Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: 2Ji+qO0mtQCklrr/b9trVleT2x7J1H+eRFt5mNFt5Og=
Subject key identifier: 63:17:EA:20:E4:73:F7:69:B8:36:AB:4F:01:44:43:7B:8A:CB:39:34
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 0198D4727146AF5C9B2095D9E25E3A57DF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 1418
Signing time: Sat 23 Aug 2025 01:02:06 +0000
Manifest this update: Sat 23 Aug 2025 01:02:06 +0000
Manifest next update: Sun 24 Aug 2025 01:02:06 +0000
Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=)
2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=)
3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: ITez3A3Uhm45kCdsAXFUd0l8lcEDRLCMh8+jEDrffUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:71:46:af:5c:9b:20:95:d9:e2:5e:3a:57:df:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Aug 23 01:02:06 2025 GMT
Not After : Aug 24 01:02:06 2025 GMT
Subject: CN=6317ea20e473f769b836ab4f0144437b8acb3934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:81:6e:46:25:dc:41:52:db:55:08:6f:a0:
63:6e:65:8d:a2:41:6c:6d:a9:ae:cc:9c:3a:0b:89:
1e:94:0e:b1:1a:e3:0c:5c:a3:69:d2:80:fb:6d:42:
00:08:10:eb:17:13:f6:87:ec:50:af:45:86:ec:1c:
9e:b1:0c:6b:65:b5:17:1e:52:66:68:a0:5e:d0:a0:
0d:af:cd:f2:90:ab:8f:53:19:ae:6b:01:a0:c9:4a:
7b:65:c1:47:27:1b:0c:57:2a:62:15:47:a9:35:c9:
2b:da:72:6e:b3:a2:2e:b5:f9:2f:db:08:b7:b5:31:
fd:96:6d:a2:e6:28:bd:8d:03:e0:e4:a0:88:8b:8b:
ef:44:e9:d0:d3:61:70:65:ea:a6:8e:cc:05:88:d2:
37:bd:ed:00:ae:26:d9:67:8b:b0:e2:91:6a:b8:96:
38:4b:af:3f:89:7b:ce:19:b3:e1:75:fc:f7:dd:f0:
a4:5a:9c:3c:c1:65:4b:1c:f5:35:41:ba:9c:02:b3:
ae:12:13:b6:15:4f:7a:a1:d6:80:6b:a1:a0:26:a3:
ab:db:dc:5a:f7:35:76:52:a4:c5:d5:04:7a:29:04:
25:94:a1:77:c8:7a:8c:ed:47:1b:6a:af:70:d4:5d:
ad:66:10:dd:7a:96:ed:7b:a0:a7:d1:49:4a:4e:93:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:EA:20:E4:73:F7:69:B8:36:AB:4F:01:44:43:7B:8A:CB:39:34
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e3:7b:01:95:a7:ca:30:a9:6c:50:c5:16:a9:10:7c:a7:98:
bb:82:77:f1:9a:99:cd:dc:08:40:6a:e7:15:d3:a5:6f:72:9d:
2c:c4:50:de:fa:0a:60:d6:a1:de:b7:59:4c:fd:1d:f1:ab:e5:
91:3e:8c:26:ee:30:61:b5:45:a6:cd:91:ae:50:a6:49:90:2a:
ab:45:97:ae:e9:a7:a5:d1:49:d0:79:a2:ac:ba:3b:5a:3c:b5:
21:7c:4d:94:49:d3:3d:f8:bf:06:29:ac:91:f9:3b:aa:9a:30:
e6:22:99:7a:10:89:32:2a:fb:bd:ce:5b:46:4b:a8:0b:1c:39:
8f:77:fd:e1:e5:93:8c:86:02:76:35:c8:58:bb:f1:d2:a8:fe:
86:ac:5a:5d:23:1e:37:43:9e:b4:4d:96:46:09:be:0e:8f:38:
83:75:19:4b:4c:19:8c:e0:e3:df:df:7b:73:ae:aa:9a:c2:8b:
57:ad:a6:52:34:ba:3c:e4:86:30:96:90:16:31:46:98:91:29:
22:a3:55:c2:86:c7:0c:1a:45:fe:85:ca:2e:c1:f8:fd:d8:c4:
6a:b4:8d:c7:69:b8:80:16:61:3c:1f:22:5d:f5:a8:0b:9d:1f:
99:28:01:36:ea:bf:fd:25:3d:96:4b:09:a9:57:40:81:ce:5b:
0a:e8:b6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:05 2025 by rpki-client