Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
File: qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft (raw, json)
Hash identifier: 9LaDGb2Mj0iNCMe7lQoKeHOvQ4SjPFJYquo0LIPv+ho=
Subject key identifier: 6F:7A:65:3B:B6:80:B1:70:C3:46:04:36:C8:7E:AE:CF:B6:C5:FA:0A
Authority key identifier: A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
Certificate issuer: /CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Certificate serial: 0197B77CBE89AFB3EC6A78EF3D7582ECAE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
Manifest number: 0929
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: 6erG3SJtn2TNRyDkzUal0dRi1s8.roa (hash: zMaNZ9haJooDEzDMLzt1I2Ft1PlQQjaYiPOAhINpWfw=)
2: qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl (hash: aTq4LodXygBE0deX2lS+mLDrVE0Ow2CIy50cznOrJNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:be:89:af:b3:ec:6a:78:ef:3d:75:82:ec:ae:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ff3a73868dc11cd8dbf5e1c380bbb710602fb4
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=6f7a653bb680b170c3460436c87eaecfb6c5fa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:a5:2a:a9:49:3e:fd:55:84:44:ac:0d:80:
f0:0a:7b:6a:04:6a:b5:0a:cd:da:26:e6:e0:47:5f:
59:45:66:0b:3a:03:21:61:7b:18:85:17:7b:4e:bd:
6f:0c:54:7c:7b:24:ec:55:c2:27:5e:9d:51:52:8f:
fa:20:af:e1:e8:65:83:2a:39:fb:3d:fc:3b:91:86:
db:0f:69:e3:41:96:02:a0:38:46:d5:56:cb:e3:d3:
1e:43:7b:d9:89:0f:1f:19:4a:24:84:c9:7c:60:71:
b5:08:60:4d:fa:a6:50:46:22:26:b0:e7:17:c3:31:
62:71:aa:e8:fe:17:fd:29:da:f3:fd:a0:3c:da:0f:
45:c0:fd:8f:0b:ca:bb:52:33:1a:52:c5:33:38:ca:
15:65:fe:1a:7d:07:8f:20:34:0e:58:25:ed:fb:7e:
c1:19:74:ed:99:70:9b:0a:a6:f8:d8:54:20:5f:54:
dd:e1:06:34:02:78:93:2c:47:bd:2c:9e:dc:03:37:
c1:d5:35:03:a7:fb:42:1c:09:4c:3b:83:e7:cc:8a:
b3:d5:02:e6:11:0a:b7:b0:23:2b:a0:81:4c:e4:71:
be:0f:6e:fd:d7:4e:aa:df:38:66:18:6e:2a:a2:6b:
f0:67:73:bc:6e:c1:08:c5:c2:58:62:e8:99:c5:87:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7A:65:3B:B6:80:B1:70:C3:46:04:36:C8:7E:AE:CF:B6:C5:FA:0A
X509v3 Authority Key Identifier:
keyid:A9:FF:3A:73:86:8D:C1:1C:D8:DB:F5:E1:C3:80:BB:B7:10:60:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qf86c4aNwRzY2_Xhw4C7txBgL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91585a-a38f-4749-9f48-47974f5c704a/1/qf86c4aNwRzY2_Xhw4C7txBgL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c1:fd:55:19:81:bd:ed:9f:ce:ce:ab:b0:80:57:ac:72:24:
7b:2b:ee:a5:42:0d:de:1f:d6:22:89:0d:50:e4:40:7e:d3:f3:
1c:1d:f2:10:54:05:b8:a7:a0:23:5a:0f:d7:ea:43:8d:77:d3:
67:82:4d:54:c7:8f:43:5d:da:33:cb:49:9a:88:b1:e5:79:5b:
d3:cc:10:d7:11:96:1e:6f:f7:9c:67:27:27:ab:1b:ba:5d:32:
85:fa:f1:a2:4d:da:e2:d0:e7:e0:ec:68:d3:7b:b5:13:ee:7e:
83:e9:ba:c1:a4:3e:f4:c0:6a:b0:bc:be:57:99:88:ac:40:40:
ef:50:b0:a5:83:29:6b:a1:cd:9f:34:0f:82:ab:ea:8f:09:95:
5f:e6:2a:ac:f4:e0:c8:d9:ab:79:45:31:9b:3f:78:b0:75:d2:
cc:73:cf:0b:b7:be:dc:c6:43:cb:3e:a5:11:de:81:e1:b8:df:
db:51:55:c5:34:5b:54:78:fb:4c:45:25:cc:a5:b8:5e:c1:62:
d0:d7:3c:02:d2:03:2f:98:d2:4c:8e:ce:ff:e9:c8:f7:24:df:
88:0d:b9:8e:33:7e:3b:5d:6a:28:92:51:b6:ec:2f:98:4f:6c:
20:b0:91:e6:7d:4b:71:15:05:fc:47:4f:c5:2a:99:78:f2:46:
7b:d2:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:47 2025 by rpki-client