Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: yrDGGrGQny6Fud2vlKyOVFlmQ25a48QGEr6gd311E/o=
Subject key identifier: 67:6A:2C:33:7A:FD:BC:D8:3E:1B:0F:6C:89:EF:D3:3F:E9:4A:35:6F
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 01987D8A284B7C5136D2F7745A7F3F0EA0E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 04:01:02 +0000
Manifest this update: Wed 06 Aug 2025 04:01:02 +0000
Manifest next update: Thu 07 Aug 2025 04:01:02 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: W/00QDZTSSCF2qDjn0VIZB96sEE3OSG5EJbwYXWyOLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:28:4b:7c:51:36:d2:f7:74:5a:7f:3f:0e:a0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Aug 6 04:01:02 2025 GMT
Not After : Aug 7 04:01:02 2025 GMT
Subject: CN=676a2c337afdbcd83e1b0f6c89efd33fe94a356f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fa:e1:85:9d:38:e8:43:7c:b8:e2:76:c5:61:
62:73:60:cc:3c:c0:f5:30:2c:83:01:53:64:28:b5:
e0:6a:2c:bd:4e:3c:28:12:c7:dc:39:08:29:5f:16:
06:f4:91:1b:56:f9:ad:a1:dd:12:ee:ee:d9:38:11:
db:a6:c6:51:0a:5b:bc:a2:d5:46:05:14:c9:96:cf:
ed:df:ab:3e:a5:7b:52:86:e6:51:d5:8a:e5:54:a4:
05:79:6f:9d:f2:30:c9:51:73:93:a1:1e:9b:79:dd:
4f:5e:5b:9c:71:6f:3b:c4:cb:1d:7b:9a:ee:b7:85:
9a:23:d8:24:ba:d5:b2:ab:f9:44:8f:39:ab:49:19:
fb:2c:89:a8:06:38:b2:35:4b:93:8c:19:0d:05:33:
18:83:13:1d:0e:f9:c4:6d:79:0a:71:7e:09:e9:42:
9e:4b:53:02:57:af:18:f3:b2:c1:da:02:67:97:11:
a8:e2:cc:a2:73:7e:83:a7:e7:25:20:6a:3c:e9:f2:
0f:8e:17:0f:b1:a4:25:eb:1d:55:cb:f3:3f:20:62:
91:8d:5d:33:d7:c4:98:42:b8:3a:64:a8:fd:da:ba:
86:d5:ea:37:de:48:0b:7f:3c:07:aa:ed:a1:24:a9:
e1:c3:a2:0e:b9:56:06:f3:59:f4:a1:68:2f:3d:f6:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6A:2C:33:7A:FD:BC:D8:3E:1B:0F:6C:89:EF:D3:3F:E9:4A:35:6F
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bc:ae:95:d5:af:fa:3e:43:63:cd:11:98:3f:83:7f:a9:12:
28:0e:e3:bc:c7:31:64:61:a5:b7:69:60:13:8a:44:4a:52:62:
62:02:55:aa:84:78:9f:c2:ef:f6:f4:11:4a:5f:84:c9:8a:8a:
28:1d:8c:0d:75:83:ce:d5:f0:32:5b:ad:cf:3e:44:03:07:3a:
f4:f8:2e:b4:63:c9:f2:86:9a:aa:61:89:b7:da:6d:fd:79:6c:
5c:13:c6:23:13:83:f6:3c:24:e3:18:eb:59:a1:ab:11:83:2a:
9d:a5:2b:04:fd:01:46:58:1e:33:99:81:fb:8e:f5:91:0c:21:
cd:17:c7:cd:f4:92:ec:0e:55:89:75:a8:79:c3:f8:b4:39:77:
01:c0:9f:bf:ef:80:45:e3:ae:2a:7c:a2:b1:24:cb:57:9a:72:
d2:18:11:b5:3c:43:da:cf:9f:4d:0f:95:5e:ec:e7:ca:1a:3d:
ed:26:ea:af:e5:94:b7:6b:9b:10:0b:bc:77:f3:a7:d8:6b:83:
95:36:a3:78:4a:57:6d:e6:30:38:23:13:04:02:bf:7c:9b:28:
40:16:0b:6d:e3:c6:02:a7:e9:6b:69:84:85:56:dc:3e:41:55:
1e:27:21:f1:5b:d2:91:ff:78:8f:16:58:f9:8a:32:df:83:0b:
aa:1c:2b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:23:38 2025 by rpki-client