Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
File: qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft (raw, json)
Hash identifier: Q9LhfUak61sbu1lJBGz8G3X+Yy8lvSmITcZZSzkUADk=
Subject key identifier: 81:C6:60:37:12:7B:EB:11:17:B8:BE:9B:31:6E:14:21:05:EE:AF:4D
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 0198898E4E326A95AF8A6E9EA3F72FE2AC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
Manifest number: 0A0D
Signing time: Fri 08 Aug 2025 12:01:01 +0000
Manifest this update: Fri 08 Aug 2025 12:01:01 +0000
Manifest next update: Sat 09 Aug 2025 12:01:01 +0000
Files and hashes: 1: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (hash: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=)
2: qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl (hash: OMt/C5ri7Fwe/vI4IMFfyBxcr7E/OyBnjpZ3aMHf0lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:4e:32:6a:95:af:8a:6e:9e:a3:f7:2f:e2:ac:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Aug 8 12:01:01 2025 GMT
Not After : Aug 9 12:01:01 2025 GMT
Subject: CN=81c66037127beb1117b8be9b316e142105eeaf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:98:ee:39:11:ed:62:0e:f0:b2:29:c8:84:9c:
d7:dc:6d:c6:43:cf:88:1c:e0:a5:5e:cd:59:02:4e:
d6:08:83:05:cc:f2:c8:6a:14:d7:0a:75:f0:f5:38:
db:c9:0e:dd:04:d9:3b:b6:5c:36:e5:66:fb:d3:4f:
a0:40:be:5d:68:c0:0d:09:d8:6e:f1:69:23:3a:06:
7c:9e:3f:5c:b5:2c:0e:79:a4:b7:60:41:f5:c7:9f:
46:0b:c8:ae:a8:62:15:eb:2c:22:06:d9:60:02:b5:
17:1b:cc:b8:dd:b7:ab:07:51:61:c5:84:04:b6:87:
22:58:6c:a3:26:7e:86:af:93:0a:94:6f:83:a7:b2:
07:33:5e:09:f9:f5:ae:13:c3:40:e2:4a:35:2a:f5:
77:7d:b6:3a:77:b9:e8:34:1c:5a:ff:53:54:67:bc:
eb:3c:a0:8a:c0:31:5f:0a:45:1d:0b:33:c8:27:5c:
c5:18:11:53:ab:fe:46:95:08:33:77:e4:c5:19:98:
76:81:f5:30:93:07:b6:91:c7:3d:02:e4:f1:06:be:
24:5d:14:65:18:c6:21:2c:21:5f:49:ea:e4:9e:b6:
94:b0:37:23:80:4e:6f:77:08:a9:c4:f6:4c:f1:86:
7d:ed:81:aa:3b:4d:4a:94:56:bd:60:47:22:39:ff:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C6:60:37:12:7B:EB:11:17:B8:BE:9B:31:6E:14:21:05:EE:AF:4D
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:12:f5:18:65:90:f8:ce:94:bb:1d:3f:39:86:29:32:d9:c4:
3a:d2:8a:af:56:42:ab:b5:64:e4:f8:85:eb:42:02:8a:53:ad:
6c:88:78:72:6f:86:25:f5:9c:3b:f3:9b:53:4b:14:46:ee:f7:
17:28:1a:77:a7:b9:3c:9c:66:ca:92:ed:67:29:0b:ae:45:7c:
e1:3c:d6:c6:78:0a:22:82:6e:0b:1e:9f:ce:42:57:22:cc:4d:
01:ec:6d:7e:eb:62:61:2b:b2:88:1a:ae:7a:d6:6a:8c:3a:62:
3b:5a:b2:c3:7f:38:db:bb:a9:c5:d9:60:86:60:27:19:81:33:
82:83:b7:cd:25:19:5f:37:00:59:36:26:a6:0b:09:04:0e:de:
1d:2e:5d:22:05:b0:72:6b:f5:c8:28:9f:f8:4d:7c:78:55:d3:
c8:1d:9c:eb:7b:6b:41:fa:4a:d4:23:c8:29:5b:9f:91:98:9b:
6a:5a:aa:85:a3:c0:6e:6b:ac:09:c1:d7:d1:a2:ce:dd:5f:24:
ca:b4:42:06:d2:9e:62:86:42:72:22:e9:1b:6f:dd:f7:ff:4a:
a2:67:24:54:09:2a:8b:0b:e3:d1:d4:09:e0:88:0d:68:66:42:
31:91:3c:69:1a:25:b3:39:02:05:81:5b:7c:76:b2:db:e2:98:
0f:db:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:48:05 2025 by rpki-client