Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
File: qmeCzXu5IspLxugOeFf0ki9cI8Q.mft (raw, json)
Hash identifier: 5XRaq3DbQEVJ6JIrrPa2kntR9iXOljQKolF+zIw3xNg=
Subject key identifier: C9:74:B8:EA:20:78:26:7F:96:78:8E:21:FE:3F:84:6E:0B:F3:62:C0
Authority key identifier: AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
Certificate issuer: /CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Certificate serial: 0198A08436C150303B2E5C1A53E8B44D0D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
Manifest number: 30
Signing time: Tue 12 Aug 2025 23:01:15 +0000
Manifest this update: Tue 12 Aug 2025 23:01:15 +0000
Manifest next update: Wed 13 Aug 2025 23:01:15 +0000
Files and hashes: 1: 8Q0mj8ELLT0l3qpTNfSPe5yevws.roa (hash: 5QH/DPp/MLTxOyf+/vEAFoLpbGaLA0S+MvXcD7V2QGQ=)
2: n8grRcjYI8DzhU_PyxKKYOTlQMo.roa (hash: xgJvnRHC/iqc2iSgxKESHKwatBFYEv01jlV2QZqtIKM=)
3: qmeCzXu5IspLxugOeFf0ki9cI8Q.crl (hash: nLze6QUB6pgo+KQfzcmmDvmtEqtIncXs185eFSmMsTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:84:36:c1:50:30:3b:2e:5c:1a:53:e8:b4:4d:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6782cd7bb922ca4bc6e80e7857f4922f5c23c4
Validity
Not Before: Aug 12 23:01:15 2025 GMT
Not After : Aug 13 23:01:15 2025 GMT
Subject: CN=c974b8ea2078267f96788e21fe3f846e0bf362c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:de:33:2b:01:4b:89:2f:6b:6d:b9:44:3d:
2c:06:6d:70:89:db:ce:63:72:91:df:a8:02:01:69:
3b:8d:1b:0a:c6:c9:5d:bb:ab:79:7b:d5:a9:df:dc:
f7:b1:50:6a:5d:87:96:e2:ff:19:92:04:bb:40:0b:
b9:49:ec:6c:4e:12:67:3b:4f:3e:1f:56:9f:e3:71:
1f:2f:3e:31:04:39:0a:57:3c:cb:05:08:f7:fd:98:
fb:c4:fb:a2:18:ed:8d:60:32:31:83:c1:1a:5b:28:
2a:f1:6e:39:76:b8:db:d5:bf:f8:05:18:32:97:0e:
da:9d:fb:1e:d0:25:89:fd:b0:98:9d:8d:7f:e0:b7:
82:ed:03:f3:91:bb:6d:04:6d:b8:7b:cf:f3:10:0a:
8e:43:c8:62:03:60:c2:b3:90:aa:34:f1:1a:93:f8:
dd:16:ae:2a:14:22:8a:22:7c:64:b9:39:14:2b:08:
bc:8a:0b:4e:87:9b:e7:50:6e:3a:40:8f:6a:3f:06:
14:85:5f:e3:a3:63:8c:d6:92:aa:f6:d4:d0:63:ce:
06:97:c3:d3:81:09:95:24:8b:0b:1c:9f:90:3f:a6:
d7:72:69:b2:7d:2b:89:07:a0:a7:0e:04:31:db:34:
82:34:dc:db:b5:86:41:20:82:ca:1e:21:f7:9d:65:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:74:B8:EA:20:78:26:7F:96:78:8E:21:FE:3F:84:6E:0B:F3:62:C0
X509v3 Authority Key Identifier:
keyid:AA:67:82:CD:7B:B9:22:CA:4B:C6:E8:0E:78:57:F4:92:2F:5C:23:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeCzXu5IspLxugOeFf0ki9cI8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/39f4bf-38fc-4312-8516-b430e8de7747/1/qmeCzXu5IspLxugOeFf0ki9cI8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cd:d3:9e:e3:53:dc:a1:29:ec:46:46:37:cb:dd:43:8a:d7:
d2:1e:88:79:69:b2:66:dd:fd:4d:0e:b1:93:ad:9b:79:0e:43:
ae:a5:a1:e5:bd:4c:9b:e4:d9:85:f5:ba:dc:e5:9f:33:53:b5:
aa:93:06:bd:bc:8c:cc:5f:5b:e0:42:4c:d3:30:5e:96:69:05:
00:32:58:00:80:7c:ea:7a:66:eb:7d:33:0f:d4:ca:cd:98:dd:
1f:a6:7a:9c:7b:ae:e1:c6:1d:7c:84:d4:a8:ba:3f:96:13:7a:
11:77:d6:34:36:04:cc:ee:a2:41:b7:4c:94:31:ad:b9:7b:86:
7b:9c:2c:e0:57:4f:c1:93:f9:c8:dc:fe:7a:37:3f:76:f2:8a:
f4:57:e2:fc:54:20:a5:a9:d2:69:3e:38:03:8d:b0:27:de:b1:
18:ef:0c:7e:cc:44:eb:b1:5c:9b:80:31:7c:77:56:d3:d3:b1:
c6:97:5f:38:ff:e8:54:c4:cb:64:56:c9:0e:28:15:8d:74:c1:
e2:06:d1:26:fe:0e:81:37:ba:b3:45:d9:cc:78:01:5d:c0:57:
7f:a4:03:80:71:5b:2d:93:9b:7a:31:cb:15:c1:c1:06:e3:6b:
2a:be:5d:18:77:25:b0:d6:34:db:db:24:3a:63:2f:89:af:fa:
d7:6f:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:55:03 2025 by rpki-client