Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
File: qmffuIKufY5V0lhlF0L05s5DcBk.mft (raw, json)
Hash identifier: th/SauwzszI/dMtxYQv7AjbDm/z51DsRVk24O6B3wuA=
Subject key identifier: F1:F7:C1:2E:9E:9B:E3:72:9F:6B:D9:3C:63:5A:84:5E:B1:CB:AA:F5
Authority key identifier: AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
Certificate issuer: /CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Certificate serial: 0197B77C6813237B43C89B3D8ABCDAC2084B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: qmffuIKufY5V0lhlF0L05s5DcBk.crl (hash: WXwZpMH34n+yYBqqaHi1v6kbOKEp0u6gPVFlo8MHS/E=)
2: sEET-ptT1wSBoWPjjCsZ2dSnAsI.roa (hash: f9CQV7WSxI4NmikFhldnkXK2NLP+yhZAq8+zP2dx5cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:68:13:23:7b:43:c8:9b:3d:8a:bc:da:c2:08:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa67dfb882ae7d8e55d258651742f4e6ce437019
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=f1f7c12e9e9be3729f6bd93c635a845eb1cbaaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:89:3b:4c:a6:d0:c8:af:3b:69:4e:c4:1f:ff:
4e:ea:20:3d:aa:0e:77:ac:81:2d:de:97:7c:85:f3:
5d:d6:60:54:75:2c:d3:f2:6b:5a:e9:bd:59:c5:43:
46:0f:a7:5a:e9:9c:b2:f5:c5:c3:45:6f:6f:41:66:
c3:2e:35:42:78:87:87:b6:43:53:ec:06:35:62:a2:
15:6d:11:11:82:6f:4b:8a:02:15:82:9b:80:a3:04:
ac:3a:9f:ba:09:fc:07:ca:34:90:c0:63:c8:71:df:
16:a0:c2:ac:3f:09:e7:80:2a:a3:a1:10:7a:88:fc:
3c:e0:7c:d1:8c:71:39:99:51:58:5c:0e:14:d3:50:
b6:97:63:9e:32:8e:5a:ac:d2:48:76:e0:e5:33:e5:
12:38:2e:04:68:8e:64:05:83:96:22:a9:cf:07:ca:
07:a0:aa:1b:e6:0f:e1:48:9c:0c:1b:a8:ed:f0:e3:
d4:8c:1b:59:29:7e:33:b7:f5:c4:c5:dc:db:47:08:
2f:d3:3c:60:74:86:0e:91:f3:c9:ca:36:47:6d:3c:
24:ba:9c:89:8c:46:30:1d:4e:15:26:70:e5:5e:7f:
e8:40:77:bc:bc:38:8e:12:e1:b0:c3:03:6d:6a:b3:
4b:d7:38:39:d9:c6:99:47:79:35:09:cf:85:89:db:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F7:C1:2E:9E:9B:E3:72:9F:6B:D9:3C:63:5A:84:5E:B1:CB:AA:F5
X509v3 Authority Key Identifier:
keyid:AA:67:DF:B8:82:AE:7D:8E:55:D2:58:65:17:42:F4:E6:CE:43:70:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmffuIKufY5V0lhlF0L05s5DcBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/484d54-f468-479f-9758-e1ff8638634b/1/qmffuIKufY5V0lhlF0L05s5DcBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7d:3c:0c:b1:6e:40:91:6d:d4:52:5e:58:4d:2e:af:b8:3e:
a8:f1:17:49:69:d9:fc:14:3c:e2:fe:c0:dc:f1:39:4b:82:b5:
a8:05:b2:5b:3a:60:4e:4a:3f:69:35:c5:93:20:cf:76:29:a8:
ba:29:06:1a:10:a3:a3:ae:99:97:5f:ed:3b:c0:95:6b:4a:98:
23:2c:01:08:0b:c9:5d:73:50:ec:d5:18:20:a8:92:8b:d1:68:
f2:8c:8d:27:10:87:c7:87:27:88:c2:32:0c:25:69:74:67:5c:
c0:6e:c5:f5:18:cf:68:80:6e:08:cb:99:7f:42:6b:d0:e7:e1:
00:ed:e4:6e:ab:0e:79:aa:cf:d0:1d:d9:f1:05:29:1c:25:fc:
6a:dc:2e:98:56:dc:ff:9e:88:44:e9:4a:87:f2:49:08:34:94:
c5:8b:05:0c:eb:9e:b1:18:09:5d:71:60:ac:10:13:00:92:45:
78:a5:da:98:25:d3:db:43:55:30:c5:08:74:56:99:41:35:d3:
6e:f0:05:f5:22:63:f9:fe:57:36:85:be:eb:a7:5b:a1:11:30:
bd:77:2b:e7:06:1a:91:2e:6e:3e:61:70:e3:f7:cb:b0:32:95:
27:e9:3d:86:3a:38:c5:0b:cd:67:0c:01:cc:85:fe:6b:92:a1:
09:78:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:34 2025 by rpki-client