Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
File: qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft (raw, json)
Hash identifier: +Y9/QpU5i/70NAsKvnOLCONN/Td/e3OlTqO5prkD7mc=
Subject key identifier: CA:12:44:BF:95:EB:1E:DD:77:DA:CD:9E:72:97:FB:5F:60:6F:2B:A1
Authority key identifier: AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
Certificate issuer: /CN=aaca4f4a737ec09f335ac40633133328213efc3d
Certificate serial: 0197C803541FA6049804232E6A5A774470C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
Manifest number: 0CCF
Signing time: Tue 01 Jul 2025 22:02:30 +0000
Manifest this update: Tue 01 Jul 2025 22:02:30 +0000
Manifest next update: Wed 02 Jul 2025 22:02:30 +0000
Files and hashes: 1: 3FxUxvyalEPW74QSSmy9O2QWzSA.roa (hash: K7i9DvkPZQGo1B9Tr53E+YnX3gzSBh7iAMkmSak9hOM=)
2: qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl (hash: k7w3zBesAPiFp7U9wahJI8HKSkptKm5UalDt7DdTyFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:03:54:1f:a6:04:98:04:23:2e:6a:5a:77:44:70:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca4f4a737ec09f335ac40633133328213efc3d
Validity
Not Before: Jul 1 22:02:30 2025 GMT
Not After : Jul 2 22:02:30 2025 GMT
Subject: CN=ca1244bf95eb1edd77dacd9e7297fb5f606f2ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ad:91:f1:34:c4:1a:2e:57:c4:ee:9d:9c:8b:
96:86:c9:90:2d:84:50:30:90:2d:86:95:21:dd:79:
dd:f3:87:a8:a9:76:0c:dc:de:e6:7e:cb:f2:a4:57:
18:70:43:68:27:10:4d:61:c7:1b:ae:0e:2b:c0:f2:
93:68:38:95:aa:26:e0:de:d9:0f:83:78:f3:64:66:
aa:0c:21:99:ee:40:2a:b2:f0:8e:17:d3:07:20:be:
ca:18:ec:11:2a:01:75:43:69:cb:5f:b1:ed:a3:5a:
3e:15:cc:fe:6c:b7:09:68:91:18:3f:a0:e3:55:ff:
74:7f:17:2a:f8:75:bc:3d:f1:08:6b:7d:6b:f3:07:
a1:b7:c6:f1:83:c0:50:44:02:8e:5f:fb:5e:11:ce:
26:6e:43:ca:5f:8c:32:34:a2:e0:3c:d7:1f:d7:a5:
83:82:4e:bf:1f:61:4e:86:c1:04:8b:78:7a:67:bd:
18:3d:0e:64:99:8c:cd:c8:d2:b6:26:05:c8:32:c2:
a3:01:ab:91:de:6f:1f:6a:a7:61:21:c8:0e:a0:9e:
b3:a4:71:a4:6e:92:d4:9b:a8:1c:d3:2a:4f:47:40:
26:0b:8f:e8:01:a3:24:c2:bc:c0:3f:16:c4:a8:7f:
4e:29:fb:43:03:ab:6f:d3:05:0c:f6:84:39:06:16:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:12:44:BF:95:EB:1E:DD:77:DA:CD:9E:72:97:FB:5F:60:6F:2B:A1
X509v3 Authority Key Identifier:
keyid:AA:CA:4F:4A:73:7E:C0:9F:33:5A:C4:06:33:13:33:28:21:3E:FC:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qspPSnN-wJ8zWsQGMxMzKCE-_D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c1876a-fae1-43cc-a2d7-334e6f332180/1/qspPSnN-wJ8zWsQGMxMzKCE-_D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fc:57:dc:c9:38:6b:f3:6b:b9:0c:c0:a6:4e:d7:41:4e:30:
d6:01:b3:b0:8d:c1:da:7b:9c:45:ee:1e:26:9b:2a:19:a3:b8:
2f:a3:0e:de:f4:c5:71:ff:86:59:11:45:17:45:21:29:11:c5:
6a:5a:76:37:45:e2:86:e5:fb:b2:1a:fd:c5:11:96:ad:78:99:
e6:1d:f2:d2:74:c6:ff:39:86:70:b4:2d:99:d0:8d:01:3c:65:
65:e9:fb:9e:2f:09:fc:99:b0:07:7e:ce:ea:4f:77:3d:14:25:
60:39:b0:d2:96:89:a7:23:ba:f8:cf:b5:6c:f1:d7:51:21:14:
70:9c:12:f7:fa:f3:8d:ec:4f:09:57:89:33:3f:2a:ed:c5:07:
f6:74:f3:49:1f:36:21:5b:d2:ab:30:2e:af:db:7c:f7:d2:09:
a0:3f:87:72:fd:70:0a:67:38:03:4b:d3:15:24:d5:0d:d9:b9:
33:8e:78:ed:eb:d0:dd:c2:6d:2a:4a:f7:82:87:ae:7a:d1:95:
8e:8e:08:f0:48:71:5c:8e:96:5a:da:c8:ea:c9:60:4c:15:de:
dd:ea:e5:c8:34:50:56:bd:31:83:cd:79:01:07:12:0f:da:9d:
f4:7d:e1:7b:ed:24:86:da:6d:66:9d:7d:d3:a7:d4:98:98:8c:
84:1d:10:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:37:04 2025 by rpki-client