Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
File: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft (raw, json)
Hash identifier: CTKQ3lvQ8NLiMS0HUAsyZ6KHSgN5P1niKkcuF+hk5P0=
Subject key identifier: F2:7B:00:2D:01:41:2F:02:36:EC:6B:95:6D:40:7C:80:88:B7:6C:22
Authority key identifier: AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
Certificate issuer: /CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Certificate serial: 019893A40061DD2F84B06B5E051044177695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
Manifest number: 09C0
Signing time: Sun 10 Aug 2025 11:00:55 +0000
Manifest this update: Sun 10 Aug 2025 11:00:55 +0000
Manifest next update: Mon 11 Aug 2025 11:00:55 +0000
Files and hashes: 1: R32ocj-6uY_43O0MYMBgyGscCvA.roa (hash: r9h0VFYvoYX+2ey0h2BkC9X3BYpiR12BEJYPKT358/g=)
2: qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl (hash: 4iJr8C5a0yf/JlewNZZZgE+TLPkHv3kzkb4a2oqUat8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:00:61:dd:2f:84:b0:6b:5e:05:10:44:17:76:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa00ca862956f19d4dc95468aa616f9b167d9b39
Validity
Not Before: Aug 10 11:00:55 2025 GMT
Not After : Aug 11 11:00:55 2025 GMT
Subject: CN=f27b002d01412f0236ec6b956d407c8088b76c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:63:6b:9a:37:c0:48:13:44:ff:57:c0:fd:
2d:58:c7:93:b9:ea:96:9e:27:d5:1c:b7:f2:dc:e5:
44:7a:c8:93:4a:f2:b5:09:2c:62:e8:a8:0c:17:e7:
e3:9b:72:af:81:48:e4:5d:f8:07:65:42:05:66:ed:
e6:95:44:07:51:3e:3b:66:d7:cb:13:d6:46:12:7c:
0e:ee:68:16:02:84:6f:ab:c6:3b:69:17:3b:a2:e4:
51:27:c2:c0:a8:20:34:0a:b0:89:dd:8e:8e:5a:32:
24:3f:51:93:dd:0d:38:96:5b:45:3e:58:d5:21:11:
cb:ef:5d:52:57:88:9e:a6:8d:e3:d2:54:bf:33:e8:
86:ea:c4:ec:44:d8:10:e1:bb:85:c2:97:78:80:25:
d4:4e:c7:4d:eb:fd:52:3f:f8:66:f8:c4:02:1f:e4:
c2:69:28:86:0e:6f:e9:c8:6a:bf:19:24:f5:a5:9a:
28:ef:7b:91:a4:f0:5d:d2:51:f0:5c:c1:2c:c8:17:
f5:d5:9a:9f:79:08:4e:74:b9:83:af:b7:3b:c2:72:
1a:f7:bd:a0:44:82:3b:44:e3:73:ad:50:75:53:91:
2d:82:95:8f:03:50:97:c0:71:36:a3:2a:69:b8:0a:
69:c1:ad:2b:5d:57:76:4f:c9:e0:16:ed:d6:db:d5:
0c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7B:00:2D:01:41:2F:02:36:EC:6B:95:6D:40:7C:80:88:B7:6C:22
X509v3 Authority Key Identifier:
keyid:AA:00:CA:86:29:56:F1:9D:4D:C9:54:68:AA:61:6F:9B:16:7D:9B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/db0b0e-97f1-48bd-ac2b-7e89f41b266b/1/qgDKhilW8Z1NyVRoqmFvmxZ9mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:bc:32:12:26:b2:f4:49:a9:a3:89:3e:f6:2a:d7:8e:4c:52:
cd:95:95:f1:c7:6a:2d:49:d6:f3:f4:6f:cd:21:8c:e3:a2:d7:
dc:0c:79:2c:95:20:74:17:23:64:27:38:b0:cf:48:e3:57:b5:
53:ea:15:20:1f:2b:ab:a4:f6:46:11:36:2d:9d:63:5c:57:a3:
d8:af:f2:1a:3d:14:42:80:2d:f0:a1:76:dc:01:e3:ca:07:48:
b8:51:9c:f6:8b:1c:ed:2b:46:b9:bf:8d:8d:f4:5b:a8:9e:65:
b2:56:c5:57:ff:2a:c4:65:93:a6:fe:73:fe:71:b1:61:1a:8f:
fb:ad:ed:7f:fe:ef:83:04:f5:5e:07:ff:6c:c9:f6:69:7b:94:
3a:bd:be:dc:6b:9d:ee:ac:c4:b5:2f:da:fc:9e:e3:96:f4:ef:
48:0b:2e:35:89:92:b0:7f:a2:e6:0a:7f:76:98:ba:21:1c:0b:
9b:03:bd:f2:b6:7c:8a:9b:cc:71:12:a3:b7:ad:1a:b5:07:8e:
d9:f4:e5:c2:8c:2e:97:65:a0:a1:fa:c5:a2:31:0c:db:c1:56:
95:6a:fd:57:98:9c:b8:68:8e:0b:71:66:a0:79:68:47:bb:87:
85:00:85:bf:af:32:92:b7:ba:b0:14:09:9e:92:5e:4e:20:4e:
c6:c3:23:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:20 2025 by rpki-client