Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
File: qKJRFAEUyP2K1ftFtxiaunvFBI8.mft (raw, json)
Hash identifier: DlsNjqyGKhb7kUH346O0aXhm7REKl/F5tt3Xdb2ZnqY=
Subject key identifier: DD:CA:67:E4:49:C9:3C:31:59:31:04:EE:1C:AD:1A:79:E2:26:18:05
Authority key identifier: A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
Certificate issuer: /CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Certificate serial: 019873E1D6ED57D134F52462CEBCE214A6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
Manifest number: 12A9
Signing time: Mon 04 Aug 2025 07:00:37 +0000
Manifest this update: Mon 04 Aug 2025 07:00:37 +0000
Manifest next update: Tue 05 Aug 2025 07:00:37 +0000
Files and hashes: 1: AHkD8Aaan3pABbcPGhXEHYTBg8Y.roa (hash: hXef/ttEb+W4FSVe0XdSIGoItwURMRnjh0hA4tDFc64=)
2: qKJRFAEUyP2K1ftFtxiaunvFBI8.crl (hash: GhX/IuzXEjc/PGjkSspsesFP2fRXRY+rVhBC8Zc6HAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:d6:ed:57:d1:34:f5:24:62:ce:bc:e2:14:a6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a251140114c8fd8ad5fb45b7189aba7bc5048f
Validity
Not Before: Aug 4 07:00:37 2025 GMT
Not After : Aug 5 07:00:37 2025 GMT
Subject: CN=ddca67e449c93c31593104ee1cad1a79e2261805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:af:78:6b:a8:8c:df:f1:db:87:24:91:97:
33:23:f2:3c:27:93:c1:7e:be:07:7e:f3:0e:7d:40:
90:44:35:6e:59:9c:2d:ce:43:b1:4c:9e:46:33:c9:
c6:af:3a:f3:c9:83:b8:54:b8:18:34:cb:4f:6e:19:
7f:dd:5b:bf:63:7d:6d:5e:e5:28:97:5a:73:14:c6:
69:a2:97:80:e0:13:ca:04:2d:5d:cd:19:d2:2b:8e:
40:e9:f3:52:1c:f1:0a:d3:11:75:3f:19:e9:3f:55:
6b:f6:61:85:1d:b2:c1:aa:25:2b:e9:00:c8:f5:70:
d2:75:c6:6d:95:24:e8:b3:4d:2e:65:43:c9:ca:2b:
ce:31:7d:cd:83:45:a2:67:b6:7f:32:9d:0e:90:c1:
ff:40:24:9a:8f:ca:ce:c0:a1:58:04:5c:e6:79:f0:
a9:3a:e5:1b:02:3c:4a:14:06:21:71:88:71:df:ef:
c7:5a:18:df:4f:30:0b:f8:b9:9b:f7:14:f8:41:53:
12:8d:bd:18:14:ec:e0:e1:9c:9e:86:c8:7a:20:9f:
c1:6a:fb:48:17:01:87:21:d3:86:70:72:ef:44:ec:
5e:b4:c5:26:2a:28:8e:67:0b:b2:05:e8:d0:4d:17:
6d:0a:d4:68:14:20:ed:21:b8:92:6b:a0:53:10:99:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CA:67:E4:49:C9:3C:31:59:31:04:EE:1C:AD:1A:79:E2:26:18:05
X509v3 Authority Key Identifier:
keyid:A8:A2:51:14:01:14:C8:FD:8A:D5:FB:45:B7:18:9A:BA:7B:C5:04:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKJRFAEUyP2K1ftFtxiaunvFBI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ee4a56-d5c9-4652-9cf1-f09462c12da4/1/qKJRFAEUyP2K1ftFtxiaunvFBI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3c:84:1e:c2:24:22:4d:b0:16:82:ac:35:29:a3:6f:58:0c:
c5:f2:84:e9:ff:dd:bf:38:e0:f1:75:de:fa:72:f8:96:60:16:
35:b4:02:93:27:b8:f1:79:a3:0f:43:18:d7:bd:f2:05:1c:01:
4c:ea:d5:5b:7d:6c:7d:68:3c:c7:6d:20:c0:a0:dd:dc:52:8c:
49:eb:09:9e:85:7b:47:9e:bf:a4:2c:68:6f:e0:4f:06:33:97:
a8:4a:27:56:1d:0e:ef:7d:69:a1:c9:f8:83:90:cc:30:c6:da:
72:b9:62:50:f9:68:80:50:24:69:6d:22:d6:5b:65:ce:51:68:
ef:ef:1c:fa:3c:48:0a:0e:ce:fc:fd:84:26:5e:25:67:53:1f:
38:11:ad:55:a8:83:a9:83:86:88:9c:98:ac:6e:0e:a5:92:88:
09:e2:c9:8f:b3:18:6e:65:6d:bb:65:5a:ae:98:a2:cb:e1:82:
a8:06:62:ee:36:89:78:2a:61:b9:5b:a0:c6:c7:65:43:1d:f4:
45:65:a7:93:ec:3d:ea:51:6e:0c:9d:13:3d:aa:51:65:38:13:
b6:f2:66:aa:d7:6c:e7:0d:e6:2e:a6:06:c9:7f:9a:b1:be:bf:
13:53:75:65:c0:30:55:c7:31:06:b0:50:39:a6:76:56:7b:a1:
02:f4:9a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:40 2025 by rpki-client