Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
File: qag61DyItM5E6CDhFd6cU34qVKY.mft (raw, json)
Hash identifier: wVRpfz8w+oEXmdyUTtVR3SbrhHiVF95bMnfQCuoiCrw=
Subject key identifier: 77:32:E1:84:CB:8C:F4:CB:53:F0:EA:37:F6:E3:F7:E7:16:D4:DF:CE
Authority key identifier: A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
Certificate issuer: /CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Certificate serial: 0197B6A0E935C4E0F349E20FEEFB659DC19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
Manifest number: 0855
Signing time: Sat 28 Jun 2025 13:01:28 +0000
Manifest this update: Sat 28 Jun 2025 13:01:28 +0000
Manifest next update: Sun 29 Jun 2025 13:01:28 +0000
Files and hashes: 1: 3JUWGQsOPBFoC4I-OGs1qaLU-CQ.roa (hash: HAn/ErTzS/Zebt/yY2233fhmAXGMbizcG23F8CM++/Q=)
2: qag61DyItM5E6CDhFd6cU34qVKY.crl (hash: d2lQ8LY1niaDVGKjOUrUt0p0omVZT9Ns1OtXPdcmuYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e9:35:c4:e0:f3:49:e2:0f:ee:fb:65:9d:c1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a83ad43c88b4ce44e820e115de9c537e2a54a6
Validity
Not Before: Jun 28 13:01:28 2025 GMT
Not After : Jun 29 13:01:28 2025 GMT
Subject: CN=7732e184cb8cf4cb53f0ea37f6e3f7e716d4dfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:68:50:7f:5b:ab:2a:c0:8c:13:dc:70:bc:
d3:7e:a9:58:1d:d3:b9:e7:44:1e:24:e3:67:64:3f:
fb:38:a9:68:63:6c:9d:4e:49:7a:3f:1a:be:b6:96:
b0:fb:92:e0:b8:68:a8:2a:16:e2:7a:08:51:d2:39:
46:77:87:7c:21:ee:59:68:a7:69:6a:95:fb:66:f1:
da:0d:f7:cb:59:cc:70:20:0a:63:66:fd:a6:47:ae:
79:f5:5b:d2:0e:dc:50:0b:3b:2b:7b:a9:73:26:be:
7f:bc:d5:de:b2:a8:4a:30:8b:b3:e6:00:a0:74:26:
88:39:d1:10:43:66:8b:27:31:1e:97:42:1b:c9:07:
2c:ff:97:94:5a:65:e1:04:02:8d:8f:79:83:b6:8a:
8c:1e:71:d3:83:f0:ef:aa:8e:7d:7d:28:ad:0f:2c:
39:3e:e6:16:5f:a9:95:8b:35:59:45:e9:c2:a9:29:
d7:3b:c5:53:db:32:53:84:f1:61:b9:8a:2c:8a:c4:
bf:1a:90:cd:f5:db:fb:df:18:c7:85:29:b4:76:54:
46:ba:d1:69:10:b1:8a:17:59:97:11:6c:ce:fc:0b:
46:92:4c:65:e5:20:f5:90:27:24:25:4a:cc:19:b9:
8e:5d:4b:6c:10:4f:80:38:27:f9:04:6e:ff:60:ec:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:32:E1:84:CB:8C:F4:CB:53:F0:EA:37:F6:E3:F7:E7:16:D4:DF:CE
X509v3 Authority Key Identifier:
keyid:A9:A8:3A:D4:3C:88:B4:CE:44:E8:20:E1:15:DE:9C:53:7E:2A:54:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qag61DyItM5E6CDhFd6cU34qVKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/eaf43a-1f11-48c8-9c80-18be5f464ed6/1/qag61DyItM5E6CDhFd6cU34qVKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:97:73:2c:6e:28:14:a9:31:cb:b9:35:61:d3:32:5a:59:8f:
67:bd:0c:e5:80:e6:92:ad:f5:70:a4:93:fc:5d:43:a1:f3:10:
78:70:47:2d:f9:9b:40:2f:29:fe:30:e1:73:00:7a:02:cd:11:
3f:56:66:6d:6e:70:f2:dc:e4:c6:ae:ed:a6:09:27:c1:4f:62:
51:1e:41:9c:c8:07:b7:23:fd:09:9f:63:92:bd:a0:b3:3a:15:
5c:d3:d3:a7:c9:9e:26:10:2d:29:57:08:63:93:b4:13:be:7d:
23:26:fa:de:f1:36:4c:59:98:b3:e8:f1:a8:c3:18:ea:73:34:
37:01:30:a5:e4:7c:ff:cf:1b:3b:89:c9:0f:e1:20:fd:92:07:
8e:c5:67:35:ec:7d:eb:69:09:33:b3:a4:fb:18:7e:99:83:2a:
69:b0:f8:76:c7:01:c2:1b:53:da:b3:3c:2e:52:ba:0e:a6:1f:
b2:13:1a:6d:b6:41:8b:46:03:81:45:98:eb:97:ac:ac:29:e2:
e8:e7:e7:b4:fa:8f:f5:8c:35:33:72:2b:86:b7:4d:7c:94:12:
51:4a:50:6c:d7:48:56:96:97:c7:67:10:6d:9a:ab:ed:9d:bc:
17:6b:f7:d7:11:62:f1:a0:b8:74:96:40:75:85:17:5d:be:fd:
1f:ef:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:57 2025 by rpki-client