Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: Q/quU3w0RjKNFyFYzVjTR9xf/t8WNqCnKN0sXL++/Os=
Subject key identifier: F7:7A:D5:58:F2:A8:FE:8E:9E:E1:7F:3B:A6:A2:7B:5E:51:EE:B5:E4
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 0197B6D7579DBBF8C2861D691EF5CB445989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 0830
Signing time: Sat 28 Jun 2025 14:00:55 +0000
Manifest this update: Sat 28 Jun 2025 14:00:55 +0000
Manifest next update: Sun 29 Jun 2025 14:00:55 +0000
Files and hashes: 1: Eax-YG047Te5n0m45RUjhbrR1oI.roa (hash: iDlk1T+vVuMTMOmIBdx2Kl0rk1EldiQCxibfcQYd5i0=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: jLLwp0JCOiIQy/K9QYlFSDPleI7TyfFKeBckSIhD6dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:57:9d:bb:f8:c2:86:1d:69:1e:f5:cb:44:59:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Jun 28 14:00:55 2025 GMT
Not After : Jun 29 14:00:55 2025 GMT
Subject: CN=f77ad558f2a8fe8e9ee17f3ba6a27b5e51eeb5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:60:9c:44:24:24:3b:24:07:eb:14:0a:41:
07:4a:81:6f:ad:41:3e:15:b5:86:4d:6f:78:e9:df:
3a:45:79:c3:a0:6a:89:0c:4d:88:cb:41:35:a9:86:
2d:3b:ac:0e:7a:c3:4f:cd:6d:f4:75:56:e3:2d:57:
ec:1f:b1:1d:9b:7f:f2:91:83:e5:b9:e4:29:2f:77:
4e:81:85:5d:1e:b6:39:2a:98:39:aa:49:62:cd:b8:
a6:21:79:96:fc:50:7f:de:13:e2:35:f8:dd:7b:c5:
54:05:47:20:eb:f4:69:cd:df:d3:76:02:80:8d:a0:
80:cd:78:b7:06:0d:fc:9f:be:09:6f:67:07:54:70:
9f:66:4f:68:2a:b0:c8:80:d7:cc:6b:80:3e:c8:4a:
19:cd:fa:f1:d5:15:65:2d:41:91:e9:fb:82:eb:67:
16:cb:72:93:f9:ee:58:c4:02:d1:14:c1:79:51:61:
7b:fe:e6:38:4e:2d:77:92:15:68:1b:0e:c3:3c:bc:
9a:b8:80:9e:6c:2e:76:3b:57:fb:84:c3:9f:dc:16:
bd:f0:64:33:52:68:33:13:e1:68:03:f9:ce:a2:fe:
bf:c8:b7:69:7c:e5:66:c6:ec:77:69:7d:04:5a:57:
e9:07:fb:d3:a3:b4:07:b5:47:4b:78:18:8b:d5:2a:
41:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:D5:58:F2:A8:FE:8E:9E:E1:7F:3B:A6:A2:7B:5E:51:EE:B5:E4
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:00:26:d0:54:11:1b:59:60:d3:fe:7c:63:5c:9a:30:32:d1:
2a:96:48:44:19:5d:91:ed:b1:ac:cb:25:f8:60:d0:6b:21:63:
81:fc:a5:05:f0:c1:e4:d2:a5:fe:2f:79:19:3e:2b:a2:e2:7e:
f0:32:d3:dd:a7:5f:4c:b7:a2:b9:08:23:44:06:94:6b:e5:c5:
34:91:a6:a8:d4:d8:77:c8:96:89:53:c4:03:25:ba:2c:4b:67:
3b:83:82:65:ea:2a:7b:30:05:63:1e:e0:40:6a:f3:83:4f:74:
c7:af:56:1c:04:c7:1e:8b:7e:28:19:7f:a0:99:a8:cf:d6:2a:
f0:d6:a6:f5:46:12:e3:4a:f1:96:52:26:83:9c:9f:d0:1d:f3:
5e:27:fa:54:57:29:46:9b:77:e0:f9:08:c8:b0:04:1a:8f:45:
45:1e:8f:69:6d:a5:2f:33:80:d1:27:17:96:72:c2:e2:ec:f4:
28:7e:31:9f:ec:32:32:18:78:48:84:21:c9:32:25:09:d4:ff:
9e:4e:d0:0e:1a:a0:5e:2f:d9:c5:e0:55:16:1f:21:c3:da:ff:
78:b9:b0:40:dd:86:8f:9b:1a:cd:99:1d:ce:77:a9:0b:b8:aa:
eb:58:18:61:6f:5e:c1:fc:61:13:bf:5c:61:5b:19:54:19:fd:
a1:dc:e6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:38 2025 by rpki-client