Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: NRqjt9cNeU+QHqZQ3NJsNKQUPfjfwEFFclyEFdQxKTM=
Subject key identifier: 7D:E7:92:4A:E6:DB:67:7D:23:BC:70:DB:A5:17:59:57:D2:73:7D:5D
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 0197B7EA231431F3717D9A15B618C13A5A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 0EB9
Signing time: Sat 28 Jun 2025 19:01:04 +0000
Manifest this update: Sat 28 Jun 2025 19:01:04 +0000
Manifest next update: Sun 29 Jun 2025 19:01:04 +0000
Files and hashes: 1: XVxrMXrjLDQVv9bac22qQ0QMNvQ.roa (hash: Yc8aZeN9qk7mkDqbHTwdGKZnQ52FHThS1w10bQxAp2w=)
2: i3VEozY7zHl6WOCVl59PVxz43a8.roa (hash: jzz5iRsaOnS+mlLDbSWuuSqGL3bfQAaKxsPDmiylUHA=)
3: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: Yg3+FnYt3LdROYyJCETnTZ+vlC0gKthN1D8vBfRY9XU=)
4: uC9PLmr5O8CehNSZEFEDNzHH7Us.roa (hash: rxEdnwW/DBAsm5BXVYbjYVnepXH4Kn8/IHHbh9uyU6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:23:14:31:f3:71:7d:9a:15:b6:18:c1:3a:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Jun 28 19:01:04 2025 GMT
Not After : Jun 29 19:01:04 2025 GMT
Subject: CN=7de7924ae6db677d23bc70dba5175957d2737d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:f7:90:ee:72:20:ab:6f:7a:96:e8:7e:83:
e2:9c:4a:c9:de:89:ca:75:76:eb:b9:f7:1f:42:f0:
cf:52:1d:a0:88:98:23:d4:1b:ac:51:39:1e:80:98:
e7:b7:49:9c:dc:be:dc:d3:f4:1e:f6:98:5b:0b:bd:
fc:7c:ec:3b:89:2e:a1:96:5f:3a:5e:78:e8:a3:58:
f1:db:0f:75:4c:3a:c9:d1:c1:01:25:8c:e9:46:18:
41:84:2f:47:17:cf:7d:3a:97:39:d4:9d:13:59:8c:
49:31:fb:52:54:43:73:fc:fd:bf:d4:12:28:e4:85:
4d:d2:b0:b3:e7:b1:4f:e8:02:0f:31:2f:82:46:cc:
da:c9:8d:9e:b4:1a:69:fc:df:20:7f:f3:a4:f8:91:
9e:b4:d3:29:63:22:d5:a6:8a:12:5d:3b:dc:d5:28:
2e:ce:bd:8d:19:88:d2:59:1f:ad:87:14:44:c2:58:
35:50:13:33:6b:5c:c5:3a:3f:b9:52:65:1e:e2:b3:
23:27:10:1e:1e:74:c6:d9:0a:6c:95:a9:ec:4a:7f:
b9:5f:76:a7:3a:53:8c:b4:4e:f6:d2:85:81:88:ed:
a8:86:8a:01:05:f1:26:1e:19:1f:44:3f:34:67:22:
01:5e:0c:43:b6:05:d7:f0:b6:4f:63:04:65:d8:f4:
f0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:92:4A:E6:DB:67:7D:23:BC:70:DB:A5:17:59:57:D2:73:7D:5D
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:13:f2:f2:22:91:08:79:47:94:e6:22:bd:b2:41:c6:bf:34:
b1:49:41:03:41:3a:40:8f:b6:c1:a2:0f:d2:d3:18:10:bf:33:
62:43:02:79:6a:15:91:01:9b:17:92:79:72:a8:5e:a8:a9:2b:
9f:8e:03:cf:f3:24:b2:e2:27:f6:cf:78:11:54:cd:f9:01:c3:
e1:0c:3a:1f:c1:88:fd:2a:98:40:59:78:5e:31:73:20:e7:6f:
bc:af:88:36:14:24:04:75:dd:1d:5b:a0:36:46:76:8a:5b:1d:
02:43:b0:7e:77:4b:47:17:66:2f:92:c6:1c:7e:40:09:bb:82:
26:52:71:59:1b:bd:98:a5:c4:e3:26:fa:07:36:0a:4c:47:8a:
65:a3:97:8b:ad:13:18:10:48:43:16:ec:7b:9d:26:f5:da:c3:
93:7f:83:b0:a4:28:e0:9a:3f:e7:4b:4a:f9:bc:55:ec:53:0b:
cb:be:a9:53:2f:b1:ef:fa:83:2c:de:04:16:5a:c6:c4:1c:bc:
8a:1f:69:7f:a8:44:ba:60:28:53:fa:17:dd:8a:a9:df:a0:c1:
9c:a4:6e:db:40:c8:f8:28:ea:c4:da:e3:41:da:b4:76:41:a1:
9a:ef:7b:cc:24:42:4a:7f:19:9f:34:22:53:57:97:51:67:e7:
af:ad:5b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:27 2025 by rpki-client