Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
File: q_CoT_j1BX-Ukd775q1V7q6YzAY.mft (raw, json)
Hash identifier: HvlNNi3MNV4dWqnSJAYLMVxlNrzCFyUMJ+1vnbRKa8c=
Subject key identifier: 8F:21:39:D4:40:01:7C:68:B0:D3:54:31:BA:78:B6:BB:19:D9:AD:1F
Authority key identifier: AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
Certificate issuer: /CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Certificate serial: 0197B88FAF64531BEB8535F6DF8930390B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
Manifest number: 0FAF
Signing time: Sat 28 Jun 2025 22:01:53 +0000
Manifest this update: Sat 28 Jun 2025 22:01:53 +0000
Manifest next update: Sun 29 Jun 2025 22:01:53 +0000
Files and hashes: 1: MjzHW04MNpWP93ktfKv3g1wY_yY.roa (hash: sTUqFaDMKCqi+ntmnIAR8vXErg/0YN5V/YZHZNxvcNw=)
2: q_CoT_j1BX-Ukd775q1V7q6YzAY.crl (hash: MzO0M9t7pOu4LNCW+nS3KNjXtpIVmIo9KgDI/ntBCfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:af:64:53:1b:eb:85:35:f6:df:89:30:39:0b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf0a84ff8f5057f9491defbe6ad55eeae98cc06
Validity
Not Before: Jun 28 22:01:53 2025 GMT
Not After : Jun 29 22:01:53 2025 GMT
Subject: CN=8f2139d440017c68b0d35431ba78b6bb19d9ad1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:d0:1f:2d:9b:97:df:25:72:b1:a1:21:76:
51:d6:3b:3f:6d:9c:fd:8c:0b:54:46:6f:7e:ff:bd:
94:ff:bd:71:f7:1b:67:dc:d3:ea:f1:90:58:54:e6:
76:4a:24:56:e8:f5:bf:85:7f:47:36:11:5c:0a:2a:
92:3b:99:06:3e:6b:e5:f7:6b:4a:1c:7f:04:f6:67:
cc:9b:35:0f:a8:76:c7:f0:67:77:b0:e4:59:42:12:
f6:c4:74:ae:a1:bb:35:c9:75:ac:ed:91:c4:65:74:
fc:2a:f3:41:05:00:07:72:82:ab:ae:80:9f:5a:5f:
05:73:11:81:ee:55:97:be:05:d2:3a:85:d1:58:9e:
29:1a:31:ed:03:fa:80:30:e9:fc:62:53:21:d7:bd:
0c:a3:ce:6f:8d:7a:99:cc:d9:53:63:af:3c:cf:a7:
63:49:7d:7c:54:ba:71:11:a1:d0:a2:5f:a8:fc:3c:
d9:d1:6e:04:66:14:9d:89:67:5a:58:35:b7:b9:97:
ea:2e:98:c2:8d:77:e8:ed:36:85:c4:e2:68:ec:f5:
61:16:4b:aa:5b:d5:43:13:e0:d5:8e:ce:21:76:42:
a9:0f:75:72:4d:91:2e:2c:9f:da:9f:d9:13:aa:5a:
cf:ad:a6:16:3a:f8:f5:46:08:9a:59:48:ba:a3:73:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:39:D4:40:01:7C:68:B0:D3:54:31:BA:78:B6:BB:19:D9:AD:1F
X509v3 Authority Key Identifier:
keyid:AB:F0:A8:4F:F8:F5:05:7F:94:91:DE:FB:E6:AD:55:EE:AE:98:CC:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_CoT_j1BX-Ukd775q1V7q6YzAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f98bd4-de07-42cd-9848-944ca1a80b18/1/q_CoT_j1BX-Ukd775q1V7q6YzAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ae:eb:08:7d:95:83:68:9f:01:ca:35:13:72:ff:5c:b1:6b:
b8:8a:1b:ef:ce:d9:35:09:f8:7b:c8:7b:e4:5d:b5:3f:b1:50:
e5:89:3e:b4:e6:e2:53:62:4b:12:90:a5:e9:4f:d3:b0:8b:be:
c7:ab:34:56:8c:82:12:88:4b:e9:67:cf:b3:88:4d:f4:e5:6a:
c9:7a:db:5c:ac:a6:10:a6:29:e8:eb:f3:00:36:9a:cd:1d:da:
a0:a9:71:9d:cf:0b:d5:03:de:c8:b2:28:96:30:c5:8d:99:53:
f8:6a:98:d3:12:a0:13:74:c2:06:dd:47:55:bd:37:8f:52:b3:
6d:a7:80:f2:02:3a:f3:5b:b0:28:f3:d4:05:0a:cf:bd:f2:06:
59:29:f0:87:14:97:b1:bb:f8:a9:af:0d:37:a2:81:3d:95:27:
c7:44:28:dc:70:61:19:14:e1:66:c8:f9:82:1d:f9:b0:6a:50:
03:56:89:75:c6:f5:d0:81:9b:7e:6e:a7:8f:e6:1c:84:f3:4b:
f8:38:c3:a7:48:7d:a0:bc:54:18:1f:ec:4e:b7:a1:3a:6d:6b:
9a:8b:60:15:23:07:c4:e5:d7:4c:93:8f:8b:b5:3b:cc:0c:04:
df:4b:4b:e8:75:52:99:cd:96:f2:e0:fd:8b:f3:04:69:06:3a:
5f:b3:da:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:06:28 2025 by rpki-client