Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
File: mqwNo1EAZoBg0w8XPWEC4YLRueo.mft (raw, json)
Hash identifier: JN4sY0IbplTuPwh+oJTSgvBbLR9a+L4TN+pGtngVJE0=
Subject key identifier: 20:68:99:B8:06:AA:8F:00:35:8B:61:BA:9B:84:E1:9F:67:26:56:93
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 0197B6D78CFB348CA7973ACE946757070303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
Manifest number: 0FAE
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: mqwNo1EAZoBg0w8XPWEC4YLRueo.crl (hash: VwLVMIXfRjUEHSXXGklVAmk9mYJ3OoQzArPKgmeMhog=)
2: x0_V_asfztSp2_6YK6MZt_fACYU.roa (hash: gFs60QtpFwMnh9KBA4cwsowTM45NdniGhBygLWcOD1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8c:fb:34:8c:a7:97:3a:ce:94:67:57:07:03:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=206899b806aa8f00358b61ba9b84e19f67265693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:69:26:a1:ec:17:37:ed:9d:89:75:3a:7a:
e6:dc:80:22:ad:55:a3:af:e3:78:4b:fb:ea:21:e5:
bb:b7:a9:75:fe:57:9d:f6:ff:6c:8c:f6:66:92:89:
74:43:5e:48:c3:ae:e4:ac:bb:bd:88:37:8b:a1:cf:
ee:15:19:f1:23:16:bb:af:9e:16:f3:21:5a:6f:eb:
aa:28:65:8f:5b:cb:d7:bd:2e:aa:72:a0:ce:94:b9:
a7:8f:39:76:c8:ae:80:60:8e:fd:ee:1e:12:36:3f:
52:19:00:f1:6c:89:92:87:5e:34:f2:36:66:80:f6:
c4:28:2f:5b:00:39:81:84:00:7d:71:a5:48:56:f6:
29:b9:5e:48:0c:30:51:74:cf:c2:6d:53:bd:6a:d2:
d6:13:5b:80:53:0a:22:e2:31:67:32:16:f1:79:b9:
5a:e3:ee:d6:77:c6:38:1a:ae:96:2e:cc:80:d0:94:
0e:b9:97:8a:60:cd:1a:de:07:a3:1a:d7:8a:08:39:
ab:89:cc:ff:6b:1a:90:ba:ec:e6:ab:30:0c:db:13:
d1:c3:c7:24:61:c9:ac:7f:0d:7c:e7:d2:b0:0f:f0:
b0:40:dd:89:1a:2a:96:60:2a:a4:ca:c1:c7:28:9f:
b8:da:dd:3b:d0:8c:6f:9c:60:f4:a3:f8:65:f6:3a:
9e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:68:99:B8:06:AA:8F:00:35:8B:61:BA:9B:84:E1:9F:67:26:56:93
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:5d:b9:5a:86:6f:25:a1:6b:1e:7d:fd:16:09:2d:7c:30:
1e:50:b9:ab:4c:b6:31:73:54:4d:0d:fb:01:f1:ec:9b:60:77:
56:a2:06:1b:9f:a5:30:0e:aa:ac:ae:45:f3:f5:d9:aa:23:38:
78:eb:17:52:5e:51:45:8b:53:88:00:f4:54:fb:67:2e:4d:9b:
97:94:51:31:12:4d:19:fa:04:d1:1f:b0:7e:11:b1:3e:e0:2a:
a7:a5:e0:49:36:99:ca:1e:d1:6f:2a:75:90:04:97:f8:38:e7:
27:63:40:39:db:5c:22:f7:26:5d:3a:44:ea:d2:d7:41:c3:ea:
80:a9:e8:bf:61:dd:9a:e7:a4:24:86:90:3b:69:9e:82:e9:e4:
33:59:36:ef:b3:e6:34:e2:49:24:e2:84:a7:85:c0:bf:6c:09:
26:5d:e9:d8:7b:e6:9c:c5:53:e3:da:eb:ed:17:0b:37:77:f4:
fa:d3:80:a6:da:09:17:6f:2a:bb:8f:1d:8a:26:77:f4:36:91:
05:13:18:b9:ab:c1:98:1c:b6:1a:7a:4f:a6:10:75:d3:50:54:
ba:7a:ea:e6:3d:a2:a9:44:d4:d8:d6:3d:76:69:bc:95:1d:49:
a0:32:4c:5c:46:38:69:bb:ff:39:7f:07:73:c8:12:4b:cb:08:
44:2b:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:45 2025 by rpki-client