Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File: qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier: Z+gRcpLM/MDcUqa3WEEKrrEyxp+NmyNquGY2PRiweAc=
Subject key identifier: C4:82:C6:AF:DB:72:0C:9C:6F:D5:80:88:FA:55:07:50:79:66:67:AA
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 0197DBC04312637E8D4CB67059D4376836BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number: 1041
Signing time: Sat 05 Jul 2025 18:01:39 +0000
Manifest this update: Sat 05 Jul 2025 18:01:39 +0000
Manifest next update: Sun 06 Jul 2025 18:01:39 +0000
Files and hashes: 1: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (hash: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=)
2: X_mEYYeWr9-8-K3hPb_xZPAlhyU.roa (hash: 6DNXGEiBb6ULQJ057yIjE1b50LAb3WIwVPg+KL0u4Kc=)
3: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (hash: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=)
4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: yL1hPy2sCIidN/ryed702/+prv752OtRVycCNEuTDeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 18:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:c0:43:12:63:7e:8d:4c:b6:70:59:d4:37:68:36:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Jul 5 18:01:39 2025 GMT
Not After : Jul 6 18:01:39 2025 GMT
Subject: CN=c482c6afdb720c9c6fd58088fa550750796667aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:84:57:89:7b:74:6f:64:93:b8:16:4b:59:
5a:cb:6c:51:d4:07:87:a5:f5:a9:f6:f6:b1:4f:8d:
5f:e6:28:e1:1e:e8:d8:43:3b:eb:62:b3:6a:27:9d:
95:6b:49:6a:af:4b:1d:c5:75:23:49:d3:1c:02:30:
12:d6:f0:1d:f8:af:98:a7:6a:86:ad:87:b5:56:91:
87:a5:8c:db:bb:98:33:8c:0d:da:4f:c6:fd:59:ca:
2b:59:10:bb:5f:7c:19:b3:8d:56:ad:a2:3f:52:13:
d4:9e:fb:24:f7:06:29:9f:1c:85:f8:bd:13:28:ac:
d5:47:56:d3:6c:f8:ef:39:7c:df:51:c9:f7:0a:cd:
95:80:33:2e:6e:5e:97:d9:fd:05:b9:bc:6d:c1:52:
a1:ae:b0:ed:7a:88:ce:59:81:85:04:17:0a:b7:e7:
80:5d:9e:27:fc:ad:dc:d2:84:c4:04:09:8c:bc:5a:
da:bc:1a:03:f4:e1:76:30:3f:93:dc:be:70:6e:70:
a3:54:e9:97:3a:17:70:39:b5:68:b4:ed:e3:d6:ce:
08:1b:d4:e5:e2:17:df:98:be:20:cd:00:c7:eb:ea:
64:a5:0f:e3:23:c4:fc:9a:72:12:4b:db:93:a4:59:
5e:76:82:24:5a:39:00:0d:7d:3b:50:af:a2:78:fc:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:82:C6:AF:DB:72:0C:9C:6F:D5:80:88:FA:55:07:50:79:66:67:AA
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:11:1c:1d:00:7d:5f:df:9e:81:40:4d:ee:70:6b:5b:bd:6d:
2f:1c:2c:88:43:f5:12:cf:20:d9:68:ba:7e:d2:37:49:5e:02:
2d:4c:7f:1b:75:4f:c1:91:c3:2e:06:3e:3d:7c:39:bb:2c:46:
75:d5:ba:88:3d:bd:43:b7:6d:50:b8:92:e8:09:0f:14:71:49:
b5:b3:cb:54:b1:bc:59:2a:48:f5:8f:2b:6f:26:37:0d:c4:c6:
8c:af:af:fe:8b:42:1a:7b:52:fc:7b:cf:3a:d9:e3:ff:9b:e5:
97:3d:ac:95:e0:9e:e6:e0:e8:5e:76:8c:26:e0:55:c4:ef:ee:
b6:57:b9:73:da:38:60:07:71:02:f5:9a:5c:d7:0f:21:45:4a:
77:3d:fc:e9:fb:b5:96:f3:f1:b5:cb:42:48:51:80:4a:ac:fc:
32:53:71:a9:bf:16:79:24:41:98:22:4c:47:d8:6d:60:80:9d:
72:ee:ba:b9:3c:84:a4:29:de:c3:f0:6e:ba:6c:e9:10:bd:ac:
aa:12:57:1c:e2:6f:df:06:28:08:86:fd:3c:1b:aa:ca:0d:6c:
81:25:c3:90:30:4b:12:d2:5d:fc:a2:d2:85:59:d3:4d:fe:aa:
93:90:b6:6c:da:1c:34:68:73:4c:e3:38:21:bd:ea:c4:e2:58:
ff:e1:5c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 04:19:02 2025 by rpki-client