr9g80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1e872f-8851-4d17-9148-f8905672e59d/1/qujptNjblGuyDM9RJ5cHXIr9g80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b5:29:13:5c:f3:65:eb:c8:f5:c0:ac:bb:46:00:e1:ed:87:
cd:6c:e9:a2:78:11:3f:ea:0f:02:31:f2:d0:a8:34:e4:cc:30:
67:38:98:de:8f:47:8c:e7:bc:c1:55:46:b3:39:30:7c:c8:ac:
95:f1:a7:38:7d:e8:cd:6c:47:3a:38:7a:18:a2:81:35:52:22:
b5:a8:86:7a:26:8c:ed:88:60:6a:4a:44:bf:df:fe:71:0e:59:
d7:08:3e:2c:87:6d:6d:3a:36:e1:62:78:96:53:ca:d2:3d:2d:
59:bc:6b:f1:2d:1c:eb:a9:16:b9:a6:0c:33:d0:61:8c:50:9a:
80:69:94:b3:39:07:38:65:55:e6:c2:71:8b:bf:c1:07:85:f5:
2e:ca:64:d6:d6:a3:10:0b:b0:e2:b8:f8:fe:5c:0b:8d:04:99:
b7:c3:81:e9:7a:14:81:1a:56:57:e5:ab:d6:23:b9:bf:c7:33:
3b:f1:de:3e:5a:2d:a8:82:42:c8:cc:de:4e:cb:76:8f:81:f3:
ce:f3:61:5c:c8:6c:86:73:8a:38:f8:7e:b2:fb:d3:99:e2:3a:
bd:50:e4:e4:c0:e9:48:2d:2f:35:e2:92:d3:9a:d2:f9:c8:b7:
35:59:04:db:e9:9d:7e:42:bb:e6:f3:5f:12:6e:d6:2f:c0:15:
15:50:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:00 2025 by rpki-client