Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: 8fZXrngam0QtJIqK5IzzVPVvowowxRaZSffL079ypHA=
Subject key identifier: 69:F3:22:2D:16:E0:C9:03:13:F0:4D:0C:06:7F:B8:E0:87:8E:2D:69
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 0197B6D740ED3E3D8570C74505D386ACF9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 14:00:49 +0000
Manifest this update: Sat 28 Jun 2025 14:00:49 +0000
Manifest next update: Sun 29 Jun 2025 14:00:49 +0000
Files and hashes: 1: _O5lI_NrxjYhfLVpiDzpC5pBpNo.roa (hash: kRyUBDk7DeOK1Op874QsCkY85Pkvq4XHwWApA0Uvb60=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: ZGm/FreMvWguJSINBbOQzJLI8mvxPSmEQb+qDyHBiGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:40:ed:3e:3d:85:70:c7:45:05:d3:86:ac:f9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Jun 28 14:00:49 2025 GMT
Not After : Jun 29 14:00:49 2025 GMT
Subject: CN=69f3222d16e0c90313f04d0c067fb8e0878e2d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:e7:54:63:3d:18:2e:69:98:7c:45:e2:4b:
39:56:c4:bd:8f:ef:12:4f:b8:49:a1:5c:0b:e9:08:
cd:e8:88:a4:ba:74:04:4d:99:97:f5:d1:27:aa:f7:
39:16:63:a6:53:62:e0:8f:79:20:83:9f:bf:64:ab:
68:be:33:1a:94:c7:50:08:c0:fc:ba:ae:a8:99:bc:
57:50:14:4e:d8:69:9f:53:08:d7:37:3e:6c:78:f1:
26:10:3a:18:86:23:63:c4:63:ce:65:72:8e:b4:cc:
41:75:a4:6e:39:98:7c:f0:cd:cf:9f:66:a5:af:ee:
b1:90:07:91:b7:72:02:80:9c:6f:27:ee:fd:de:20:
25:b0:49:e1:31:39:32:d8:9c:9a:93:54:58:42:04:
6f:f3:e0:10:a2:81:07:bc:86:23:45:00:bc:21:8a:
0f:c4:e7:92:19:fc:ef:91:73:32:87:cb:38:2d:a8:
7f:d7:e8:86:af:09:28:fd:52:1e:fe:d6:63:ff:77:
d6:a9:a8:f4:2f:4d:19:90:c4:cb:bf:d8:89:e3:15:
4e:7d:a2:cb:2b:47:56:53:d4:db:31:e0:ed:e7:78:
2b:93:52:c3:b4:67:d5:86:c0:4c:b3:d1:ce:76:16:
29:b8:f5:9e:f8:df:32:6e:77:65:0e:b2:be:75:13:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F3:22:2D:16:E0:C9:03:13:F0:4D:0C:06:7F:B8:E0:87:8E:2D:69
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:87:71:a7:a1:1c:9f:a4:40:d9:64:e1:4e:77:d5:ef:eb:e8:
14:43:28:d8:05:86:64:5c:f5:e8:ba:3e:11:be:da:bb:d4:30:
a8:75:2a:1a:8b:1a:df:11:cf:86:38:a5:12:a2:ed:27:ae:1f:
75:72:13:89:67:f0:57:34:96:62:a1:68:77:c5:9d:64:96:1e:
e1:30:f0:3a:b1:75:d0:ba:58:29:99:7f:37:99:88:e4:b8:91:
a6:fe:16:cb:a6:1f:b1:dd:50:b2:1b:cc:68:33:a4:e6:cd:2b:
71:75:00:56:c0:95:2c:41:1a:75:7d:f7:8f:8c:0f:b9:ee:e0:
57:6c:e7:03:83:dd:a1:0f:ff:5f:49:a3:8c:ca:f9:68:32:60:
53:a5:b6:d5:0f:4e:0c:60:e0:dd:7b:15:3e:e1:0c:87:ea:55:
2e:53:75:fa:83:2e:8e:8c:08:01:fe:f0:39:9d:c6:fd:02:c0:
68:55:57:92:a1:d4:99:9e:cb:b6:61:5f:86:70:9c:fe:18:ea:
1b:6c:b2:86:36:76:a2:61:eb:8a:49:c7:8f:05:21:b0:79:15:
25:22:1d:41:fd:75:48:33:7b:a3:6b:8e:19:2e:01:07:b2:0a:
6d:77:c0:3b:11:24:ae:02:fa:41:a5:b2:1c:01:e4:22:f7:5c:
98:e5:c8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:23 2025 by rpki-client