Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
File: qV9jiGJSm22v1EDhcqIvASCwmuo.mft (raw, json)
Hash identifier: nBGOa0yIneQh1WwmHbwfoHmCl1AuSQIJXzZnMmF94f4=
Subject key identifier: FC:FF:54:AA:44:DC:75:83:A3:0B:4D:35:28:C3:0B:E6:7B:A7:71:35
Authority key identifier: A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
Certificate issuer: /CN=a95f638862529b6dafd440e172a22f0120b09aea
Certificate serial: 0197D887A6D511ADC6DEE42644BD039C2EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
Manifest number: 15C7
Signing time: Sat 05 Jul 2025 03:00:58 +0000
Manifest this update: Sat 05 Jul 2025 03:00:58 +0000
Manifest next update: Sun 06 Jul 2025 03:00:58 +0000
Files and hashes: 1: 5LFA7pu9BAuW9Zs8wziojRaCNSk.roa (hash: UzC92ONklOjy0NiAl9iqdlk8UfZjfzE3sfwqDQwnG80=)
2: qV9jiGJSm22v1EDhcqIvASCwmuo.crl (hash: 3bxPeV9t7PqEH10/2YCGV9DCNqHcexNVu9TekTjDkSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d8:87:a6:d5:11:ad:c6:de:e4:26:44:bd:03:9c:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a95f638862529b6dafd440e172a22f0120b09aea
Validity
Not Before: Jul 5 03:00:58 2025 GMT
Not After : Jul 6 03:00:58 2025 GMT
Subject: CN=fcff54aa44dc7583a30b4d3528c30be67ba77135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:57:96:5a:c1:e8:86:2a:9d:02:6e:e1:3b:
86:ef:74:e6:de:8c:76:39:73:e2:87:52:4e:46:cc:
9a:26:76:6f:b2:c2:68:db:7b:a4:e3:4a:d6:23:65:
ee:68:38:62:a9:4c:dc:19:0a:b7:4f:ac:18:58:fc:
37:84:ae:7d:0b:f6:67:40:fb:1e:19:d2:48:d0:17:
cf:72:b1:16:07:b5:82:15:9d:d4:34:92:ed:25:a4:
3f:99:b6:1e:78:8d:87:7c:18:65:71:fb:20:7b:b4:
29:5a:ed:37:f7:f2:47:83:59:f0:f5:b2:a4:af:a4:
6e:df:12:4d:c7:03:40:37:a2:d5:4b:ea:ab:99:cd:
4e:35:d6:7c:7c:4d:6c:b5:a0:dd:75:c5:af:d2:1f:
d4:f9:68:00:a7:7e:5c:57:cb:c2:7a:0c:1f:f5:41:
85:4b:bc:79:09:65:76:f5:67:f5:c8:69:6c:5d:2c:
80:cf:7d:b4:b4:c5:a8:9a:78:fc:10:9c:e7:4d:d3:
f6:38:f1:08:05:08:f0:13:79:01:59:1b:c3:d0:0e:
6e:e4:b5:76:f2:70:48:71:08:97:ba:10:7a:90:97:
84:90:76:47:7b:54:72:d1:02:21:09:71:48:9b:a0:
ac:58:db:4f:26:24:ce:15:ea:7d:46:e0:d4:05:df:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FF:54:AA:44:DC:75:83:A3:0B:4D:35:28:C3:0B:E6:7B:A7:71:35
X509v3 Authority Key Identifier:
keyid:A9:5F:63:88:62:52:9B:6D:AF:D4:40:E1:72:A2:2F:01:20:B0:9A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qV9jiGJSm22v1EDhcqIvASCwmuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/af493f-41fe-406d-b3ff-ebb53c25307b/1/qV9jiGJSm22v1EDhcqIvASCwmuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:86:60:2e:d2:11:b1:c3:4b:43:6c:7a:92:30:0a:b5:a1:38:
db:c6:b0:46:35:9b:4e:9e:7e:50:9d:53:20:13:15:8e:ee:42:
2f:df:28:ed:05:c0:47:d4:c7:4b:0e:8e:83:dd:3a:69:f1:07:
fa:ec:2f:24:45:68:68:78:b0:2a:03:a6:2f:1e:3a:a1:4f:cb:
54:46:b8:ca:86:d4:38:56:d0:fa:12:06:04:82:85:97:27:71:
a7:e9:88:0c:e4:6f:6c:0b:8f:dc:41:65:2d:61:48:1f:68:ca:
77:f6:c5:c2:73:a5:d2:0f:eb:25:cc:b9:dc:35:0e:0b:41:ad:
42:1b:5a:77:ac:ea:4d:22:66:86:ab:3e:1a:08:b9:f2:ca:a0:
81:7f:58:f5:cd:c7:77:05:c7:0d:b4:4c:c9:48:a8:9a:f5:65:
ae:a5:77:f6:6f:c2:70:54:02:a7:4c:68:46:9e:1b:f0:99:01:
27:a3:f4:f1:5c:a2:15:c1:e4:2b:c4:72:3e:c3:fc:4a:fe:e8:
01:e7:a3:22:ad:03:a3:0e:33:a8:bf:c8:98:d3:86:59:e5:8c:
70:1f:11:5e:e4:ec:74:d6:71:08:b7:d5:95:ad:e6:2b:bf:d1:
7e:b4:4c:27:d8:d1:36:7c:33:29:9f:22:6a:13:94:7a:af:73:
4c:f5:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:39:56 2025 by rpki-client