
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: cAopqTbFWZOBJ7Agpk41PKEcLC46I8UFhWASNaYeOfo=
Subject key identifier: A9:8E:D9:25:FF:64:80:09:DF:B4:5B:D0:95:D5:77:09:CE:BA:E4:DB
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 0198745086B58EE10F0F20FEDBE17F9EF467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 04E0
Signing time: Mon 04 Aug 2025 09:01:31 +0000
Manifest this update: Mon 04 Aug 2025 09:01:31 +0000
Manifest next update: Tue 05 Aug 2025 09:01:31 +0000
Files and hashes: 1: 49r3EiPqYIwA3FVnQ3pruyaEeaY.roa (hash: S4fah+Hi++9D/Vhg9/JWPzVOXskqt4CfJ/0z6MaI0ok=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: ayqg76fnJfLl257sSdAlkYPHCVTFIYID3THSDBE1rZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:86:b5:8e:e1:0f:0f:20:fe:db:e1:7f:9e:f4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Aug 4 09:01:31 2025 GMT
Not After : Aug 5 09:01:31 2025 GMT
Subject: CN=a98ed925ff648009dfb45bd095d57709cebae4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bc:11:73:53:de:09:fc:3e:da:d4:ab:79:55:
a9:75:0c:fb:74:a2:f1:86:ca:3e:78:f2:a9:e4:a2:
9f:43:69:61:b4:19:a5:d9:55:70:06:25:da:27:c0:
e2:b7:08:3c:96:6f:0f:24:b1:01:f2:bf:76:c5:14:
a2:db:0b:b9:a8:bb:82:a5:0f:bb:cb:d5:1b:1a:82:
ad:3c:02:b3:a6:38:2b:20:b8:41:08:5e:90:55:08:
0e:ef:87:13:3b:e3:52:27:3a:a4:a6:ec:1d:00:f2:
41:5d:10:98:d8:5f:52:16:f4:82:27:ce:5c:9f:d1:
bf:67:ba:a1:d9:0c:87:0e:3b:84:f1:07:84:3e:18:
0b:fb:9f:fe:af:58:d4:86:89:58:7b:30:e6:30:72:
80:9a:04:64:50:e0:f1:28:96:6a:6d:0a:a6:1a:0e:
c9:1c:a6:39:fc:6f:cd:a6:3d:98:26:ec:aa:d8:d8:
3a:ba:73:b9:b1:2f:25:20:ea:cd:48:a6:7f:e0:cf:
51:2b:03:2f:71:61:71:6b:4a:01:d1:51:91:38:5c:
91:11:14:ae:cb:e6:38:27:a7:c9:d7:ca:d8:25:9a:
bf:b9:7a:1b:3e:3a:e8:4a:ab:8f:eb:71:77:dc:35:
89:db:ff:c6:42:61:a0:8c:26:15:bd:6f:04:fc:44:
5f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8E:D9:25:FF:64:80:09:DF:B4:5B:D0:95:D5:77:09:CE:BA:E4:DB
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:68:f2:47:20:cc:82:50:74:0a:d6:13:97:0a:52:b1:2c:a2:
88:2a:a2:44:1e:dd:3d:45:6d:0d:8b:0b:f7:01:26:e3:38:41:
99:7b:5d:99:af:9d:83:5f:b7:98:ba:1a:33:94:b5:06:e6:9a:
f0:24:7c:8c:37:22:76:30:6a:b5:e6:49:50:66:69:66:6f:1a:
f1:ab:57:b3:cb:16:be:d1:2a:5a:14:ee:8b:f1:ce:e9:98:95:
99:48:3a:45:f0:fd:df:ff:27:4f:28:4c:86:93:0d:9c:c5:e3:
2f:99:7d:de:7f:58:ee:82:2a:fa:b3:14:47:75:fc:69:aa:12:
20:20:ef:b6:ae:10:a3:dc:5a:32:8d:98:73:9b:0b:de:88:07:
7c:73:5c:69:8b:0a:c5:a8:dc:9f:57:7b:eb:8f:85:63:2a:bc:
4d:7b:ff:65:99:10:d8:e7:e9:e0:1f:ba:23:df:dd:81:80:92:
3e:49:2f:4c:fe:de:6a:cc:1f:bd:92:b9:21:bb:b0:b4:c5:02:
ca:77:8c:94:e5:28:fe:5a:31:b9:2c:25:e3:58:6a:25:01:ee:
80:ec:99:48:da:39:55:4a:78:7d:be:0d:40:70:97:25:d3:5c:
b2:b9:0b:f0:78:79:f2:3b:70:b8:73:65:73:6c:74:96:c4:26:
da:4a:00:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:16 2025 by rpki-client