Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: +57kCIotIDTuMqWOv9jAbs8jjcRvg0VFmdO5VqsugPI=
Subject key identifier: 70:DE:FF:60:6D:D4:26:2E:03:FD:D2:82:69:A6:9C:7A:F6:37:FD:91
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 0197C614EFB0873D15BE3CE8986FCCDD7D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 138C
Signing time: Tue 01 Jul 2025 13:02:30 +0000
Manifest this update: Tue 01 Jul 2025 13:02:30 +0000
Manifest next update: Wed 02 Jul 2025 13:02:30 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: lQX0hg0E9K9vmXS9uiPvFuCilEI0o551sfAuwKBF4sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:ef:b0:87:3d:15:be:3c:e8:98:6f:cc:dd:7d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Jul 1 13:02:30 2025 GMT
Not After : Jul 2 13:02:30 2025 GMT
Subject: CN=70deff606dd4262e03fdd28269a69c7af637fd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:bb:fe:6a:5c:18:a2:f0:42:8f:64:34:cf:
37:7c:30:12:e5:55:38:68:1a:ae:3b:5e:67:cd:aa:
b0:03:62:06:ee:30:df:4b:7d:08:cb:e1:bb:a5:6a:
d9:71:b3:2f:a6:92:cd:91:25:9b:9a:b0:bf:e1:26:
79:51:05:bf:12:4c:8c:52:5d:75:74:d8:94:85:3d:
ff:4a:f1:6d:b5:0c:d4:c0:9a:c8:20:e5:6e:d4:91:
6a:8a:dc:71:9a:2c:fa:97:94:03:ea:72:f7:7c:8b:
f8:f1:6c:f0:f6:b1:b1:3f:98:39:a0:18:73:21:9b:
d3:32:fd:88:6c:79:b5:e1:9d:c5:ec:c2:32:28:7d:
75:b2:38:cf:96:a9:f3:2b:03:30:8a:f8:0d:6e:38:
3b:ac:bd:e0:dd:8d:10:1b:a0:a1:06:bb:76:88:97:
9b:57:b1:f4:17:5d:5f:16:eb:ea:01:81:bc:34:d9:
6b:20:2b:fd:56:77:b2:f8:27:28:cd:eb:09:a5:ef:
9a:c4:e9:34:b9:de:39:0a:d6:ee:e6:54:7e:e3:44:
20:fe:8e:d2:90:61:b5:32:0f:39:16:64:82:a9:40:
5b:eb:83:03:ae:8a:f6:7c:60:90:2f:f2:9d:77:0a:
b6:93:03:69:9e:43:8c:83:db:89:00:cc:58:ef:c8:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DE:FF:60:6D:D4:26:2E:03:FD:D2:82:69:A6:9C:7A:F6:37:FD:91
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:33:6e:ed:91:59:14:eb:8e:6e:24:d8:dc:72:a4:51:cb:93:
b5:d1:0c:4b:83:e2:3b:3f:57:76:15:70:dd:1d:91:92:a5:f9:
5a:34:64:ac:d7:ee:11:fc:d2:90:fb:45:c9:21:27:86:db:25:
f6:e3:89:92:0d:e2:88:f4:83:97:0f:b6:64:5f:c6:9e:25:ff:
3b:f9:18:ed:d3:12:c8:7b:4f:3a:48:3e:4b:98:7a:db:d2:de:
5e:0d:80:7f:61:77:19:4e:95:63:6f:a4:b6:84:b5:6a:72:81:
f4:72:c9:ee:2e:c4:2a:07:82:f3:8c:64:51:87:fa:88:35:93:
d4:84:2b:6d:ac:99:09:af:f6:94:c9:9e:72:56:1e:22:87:42:
6a:ee:d2:73:f3:6a:b0:c0:86:d4:1f:a2:d0:56:46:eb:fe:62:
af:e6:ba:16:29:32:a8:13:8c:a8:18:69:14:c0:2c:14:1c:59:
ae:91:72:6e:52:0c:27:47:c3:77:6b:ae:22:6b:4b:df:c8:00:
ad:8d:d7:19:09:65:2b:35:3e:9f:86:46:45:6c:41:1b:a7:58:
26:96:ce:3b:96:3f:59:04:2c:84:21:ad:46:e6:65:2c:3b:7b:
17:41:b7:64:13:22:81:d2:62:4e:2d:8a:6d:92:9d:7b:ef:eb:
3c:b8:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:27:58 2025 by rpki-client