Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: A0hilkxDeBPaL4tgFLpC2M5b7ZB00vTLoQmninac+Tw=
Subject key identifier: 35:95:4D:73:E2:92:B8:92:B5:82:FC:05:06:47:BC:0B:7D:7A:66:E7
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 0197B6A0E36185188CD3D61444030D23D37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 1226
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=)
2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: T+x2BQDZFGpG8BCMHrMysEQKINMoY3tkrs40tSRTSzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e3:61:85:18:8c:d3:d6:14:44:03:0d:23:d3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=35954d73e292b892b582fc050647bc0b7d7a66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:85:3d:ac:4e:ea:3f:50:e7:70:51:87:8d:
94:7f:64:9d:82:60:56:64:cf:60:8f:eb:2f:2a:43:
34:f0:b4:0e:ce:d9:03:c1:2c:3f:ac:48:e1:2a:7a:
e9:2b:23:91:ba:76:4f:68:8d:d4:a7:d4:b4:7b:9e:
95:e9:c9:a7:76:51:9d:84:69:4d:cb:a4:de:52:c2:
9f:34:6f:bf:3e:82:ab:0c:d4:a1:aa:b0:54:26:70:
d2:15:78:da:d7:62:1f:a1:ea:2b:4e:84:3d:1a:87:
b3:95:5e:38:96:76:c3:43:f3:75:07:e4:6f:b8:36:
e8:1c:7a:a2:2b:45:c4:0a:d4:91:ab:f3:78:ed:b6:
99:5b:62:7b:d0:2d:7e:c0:f6:12:37:2c:d4:d5:70:
b3:ea:2b:b1:43:54:ff:06:ad:cf:9b:55:f4:0e:85:
b1:24:96:18:f2:77:9b:2a:b7:43:10:c1:6c:5c:0d:
47:ec:45:69:ce:ed:db:f6:f8:7e:84:4a:c7:73:1e:
6f:51:27:0a:18:07:88:cb:79:d8:88:1d:5f:cf:a7:
0a:d2:52:ec:bf:ad:35:9e:26:f9:e6:ef:51:bb:85:
c2:ae:47:36:b1:10:ce:8d:b2:49:05:04:b0:51:39:
e0:bc:c5:0f:62:4d:07:34:d4:ff:80:2e:f4:e7:6c:
0d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:95:4D:73:E2:92:B8:92:B5:82:FC:05:06:47:BC:0B:7D:7A:66:E7
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:15:dd:22:2b:9d:db:a4:12:60:e4:31:6d:48:d1:11:f3:52:
42:d6:94:df:40:9a:0d:f4:1c:ca:35:26:14:fe:29:0c:9b:76:
8e:39:f9:ad:e3:72:75:35:af:ec:ad:96:95:2c:31:29:3b:83:
f7:f3:44:f1:9a:01:46:90:dc:fd:df:11:72:73:ab:60:8a:83:
d0:20:9f:41:61:42:6c:7f:f4:71:13:f1:95:29:e8:bb:e8:2b:
73:1a:ce:8f:da:df:b3:94:57:df:66:69:62:c7:18:09:c5:90:
3f:a8:7c:06:f1:59:86:9d:2b:d8:84:a3:9f:0c:b9:98:e5:2d:
1e:ed:17:d4:9b:88:0a:3e:d0:ff:84:b3:7a:09:8e:47:a3:98:
a0:91:1f:7c:33:96:83:e8:64:23:9f:2a:d0:7a:8a:ec:4c:3f:
54:c7:5e:ce:db:bd:1a:2d:d1:c1:8b:c9:1c:52:f1:bb:c1:a2:
38:77:01:e2:54:5d:7b:b2:31:17:17:f6:ad:dd:3d:46:73:a4:
37:9c:ce:ac:35:77:8a:78:16:a8:0d:6c:7c:90:5e:57:c2:fa:
77:c9:d5:f4:a9:8d:ce:fa:0e:d1:41:e0:00:77:8c:2d:ca:7d:
45:ef:82:14:2a:fa:f8:a2:68:78:a0:51:b1:03:6d:19:4b:a3:
de:d8:27:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:22 2025 by rpki-client