Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: ZMQk5d+RVSWeYJfPh7Dcb/wQbAmGZd5sQme1grIuPro=
Subject key identifier: B8:E7:90:56:F7:93:0B:3A:5B:1D:73:72:A4:2C:FF:F0:CC:D6:4C:79
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 0197C2A4ACE8EC18F1389963BC866B32A436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 15B6
Signing time: Mon 30 Jun 2025 21:01:01 +0000
Manifest this update: Mon 30 Jun 2025 21:01:01 +0000
Manifest next update: Tue 01 Jul 2025 21:01:01 +0000
Files and hashes: 1: BW_w5tNvIWO1-tVFP8df1MdaWTA.roa (hash: rExjPSaaFahRIKD/ZiQ7dk1JIKInqDzh+Jo+aqkHWCA=)
2: SHt83tHCOqEqNWz8C0rDKgPLSVk.roa (hash: 5uUYud3teEzP7h4GRY2ZjMn6NzU1+BqyXIl56/9+cO0=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: L+CTygD3a1/jlwq05nWy9cA1iCYvpUNEqZmI4HzvPKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:a4:ac:e8:ec:18:f1:38:99:63:bc:86:6b:32:a4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Jun 30 21:01:01 2025 GMT
Not After : Jul 1 21:01:01 2025 GMT
Subject: CN=b8e79056f7930b3a5b1d7372a42cfff0ccd64c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:af:47:a7:ad:56:ce:65:f7:b6:cb:45:c4:
b3:55:9b:8b:45:de:4f:3d:8d:33:3a:ec:4e:61:e4:
83:e0:e9:fa:4d:10:0e:0a:cb:74:6e:3f:71:43:0a:
50:b6:81:17:20:31:ee:73:e0:93:ec:ab:93:25:b1:
fd:f4:bb:af:e7:2a:45:31:a4:bc:8a:c5:70:ba:47:
cd:9a:f2:d4:59:6d:73:13:c1:30:c0:16:9b:78:01:
60:50:a4:ba:34:33:50:e2:e6:43:39:78:dc:78:1e:
4b:04:09:b9:1b:76:3a:9b:6a:a3:39:99:ed:24:ba:
19:01:13:8a:fe:82:2d:30:ec:2b:48:e2:e6:45:10:
a8:e9:3b:d8:02:57:65:73:87:69:dd:66:b3:01:b6:
b2:1e:cb:c8:93:20:0e:80:56:c0:31:a4:ab:30:9b:
74:d8:83:3c:ff:f1:ba:ad:4f:c8:8a:89:42:58:f5:
14:e8:86:8e:82:ec:a4:2c:6f:c7:d9:fb:bd:d2:ef:
63:95:b2:15:35:0e:80:b1:ea:81:aa:1f:84:88:86:
51:88:d2:1b:2e:6f:8e:18:93:b1:d7:f6:f1:fb:94:
ff:fb:b7:34:20:6e:8a:3b:36:b4:7a:7e:1f:9d:17:
e8:0f:13:da:0d:e9:ac:5c:0a:4b:05:a5:9d:6a:80:
8a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E7:90:56:F7:93:0B:3A:5B:1D:73:72:A4:2C:FF:F0:CC:D6:4C:79
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e8:5d:69:ee:9a:c9:24:55:37:a0:d1:ee:aa:c1:27:78:45:
7e:c6:f9:e3:4b:fa:a5:fb:d9:b3:b2:b5:a8:5d:01:db:49:18:
74:38:c4:d7:37:a8:d9:a5:98:da:82:25:c2:1f:63:00:0e:f5:
a0:d0:4b:8a:22:14:55:78:5f:06:96:13:ad:07:64:b1:9a:40:
84:d7:fa:25:61:a5:c3:dc:a6:b5:0a:93:8b:66:42:4d:1f:09:
a7:c5:79:6c:21:22:78:a9:a8:73:bd:6e:5a:7f:82:ca:82:ea:
db:20:6c:91:5e:7a:2e:57:97:f2:c2:5f:0a:9f:90:a5:2b:08:
f0:c4:b2:87:8d:04:02:6f:a1:b6:ab:18:e3:6a:34:2b:ff:96:
65:80:37:b0:d5:5f:9d:ac:93:fc:8f:b9:0e:d5:bc:01:7d:4a:
1f:c3:b7:7c:6e:23:20:14:d3:0e:a2:67:85:39:95:6b:95:8c:
79:48:ce:d5:fd:ec:f5:76:42:54:39:aa:74:72:b4:f2:1e:12:
26:7d:02:d3:31:17:c7:c2:e5:85:a1:e6:73:6c:4f:bf:3d:36:
86:17:de:e3:be:5d:90:f8:07:95:ce:bc:50:0a:11:95:cc:9a:
56:fc:42:81:02:0a:01:07:2d:4e:19:a2:24:7a:85:ef:68:d1:
2c:fb:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:06:14 2025 by rpki-client