Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: qulGDKkAUG74hV+xWq6Tz+pVgaKfKXbO0nMu2tYBqnw=
Subject key identifier: 02:10:1E:6E:A9:DD:68:E0:52:09:7B:03:B2:41:B2:9F:09:83:7D:AB
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 0197B70EF9CC4356B78451B49A8C9EC43178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 0C4A
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: O_hdcVHlxOZo_l-7xdIRhesWw_A.roa (hash: mfR5DtCjLIjJTqw++nVFAPPeJtIg5fCaC2S+CCvWR50=)
2: XwnrCE6pmPQ_ODmEcUdfJGretx8.roa (hash: 5lKgnXAmcufifa9qAWfP1aELwyqHVzg1TzDHW6nCY9c=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: WzG48rAeKKuk6mh3FbP6tALPo3BrAkF6tDd77SQIP70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f9:cc:43:56:b7:84:51:b4:9a:8c:9e:c4:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=02101e6ea9dd68e052097b03b241b29f09837dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:a7:7a:79:c0:4e:0e:60:57:12:2b:6a:58:
b7:9e:6b:44:de:fd:b1:dd:e8:9c:7b:03:12:58:82:
01:eb:8d:b7:d1:44:e3:7d:16:9b:39:81:51:25:a0:
2b:29:2d:21:85:53:8d:18:2b:b3:f8:f6:8f:2d:07:
91:e1:a4:53:a8:94:11:ab:46:fd:fb:97:4b:9a:ba:
dd:5d:b3:25:5f:e6:f6:10:65:54:d3:73:e5:a3:24:
ae:ff:f3:97:bb:94:79:1b:7b:e4:a1:a0:ac:b5:2c:
5e:a5:6c:a1:57:cd:38:f2:90:ff:3d:00:a1:18:86:
6a:1d:4d:b5:72:a9:5f:d8:fc:ed:04:13:52:b1:79:
45:e0:ce:3f:d1:aa:08:42:83:90:3d:d4:06:b3:00:
2a:e3:bc:ca:b3:70:6e:e8:1a:4f:16:6c:61:7a:d7:
ac:ee:1d:41:51:09:b7:25:0d:0b:c1:3c:18:ec:e8:
a4:7d:1f:d3:25:ed:0e:90:1d:45:c9:aa:87:b8:1c:
29:f1:53:a5:c0:ce:c2:54:62:2a:ea:0b:e4:f5:39:
2d:e3:d1:80:67:02:39:8e:1c:b5:7d:55:c9:be:0f:
ff:f8:73:c9:78:23:36:45:e3:5c:7d:6e:c9:84:09:
3b:3f:f0:43:cd:f5:4c:33:2e:f7:4e:15:87:e1:5d:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:10:1E:6E:A9:DD:68:E0:52:09:7B:03:B2:41:B2:9F:09:83:7D:AB
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:eb:82:f4:73:c3:55:72:c9:4e:55:35:89:a0:d2:f3:bb:4b:
57:63:ca:60:59:43:b9:50:22:9f:27:83:5a:8c:a8:99:0f:73:
8e:93:cd:98:5d:f2:6c:68:12:26:b3:77:cd:e0:a8:a9:1c:0b:
55:89:a1:19:ca:10:72:bf:9f:9b:c3:ee:23:b1:de:9b:87:dd:
d1:43:d7:d1:01:5d:ce:1e:05:f2:f4:f5:d4:b2:99:79:0a:20:
eb:56:b2:05:92:bf:c7:6d:36:ce:7b:52:82:bd:79:e8:58:cf:
a9:d9:77:c0:2d:17:d4:76:68:13:aa:41:d1:d0:6b:01:5f:ba:
f3:c7:c4:c2:85:b8:43:44:cf:51:4d:5b:08:8a:82:ee:d4:e9:
af:c8:a7:b5:98:84:78:31:26:98:3d:62:05:5b:f4:8b:67:90:
d3:2a:73:a5:62:fb:b9:61:b7:51:d3:90:ff:e9:00:62:29:c9:
09:66:ff:98:a7:dc:42:55:12:dc:5d:60:88:69:9f:5d:bc:8e:
fc:36:40:a0:26:68:c8:97:48:23:fc:44:08:b5:6d:91:68:b4:
e5:fa:8b:b4:d0:7f:f1:00:c0:b2:91:41:08:12:10:69:18:8f:
a2:80:0e:d5:52:5f:e8:db:12:9d:de:e2:f6:39:8f:8c:6b:6f:
af:e4:bd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:39 2025 by rpki-client