Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
File: QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft (raw, json)
Hash identifier: e1LYIsAhhMAYYv9x6Xvw/5JRyLZQjY9AD8jcsuQsysw=
Subject key identifier: F2:B7:74:26:AC:24:42:74:02:42:35:9A:F2:0D:D1:36:19:13:8B:33
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 0197B7450CD7F8978B9C6E3D8A5BEAB3E4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
Manifest number: 0774
Signing time: Sat 28 Jun 2025 16:00:44 +0000
Manifest this update: Sat 28 Jun 2025 16:00:44 +0000
Manifest next update: Sun 29 Jun 2025 16:00:44 +0000
Files and hashes: 1: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (hash: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=)
2: LA-cz5sVCzNk_tA4a42FeutMowQ.roa (hash: uiKIsaEo4/vDsaJKzBGvYmUH1yNN4/rpS3B9ab7S0rw=)
3: QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl (hash: 5Qw86yPkMp59yeWAGLdE+9cOCGe90VKvh5SF+mkoC4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:0c:d7:f8:97:8b:9c:6e:3d:8a:5b:ea:b3:e4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Jun 28 16:00:44 2025 GMT
Not After : Jun 29 16:00:44 2025 GMT
Subject: CN=f2b77426ac2442740242359af20dd13619138b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:96:14:87:73:27:91:91:0c:d3:03:38:89:
21:dc:6b:26:c6:64:28:f5:02:99:31:d6:6f:46:65:
fd:6a:46:e3:d3:2b:7f:10:f1:f3:72:0f:56:58:57:
0c:1d:bd:27:6e:6b:61:12:b0:b3:d5:75:f4:4c:32:
7b:1f:d7:af:44:82:18:94:e0:c6:10:31:32:90:1f:
bc:38:f4:14:4e:4d:d6:99:0a:2e:a1:6c:63:f7:7b:
fa:3e:44:be:b1:fb:2f:35:7e:8c:01:72:0c:86:16:
aa:56:83:54:86:71:0e:b6:bc:d6:aa:24:4d:3c:47:
c5:57:47:99:ec:11:31:37:6e:7a:09:c7:3b:2b:b6:
b9:89:df:68:28:a5:de:10:42:3a:c6:0b:a8:f5:be:
13:59:d5:31:c4:0c:17:39:cc:08:e3:7c:e1:91:3d:
48:5f:e0:ea:c9:a8:b2:d3:d2:e0:b4:58:93:77:cf:
06:e2:0c:19:17:59:a5:80:78:af:00:d0:12:ce:6a:
53:91:76:dc:98:eb:22:2f:04:d0:ed:f4:0d:18:30:
00:5a:ef:9e:7c:f5:a4:b5:6b:b9:6f:30:ca:a9:08:
64:e4:f9:5f:03:88:23:92:67:8f:ca:48:ba:e2:5a:
e8:5d:45:2e:24:42:06:c0:c9:7a:98:d7:0e:a9:d9:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B7:74:26:AC:24:42:74:02:42:35:9A:F2:0D:D1:36:19:13:8B:33
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2e:a6:18:70:c7:68:1b:89:ca:54:95:2c:c1:d4:d5:66:90:
a9:b3:28:fa:c2:51:8a:2f:ae:16:2d:a2:24:04:a6:d0:20:11:
d5:9f:78:3f:6b:e0:51:bb:07:87:2d:d0:ca:f2:e4:f1:3e:a9:
52:a4:e8:b4:bd:75:c4:bb:2a:ef:67:3b:bd:15:c4:f8:f6:ee:
60:79:57:51:7a:4e:00:a0:36:28:21:fc:7f:42:c2:3f:66:a0:
99:8a:e2:e4:20:89:ba:05:b9:5a:d4:c0:b0:7b:64:4a:e7:97:
f3:a6:84:73:a3:2e:88:ef:59:c3:2e:49:16:19:58:41:34:54:
8f:f4:af:7f:7e:6f:88:ce:96:fd:54:6c:31:5f:1a:49:77:58:
cb:c3:ed:9b:97:45:41:96:a9:6e:74:75:cc:d5:25:f8:8d:a2:
26:b5:ce:31:af:55:64:59:c5:5c:a3:1f:15:67:92:5a:c9:e2:
44:07:38:da:7f:74:67:cc:cc:bb:c3:52:08:fb:84:8c:ed:83:
fb:0d:0d:24:5d:c4:bb:aa:31:1f:dd:e7:f4:71:44:91:56:b1:
18:f3:e0:a4:1d:93:19:2a:77:d7:db:9f:73:ec:2e:4f:30:53:
6a:b9:3f:2b:10:59:72:55:7f:7c:00:d4:ff:9c:0a:77:5b:60:
77:8c:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:20:26 2025 by rpki-client