Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
File: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft (raw, json)
Hash identifier: UvgLtsHI518g7uMWVu7EoGb4KIiWrtli4MY3EIJO7W4=
Subject key identifier: DF:76:AE:31:A1:1A:14:D3:FF:F3:7F:2A:2D:98:2D:D7:28:F4:25:B2
Authority key identifier: A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
Certificate issuer: /CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Certificate serial: 0197B77BFE14D4B9A459D7DD321930C14CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
Manifest number: 0684
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl (hash: xKsdXA7GHjUl2jlc2d6F1iHa40t9ebDS6OQuMHzpe70=)
2: vJJQ7dMyrgz7V87aem8R5eRT1tU.roa (hash: YVuwtpk4uTSArI127axgnPV75XcPEeuaWjYEyG0FBxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fe:14:d4:b9:a4:59:d7:dd:32:19:30:c1:4c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a820f4345c0ee4d9d7fc6d69befbf455bec98742
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=df76ae31a11a14d3fff37f2a2d982dd728f425b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:5d:66:88:20:9b:fa:1b:31:fc:c1:b3:cf:
ee:4e:a7:69:ec:a4:c5:24:33:59:d1:bc:31:e4:f0:
3e:4a:fb:cf:09:94:b9:32:ce:63:60:81:8c:41:13:
42:8c:9f:fc:1f:89:01:ec:3f:c9:b1:31:b3:42:80:
54:d3:f5:58:8a:0a:ab:b9:7c:9f:19:9e:20:85:a9:
ea:ca:b9:cb:d6:97:99:0f:0d:be:2a:98:f0:62:46:
79:75:93:e1:1c:7f:56:7a:a7:14:2f:84:75:03:d0:
0f:81:55:bb:2f:96:6a:ca:1f:f8:22:df:14:3e:1e:
ae:fb:7d:f9:d7:3d:f7:0a:0f:e0:9e:ad:d7:a8:99:
9c:1c:bb:73:13:06:e4:8d:4a:20:92:06:71:1b:67:
df:c1:3c:69:c1:41:6c:04:e9:8c:df:67:86:16:95:
c9:70:7f:fb:9a:6a:52:bc:cb:52:c2:44:5c:78:db:
e7:5f:a7:57:d6:eb:ce:e2:bf:38:5d:18:4d:8c:97:
6a:5e:6b:e3:84:ba:47:3a:d8:b6:f4:ab:e8:fe:89:
00:d5:37:29:21:8c:f8:15:14:52:51:a9:01:92:72:
44:72:7f:12:ca:4a:30:9c:8b:f6:58:14:18:25:9d:
e7:c0:b9:bb:b7:69:45:96:db:8b:18:1d:37:77:f0:
e9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:76:AE:31:A1:1A:14:D3:FF:F3:7F:2A:2D:98:2D:D7:28:F4:25:B2
X509v3 Authority Key Identifier:
keyid:A8:20:F4:34:5C:0E:E4:D9:D7:FC:6D:69:BE:FB:F4:55:BE:C9:87:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/25a179-2158-410a-9aaf-54079e732b0d/1/qCD0NFwO5NnX_G1pvvv0Vb7Jh0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:32:7e:b3:db:0e:77:c3:4d:a3:73:88:c7:29:45:65:9b:56:
6f:61:01:8c:3f:cd:e8:69:6a:5a:92:be:7e:23:b6:12:ae:a3:
ac:dd:47:10:9d:82:a3:29:31:c4:6c:32:27:86:6d:9b:62:29:
3b:cb:79:ea:ed:23:66:3e:1a:76:c3:7a:05:77:50:7c:77:c4:
91:fe:aa:d2:69:75:6a:e2:8f:e4:80:cc:7f:4f:7e:91:23:ea:
97:21:cc:f2:d8:c5:80:09:68:96:11:c5:0e:53:68:24:48:15:
0e:8d:1a:14:dc:cd:b1:d9:cf:64:61:8f:e0:d8:00:77:8c:b5:
bd:11:c1:a3:8e:aa:da:94:d1:c1:e2:c3:50:2d:07:62:87:8b:
c3:a5:02:4a:cf:2f:a0:4e:a8:bf:05:37:e9:b7:33:be:7f:ce:
66:f5:65:8d:4f:42:aa:d4:bf:39:d7:33:fc:2c:90:41:78:c5:
82:5c:45:07:9b:d8:a9:9e:3a:f9:ce:e1:69:af:85:c5:7a:ac:
8b:80:57:77:01:68:4c:66:0e:96:80:bc:47:a1:51:1c:c0:30:
46:6c:19:22:bc:41:d6:6e:5d:12:70:c6:9a:08:5e:ab:56:c6:
2d:68:5f:cb:a9:00:d6:e0:83:37:34:e4:15:81:03:ba:cb:1c:
bf:33:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:26 2025 by rpki-client