Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: yBdZt8ie4hz/QYll2gi/AA0aveYZyFqjsx/3o+m9TJ8=
Subject key identifier: 69:FD:78:D5:5A:E3:19:F0:C7:AF:AD:04:98:4D:A8:40:36:80:E1:6B
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 0197B70EDF16BCDF6791B24C909DC095D57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 0158
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: 0TAMfzKO6y7wTDVfhrp7A0vqejU.roa (hash: 3Yzu9IXvscc/7fQLVXNg8nKXbm7Wf5jZKKVCSByaB5U=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: d6azeM5EAEoM3UAJjHj7I3Pr53s99nz9qPcM8gXXpZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:df:16:bc:df:67:91:b2:4c:90:9d:c0:95:d5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=69fd78d55ae319f0c7afad04984da8403680e16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:e2:61:92:6b:da:84:ac:0f:ee:ea:2e:3b:
2e:2b:29:49:b2:0e:4a:20:db:89:fb:4e:a9:a0:2b:
14:dd:9f:fd:ca:dd:de:73:d2:f8:dc:37:cd:90:54:
15:9b:8a:46:d5:8c:59:ae:0c:e0:5a:c8:1a:cf:9f:
aa:62:9a:c5:19:6d:bb:73:2e:83:76:01:23:fe:4b:
72:d1:89:90:db:c2:fc:3f:06:b7:bf:60:88:63:2d:
b0:29:1e:c9:30:2a:00:08:b6:61:7c:fe:b4:a3:56:
27:65:a0:5f:61:94:ea:5d:53:f5:54:1d:c3:f7:eb:
89:16:88:1f:27:47:26:03:00:5c:e8:82:72:0f:a0:
1c:09:c6:ca:a9:d1:9d:ef:9c:96:09:0d:27:77:39:
fd:18:4c:90:c4:b3:e4:49:4c:5d:40:99:2c:e2:d0:
b8:42:c1:c1:7d:4e:53:d4:e6:7e:9a:e9:82:da:4f:
a9:bd:39:d3:da:8e:46:ae:85:05:4b:b1:1a:cc:83:
60:e8:f9:09:ef:77:36:9b:9e:fe:0f:6d:09:03:fd:
45:16:f4:2a:ed:ca:34:3d:0d:b9:b9:c7:6f:d3:61:
ca:c4:f4:d2:79:42:54:bc:33:80:bd:83:73:cf:e1:
01:fd:a4:a9:ba:b3:c4:ad:04:e4:50:7a:21:af:80:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FD:78:D5:5A:E3:19:F0:C7:AF:AD:04:98:4D:A8:40:36:80:E1:6B
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bd:43:e7:2d:55:d8:8c:34:58:8a:a1:d9:50:19:a4:bd:ba:
58:e1:ec:c5:6c:9e:9b:c5:59:69:0a:e0:f0:ba:c1:79:43:68:
3b:fa:6c:f6:02:6a:2a:ff:24:0d:44:2a:6d:2c:ce:f9:34:87:
d9:f4:b9:8d:a5:05:f1:c9:1d:03:02:b3:09:51:3e:07:04:23:
1a:d2:0f:1a:ea:d0:ec:b5:1e:f2:6b:7b:be:c3:fc:68:dc:ae:
d3:fa:a6:d7:b0:5b:50:ac:ea:97:db:9f:24:92:52:c4:80:1f:
90:66:fe:85:de:00:6f:6c:35:91:06:67:f3:cc:88:de:61:66:
73:43:64:68:8a:54:6a:c9:9a:72:d3:ca:b1:3c:a3:a9:ed:0a:
e0:cc:04:8c:5d:ec:71:c1:34:3c:65:f1:e0:78:b0:ee:e1:d2:
e4:8a:f8:3d:40:c0:b6:e4:14:6d:54:bd:af:dc:8a:e2:c0:76:
24:72:d0:95:b4:20:d3:79:dc:8f:43:87:fa:2e:c7:a8:0a:92:
6c:a3:70:43:d8:d7:d4:a6:4f:cb:69:e7:f5:a0:50:0c:ee:76:
56:2d:d6:0b:8f:19:44:36:1d:2a:6f:e7:80:f1:ca:d8:ef:7b:
b8:b3:7d:10:5d:07:25:71:57:55:88:77:48:06:51:28:33:5f:
02:da:8b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:26 2025 by rpki-client