Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
File: qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json)
Hash identifier: KpV3r34AhsAKW3xVBuYn5sKMX84v7VMwajIO7E4jrY8=
Subject key identifier: DF:35:7A:B3:93:F3:C1:36:D4:45:25:7C:8B:F6:41:6D:FA:7D:4D:B8
Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
Certificate issuer: /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Certificate serial: 0197B7459B97505A365C7E802B66664F9E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
Manifest number: 04F1
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: gHCDIdhOuUpwW3kY6kopG285_k0.roa (hash: 5xiT0kgNZs49N5lk+a3OABaCYPVOiGuQ90iKWrfQblE=)
2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: q8uakjrgk2U9Uri8Qrylv2Jtptt+7/G3E1EWB4skeWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9b:97:50:5a:36:5c:7e:80:2b:66:66:4f:9e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=df357ab393f3c136d445257c8bf6416dfa7d4db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:fa:93:0f:82:2b:ad:e4:c1:47:78:80:ae:
fa:de:59:27:70:09:d9:39:2f:a4:63:9e:48:08:35:
74:e9:0f:66:38:49:04:6f:50:86:04:f8:2f:f8:c0:
13:6b:d8:80:4e:4f:b2:d2:b0:7d:66:87:34:25:cc:
bc:c6:29:26:ac:14:e2:92:e2:d5:ed:3c:6f:ef:6d:
0c:cb:61:a7:1d:4e:c1:75:7e:40:0b:fd:03:59:44:
47:28:67:e0:9e:26:47:bb:1b:b7:7b:0b:36:a1:c6:
c7:57:07:30:6f:8a:70:43:00:68:70:b7:d8:b6:2b:
69:57:f2:18:0a:98:c7:5e:49:c2:03:ee:f5:13:b0:
c3:fa:d7:5b:db:a0:2e:d5:ac:30:e2:7e:43:e8:9a:
20:cb:7d:52:c7:ae:05:3c:af:67:57:d9:35:c9:05:
fe:57:5a:5f:b1:04:8c:9a:2b:bf:42:1f:e1:01:d2:
d5:28:6e:07:c9:d6:2d:03:a9:21:aa:34:6a:72:cb:
bd:f9:2f:a7:a8:97:6c:92:c8:9d:ed:0f:5e:f4:b8:
a2:5f:90:a6:64:96:b8:93:47:fd:a5:0e:38:ee:97:
b9:6c:1a:4b:b4:2e:bb:55:89:16:69:cb:39:c8:a7:
b6:31:eb:8f:bb:b2:71:76:1a:df:dd:a3:76:be:2a:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:35:7A:B3:93:F3:C1:36:D4:45:25:7C:8B:F6:41:6D:FA:7D:4D:B8
X509v3 Authority Key Identifier:
keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ca:31:c1:52:f4:72:93:44:3a:8d:10:75:f4:72:37:85:f5:
aa:5f:84:a6:98:23:74:9a:9f:4b:3c:28:f4:eb:6b:b8:87:98:
33:a6:10:0e:78:44:d7:8d:67:86:e8:4c:21:12:28:b1:3f:00:
12:5d:aa:bd:a9:27:5f:ad:55:1a:ab:73:98:84:2a:ef:f7:b5:
0d:ef:7b:39:5b:f0:39:5c:90:b8:18:a4:c1:81:5a:dd:2a:14:
bd:ad:4c:00:3c:be:de:ae:9e:c3:65:2d:74:67:03:5b:b6:02:
09:e9:aa:ca:0e:85:24:9c:f5:17:40:da:8c:bf:9a:25:b1:72:
f6:6d:45:c9:fe:9d:9f:6a:3c:27:25:c3:c4:3d:81:f1:83:cb:
33:f7:e5:ec:f9:e1:7d:b2:24:72:e1:b7:7e:d3:f9:41:33:d8:
9d:99:61:28:ae:a4:e4:d5:ec:5c:3c:62:ce:75:89:af:83:a4:
35:1a:e5:c7:0e:74:c6:bf:c0:5d:3b:f0:22:38:4c:1f:e3:4b:
99:0b:c0:89:90:c2:64:6c:a6:eb:5b:fc:4e:ee:de:35:9c:b4:
06:1d:01:c2:6d:0a:9a:f4:15:c7:a4:38:f1:b1:cd:4c:c7:aa:
c7:0e:dc:3c:eb:90:ae:8a:4e:cb:17:9c:1b:1f:78:02:b7:e2:
f0:fc:2a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:00 2025 by rpki-client