Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: 1QMvPPget159oNcTgAXljnB8hmkLLJPYsBpuqwcS2CQ=
Subject key identifier: 00:A5:2B:4E:E0:42:4A:F0:3F:69:85:FF:AF:CC:59:39:EE:6A:86:41
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 0197B7454776D26C552CD9B571887CD44CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0A98
Signing time: Sat 28 Jun 2025 16:01:00 +0000
Manifest this update: Sat 28 Jun 2025 16:01:00 +0000
Manifest next update: Sun 29 Jun 2025 16:01:00 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: Q66/TJybKrQvb4Sp/lpWbeJODaGGvpE6iPmsDW74PSg=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:47:76:d2:6c:55:2c:d9:b5:71:88:7c:d4:4c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Jun 28 16:01:00 2025 GMT
Not After : Jun 29 16:01:00 2025 GMT
Subject: CN=00a52b4ee0424af03f6985ffafcc5939ee6a8641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:58:a3:6b:ae:3b:87:15:2d:ed:fc:7d:33:
27:dc:8d:ce:5c:0e:cb:40:18:93:40:20:8f:fc:57:
1e:46:cf:8b:31:a9:45:e1:30:46:fb:fd:58:aa:b3:
96:03:09:6b:33:cd:99:25:b1:47:49:fd:8c:0e:25:
fe:d5:c0:35:ca:4c:a6:f8:fa:86:99:82:4d:85:ca:
3d:de:1d:0e:e0:c1:65:a3:6d:9d:5e:2a:48:05:54:
78:59:43:65:e3:6f:fb:25:3a:d3:58:03:eb:89:74:
98:f5:21:fb:be:7a:df:17:23:3e:02:9a:f3:71:ff:
b9:f8:84:97:b8:27:4b:70:56:22:71:e6:83:10:8e:
f2:5d:53:ff:50:60:df:64:4e:61:13:a4:ef:25:c8:
22:f5:3c:a8:16:76:88:a8:ca:cb:53:12:4f:ac:5b:
91:1d:ce:ea:d1:15:c5:8e:ff:e1:5e:a9:d3:23:d8:
78:ba:c7:cf:c1:8e:e6:d8:bb:9d:6c:1e:3c:14:bf:
d2:dd:6c:89:5d:fb:3e:77:ba:64:f1:49:45:d7:b4:
38:8c:e3:17:0c:d1:d0:d6:0c:06:a6:bd:a6:2d:4e:
84:ea:a3:42:7c:b0:f7:dc:9b:70:20:60:ac:32:55:
fb:64:73:ae:6f:f9:ab:20:40:bb:1a:0b:6b:d9:9b:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A5:2B:4E:E0:42:4A:F0:3F:69:85:FF:AF:CC:59:39:EE:6A:86:41
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:65:f0:cd:a7:49:25:4e:32:c4:08:63:e3:07:44:17:14:9b:
4f:6e:37:07:f0:c8:c1:c1:16:bd:96:4b:17:2a:58:19:7f:f3:
11:ec:43:f2:34:16:5b:76:0a:97:c8:a6:17:71:b1:a5:93:f9:
a5:62:f3:2c:33:c5:f6:31:1e:29:79:c0:8a:4e:f6:b3:cb:3a:
22:1c:36:3c:3b:c3:11:b2:79:72:50:8a:48:c2:51:0f:2e:f0:
09:50:5a:9b:db:9d:0b:f2:4a:bf:9f:66:39:a7:a2:e3:11:78:
82:b7:83:9f:45:f8:4f:9e:22:51:2f:6e:27:7a:22:3b:5a:56:
71:76:a1:56:26:03:a9:a5:62:6c:52:3b:e7:a2:c4:68:4d:1a:
9e:70:27:04:f7:ca:fe:d2:7e:2d:18:81:d4:e0:74:69:fc:4f:
91:d1:a7:6f:5e:39:52:70:74:9c:d3:0d:ec:3a:dd:50:0f:3e:
bc:4d:da:36:dd:4f:62:4a:4f:62:2f:88:48:47:74:bf:1b:0d:
56:1b:21:9e:84:d4:85:64:70:df:bf:ee:5a:79:19:be:12:de:
cb:3e:2b:31:6a:0d:b6:41:42:9e:b6:d6:74:9f:4b:3d:14:26:
0b:f8:ec:49:67:74:70:0e:c0:26:8c:6d:ca:24:d2:bd:3f:d7:
ae:cf:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:07 2025 by rpki-client