Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
File: qqxhl3mf1otuW74LV-ZS_YDdNiE.mft (raw, json)
Hash identifier: km5zaUeWFVJoDzedJ0t/9Nh+EUzOKHbHXi2hnfNOw74=
Subject key identifier: FC:98:C3:B2:3C:AD:EB:13:84:E6:59:80:0D:9F:22:26:A9:F7:AE:DB
Authority key identifier: AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
Certificate issuer: /CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Certificate serial: 0197C803693F4098B6AB1D9AAF407AC10250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
Manifest number: 01AB
Signing time: Tue 01 Jul 2025 22:02:36 +0000
Manifest this update: Tue 01 Jul 2025 22:02:36 +0000
Manifest next update: Wed 02 Jul 2025 22:02:36 +0000
Files and hashes: 1: HW--gyFyIjJfbbNnSxJATPWJGEI.roa (hash: shKJNjvcZlh2Drp2JswFM6L89Fwml75F7pDB0H15/3Q=)
2: qqxhl3mf1otuW74LV-ZS_YDdNiE.crl (hash: 1tXHcoXSKqkv8b4+GMytIeOCiYX1i+gh20mCo+366BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:03:69:3f:40:98:b6:ab:1d:9a:af:40:7a:c1:02:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaac6197799fd68b6e5bbe0b57e652fd80dd3621
Validity
Not Before: Jul 1 22:02:36 2025 GMT
Not After : Jul 2 22:02:36 2025 GMT
Subject: CN=fc98c3b23cadeb1384e659800d9f2226a9f7aedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:50:31:14:ab:ec:9a:49:2a:f9:9d:82:6e:2a:
7c:e9:64:a6:a6:42:c4:d7:18:bb:bf:52:f9:56:ae:
5d:60:0b:2f:ce:97:85:4c:3e:e4:ba:49:7a:9a:c6:
f5:6b:d5:08:a1:ce:bf:8c:d7:98:e1:fd:90:0a:43:
5c:7b:b6:4e:fc:14:be:62:14:74:00:c3:be:be:77:
65:ae:fe:1d:5a:ac:da:be:b1:1a:20:89:66:a3:02:
58:9f:f6:4c:63:2b:e8:89:2b:12:49:b3:70:87:ca:
ce:2b:c0:be:6d:ab:08:91:f9:20:9b:66:96:f6:27:
d6:35:83:2f:8d:80:82:89:aa:6c:51:b3:60:48:65:
56:00:f6:ff:b7:0d:97:29:f9:d9:4b:f1:c0:bd:a1:
f1:87:74:38:d5:1c:4a:cd:3a:74:92:70:51:70:ee:
f7:0c:b2:f3:d9:bd:ac:81:bb:bf:c3:96:ae:55:2a:
ae:7d:3f:2c:37:f2:bd:43:d0:3e:9f:b2:be:2e:b7:
83:59:61:26:72:0d:03:6d:ae:3d:cd:ea:9e:f1:be:
3c:54:0b:0b:10:cc:6e:54:9c:cf:58:da:99:a3:ec:
a3:04:df:9f:ac:58:57:dd:0b:e8:1a:a0:05:cd:31:
26:24:7e:ca:ba:9e:af:d3:2f:84:f8:0b:45:8f:87:
65:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:98:C3:B2:3C:AD:EB:13:84:E6:59:80:0D:9F:22:26:A9:F7:AE:DB
X509v3 Authority Key Identifier:
keyid:AA:AC:61:97:79:9F:D6:8B:6E:5B:BE:0B:57:E6:52:FD:80:DD:36:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqxhl3mf1otuW74LV-ZS_YDdNiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/88301c-ac79-4083-928f-5b49db65c545/1/qqxhl3mf1otuW74LV-ZS_YDdNiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b6:ee:f8:4a:a7:8b:16:e5:5b:37:af:40:c4:92:08:b4:6d:
bf:61:c4:b9:61:67:fa:42:5e:c8:d5:ec:41:7b:82:ca:36:e8:
05:28:5e:4a:c8:0f:8e:f6:37:61:ae:a1:10:7a:89:86:5d:74:
96:ba:72:30:9b:00:cd:11:b7:e4:07:41:d8:75:a6:df:e1:5e:
e3:af:0f:c8:2a:30:33:76:da:ca:71:42:f7:64:44:ed:a4:6a:
a7:20:9e:ec:a0:ed:73:68:e1:8f:b4:09:d7:d4:bd:df:90:36:
01:33:7b:fa:19:31:c3:2e:da:a4:32:24:c4:1c:82:72:9a:3f:
29:00:1f:13:af:da:39:2c:d9:3b:e0:67:d7:bc:57:27:70:09:
56:91:15:78:20:80:4e:e8:b0:e3:38:fc:fd:fc:c2:dd:63:5c:
8f:e7:23:95:49:4c:bc:10:1d:ec:42:73:9d:55:c3:b9:7f:71:
1d:8a:8d:47:4f:27:51:e2:9c:87:4f:52:11:64:b2:0e:83:12:
f2:4d:f0:5c:fa:5d:86:5f:5e:d9:b5:30:95:5e:82:4b:e5:23:
95:57:6a:1c:21:d8:28:36:0b:ae:6f:90:43:08:3e:9d:2a:cf:
bf:b0:59:b8:53:ff:b3:2e:4d:c7:7e:1e:23:a1:88:b1:2d:f6:
b3:ea:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:59:26 2025 by rpki-client