Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
File: qmdFUZMj2MLZPBsQe_hfYZM8cco.mft (raw, json)
Hash identifier: 7TqeiTr0HytRmG4pPxiKiooDGCg1HL7VpqEYenwLlRw=
Subject key identifier: 30:C4:62:87:DE:54:31:07:87:10:CB:F6:C0:14:9C:86:03:35:05:24
Authority key identifier: AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
Certificate issuer: /CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Certificate serial: 0197B77CB5F70D8BC8C589C006B86CB3030E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
Manifest number: 0527
Signing time: Sat 28 Jun 2025 17:01:32 +0000
Manifest this update: Sat 28 Jun 2025 17:01:32 +0000
Manifest next update: Sun 29 Jun 2025 17:01:32 +0000
Files and hashes: 1: 7ASNkD6Hgbsnqd8_wWp-_aAYGqE.roa (hash: LJjg55n4xVGP9vBgMbP2ScHffsmfqIcNY661vZ01XEY=)
2: qmdFUZMj2MLZPBsQe_hfYZM8cco.crl (hash: cGVFHaQfBIMrknLmJTGxmjs7fD6L8chsEpHxM2UOW8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b5:f7:0d:8b:c8:c5:89:c0:06:b8:6c:b3:03:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6745519323d8c2d93c1b107bf85f61933c71ca
Validity
Not Before: Jun 28 17:01:32 2025 GMT
Not After : Jun 29 17:01:32 2025 GMT
Subject: CN=30c46287de5431078710cbf6c0149c8603350524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:08:72:f1:d5:15:be:d3:4d:b6:48:72:b5:
05:9b:3b:1f:5f:12:71:ec:87:64:77:bd:b7:c4:68:
37:5d:c0:71:0b:02:2b:88:14:fb:14:65:76:af:f7:
62:06:cc:21:91:09:8b:a6:aa:24:0a:bb:68:16:91:
83:a1:9e:1e:66:54:9b:d7:85:c4:eb:be:04:6c:56:
80:a9:b5:6d:e8:fe:36:c8:b0:20:4a:84:58:67:2a:
d4:a5:3b:49:57:5f:a4:5f:b2:6f:3b:c7:03:65:61:
3c:5a:fe:a1:84:f9:0b:5f:92:d9:af:85:18:f0:23:
4c:38:8b:6d:c5:46:dd:40:47:38:8b:8f:f8:25:ad:
01:fb:29:99:84:ea:f4:0d:98:d1:d8:c1:7f:e3:ef:
42:7b:3e:b1:ac:6d:b5:56:69:ba:93:d9:84:93:2e:
dc:1a:e0:e2:38:63:f0:1f:f8:d0:5c:d7:bc:07:cf:
06:fb:09:cd:20:3a:3c:48:43:11:06:50:e2:57:aa:
80:36:44:f8:82:89:f3:83:8c:09:75:0f:8e:7e:06:
e9:17:06:0d:73:a3:e5:0f:b2:5b:9f:ca:f4:7d:ec:
46:3c:9e:d4:69:38:d8:85:f1:d0:bf:a5:ee:67:99:
7f:43:a4:2d:34:cd:5b:b9:13:87:18:62:70:d2:db:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:62:87:DE:54:31:07:87:10:CB:F6:C0:14:9C:86:03:35:05:24
X509v3 Authority Key Identifier:
keyid:AA:67:45:51:93:23:D8:C2:D9:3C:1B:10:7B:F8:5F:61:93:3C:71:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmdFUZMj2MLZPBsQe_hfYZM8cco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/af18c4-c044-4485-8ef0-d7812a338183/1/qmdFUZMj2MLZPBsQe_hfYZM8cco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3d:b7:82:8f:53:d7:dd:76:42:00:67:73:68:77:fa:71:4f:
b8:11:24:c4:36:4d:20:32:36:48:f7:11:73:96:55:c2:8e:5e:
ec:14:1d:b0:45:1c:05:88:7d:a9:27:74:bc:7d:33:f7:8a:9c:
24:8c:dd:5f:89:f6:24:fa:8e:f2:c2:6e:47:70:21:26:a3:4e:
48:14:3f:79:13:07:dc:cb:68:6d:f0:1b:f8:87:6e:7b:d9:5c:
d9:2a:8e:30:d3:e2:2e:40:0a:28:0b:bf:25:37:71:68:04:77:
7a:81:44:9f:43:a4:39:80:83:88:8e:6a:bd:b2:48:f4:26:3d:
2c:da:0e:74:f5:34:53:39:f9:93:e5:b9:74:9d:f4:5f:1d:2d:
d3:bb:5e:30:84:2b:05:60:51:50:b8:7e:93:c0:9e:8b:25:6d:
ae:0d:06:45:8d:b6:41:31:d0:42:b7:63:98:a5:f9:b5:79:67:
eb:09:b8:dd:cd:8b:ef:2b:8d:46:3e:a1:f4:7c:b5:0e:f9:61:
c5:ad:4c:17:29:15:6b:7f:cf:12:98:c4:3c:66:4d:dd:d8:64:
45:9f:b7:9b:ed:e5:0c:6e:2e:6e:97:1c:a8:00:42:dc:14:ad:
47:0f:2f:95:87:86:49:ad:da:2a:e2:80:d9:29:26:74:73:c7:
a6:66:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:10 2025 by rpki-client