Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: OeP259tHlGVyyVFtaobBpFNrS/Qd19jtuY49o5JECTg=
Subject key identifier: 4A:60:D6:C4:51:70:17:95:E7:15:CC:CA:E4:C1:15:F7:E6:A3:09:C3
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 0197CB39D91310A7AA576191002F2C690F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1598
Signing time: Wed 02 Jul 2025 13:00:55 +0000
Manifest this update: Wed 02 Jul 2025 13:00:55 +0000
Manifest next update: Thu 03 Jul 2025 13:00:55 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: YX20luJbaUnP9DfvHc9VCgnDB3iEuh/1DnsSDn4gsr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:39:d9:13:10:a7:aa:57:61:91:00:2f:2c:69:0f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Jul 2 13:00:55 2025 GMT
Not After : Jul 3 13:00:55 2025 GMT
Subject: CN=4a60d6c451701795e715cccae4c115f7e6a309c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:6a:4d:c0:e7:df:f7:85:8a:54:b9:9f:01:
39:15:bc:8a:0a:35:64:b6:df:df:71:34:86:ce:01:
23:f2:83:db:da:61:4f:ae:7d:4a:c5:e4:20:cc:77:
a4:a1:91:e7:cb:71:ef:b5:fd:50:8b:79:8a:6f:93:
14:61:c5:c7:59:6e:c5:5e:cc:a1:27:8f:d3:a9:21:
14:2f:05:ed:8e:cd:69:fe:f2:65:82:95:09:bf:b6:
5f:67:12:72:21:12:f2:08:be:ae:4c:20:65:b0:51:
cc:d2:4e:69:89:3b:69:45:3a:c2:ab:90:71:72:44:
8f:c0:6b:5a:6f:82:d3:13:53:87:f6:6c:63:48:48:
38:8e:ee:10:f2:e1:ea:dc:0b:04:f1:9d:7b:f3:64:
ae:83:44:03:69:26:91:1a:06:74:84:18:0f:ba:c3:
44:1c:34:c2:e4:05:05:19:cd:4d:ea:98:ff:81:d4:
f3:f7:cb:95:e9:9b:de:61:35:8b:13:09:c7:50:2c:
39:bf:e1:b9:b9:b1:cb:3f:69:68:2a:8a:d2:e1:95:
83:a3:93:1a:88:57:ed:c7:d3:13:e2:c9:87:fa:bb:
ee:f0:ca:98:04:98:76:9a:6e:ab:4e:5e:ab:dd:a6:
08:45:bf:99:54:a6:cf:b5:e1:ae:b8:03:95:71:79:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:D6:C4:51:70:17:95:E7:15:CC:CA:E4:C1:15:F7:E6:A3:09:C3
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4c:d9:07:47:ac:53:1a:73:6a:ed:96:4f:b5:6b:ce:ad:83:
87:a3:3d:25:b8:ef:5e:19:a5:cd:92:b7:56:9e:32:84:e8:a1:
9e:7e:bf:65:ae:58:16:cb:a4:f9:82:d5:51:12:ab:5f:bb:5c:
2d:a7:e8:1b:d8:89:40:4b:3d:51:cb:01:1b:bf:50:54:4f:bf:
63:8f:85:6d:6d:50:a8:e2:0a:9c:bf:6f:56:fc:54:1e:d8:9c:
10:cb:69:d1:2a:6f:00:04:69:43:3b:db:02:40:59:c5:20:6e:
59:86:67:80:2d:eb:5b:de:04:f0:6a:63:18:6a:32:b9:7e:7d:
ba:32:ed:e9:e9:fc:91:ae:c1:01:eb:e4:cc:c9:06:e2:bb:c9:
9a:0c:a2:2a:a7:b7:5c:5a:f9:96:f8:1a:86:a9:50:ed:08:22:
9f:0e:dd:c0:37:71:4a:26:07:74:7f:2d:bb:b1:ea:7d:1a:8c:
ee:ea:e8:1c:5f:b5:ab:9a:73:57:df:87:01:45:28:a7:65:7d:
75:bb:66:06:ea:3e:40:e5:c0:e8:8c:b5:7c:4e:6a:29:d5:23:
df:1f:97:4a:a5:69:d9:63:ee:3d:c5:8e:af:7f:a3:72:b8:a4:
69:42:f8:be:28:f3:0f:dd:89:0f:b4:5a:34:af:62:ff:75:c6:
b3:13:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:24:52 2025 by rpki-client