Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: zZaNilzud0n2XQwb9MLXUeMzIrVp0YZwLD+PUDmEsXc=
Subject key identifier: E2:88:65:A9:0C:F4:1B:95:FC:91:63:1F:DA:D9:E1:C8:E7:7B:13:D8
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 01984A7809AFAAE6F60C1BC784871392F3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 06:00:37 +0000
Manifest this update: Sun 27 Jul 2025 06:00:37 +0000
Manifest next update: Mon 28 Jul 2025 06:00:37 +0000
Files and hashes: 1: OltzXJJiE9XyxoEWZKwac5KxNNc.roa (hash: MXwRj0eiEFB7lamZjGpRz17XKhXqe6VMpTtPXa7Dwss=)
2: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: RnNOLZC7zTuJrDSqw9uACkvvIlD5O4BvpNGE5j/IMF8=)
3: cBOMK4GkmfUj8zCER3y-I6RRUx8.roa (hash: XEyKrzUWCu1JpQ8Kf3Wpk7S9z0xsu1o5ymfdHv6j4Ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:09:af:aa:e6:f6:0c:1b:c7:84:87:13:92:f3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jul 27 06:00:37 2025 GMT
Not After : Jul 28 06:00:37 2025 GMT
Subject: CN=e28865a90cf41b95fc91631fdad9e1c8e77b13d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:14:6f:82:95:88:f7:a2:92:0b:9d:93:1d:a4:
8a:a5:0e:ab:eb:4c:74:40:f3:3a:1b:29:3f:d0:dc:
8f:d8:a1:26:6d:de:65:15:ed:21:a8:a9:34:3d:1e:
5c:19:66:38:eb:a5:ca:e9:fa:50:87:df:80:3b:04:
d9:2a:fd:df:dd:b6:d0:db:ff:4a:ed:41:6e:c8:2d:
bb:ea:b6:0c:62:53:6e:40:e3:89:15:30:d0:bf:b1:
7f:c5:3b:ad:a6:1b:1f:73:fa:f8:3e:dd:30:5c:19:
25:a7:0a:db:9f:6c:3a:a4:c2:10:e5:80:ef:33:7d:
79:14:5b:23:c6:44:ec:c4:98:1c:71:6c:b9:e8:84:
86:0a:e5:cb:01:b5:34:2d:ab:97:91:1b:e8:3c:9c:
81:8c:27:8b:2e:36:20:19:02:40:6e:6b:38:87:59:
ed:15:47:33:fb:33:73:f8:92:5f:85:57:c2:74:10:
20:58:14:5e:2a:78:6f:53:c4:b1:e7:4b:97:13:c4:
21:fc:0a:f3:a9:5b:02:79:fb:7e:ae:77:2c:20:11:
54:44:d8:7b:2b:23:e9:7d:65:8c:e3:d9:ea:2d:36:
88:31:7a:37:75:21:af:51:32:81:bc:a0:0f:ef:88:
76:e2:52:d1:5c:7b:cf:7e:55:d2:23:34:90:10:f9:
51:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:65:A9:0C:F4:1B:95:FC:91:63:1F:DA:D9:E1:C8:E7:7B:13:D8
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ef:0a:00:eb:a0:d4:3b:c4:57:47:97:8a:e4:e4:2d:9a:e2:
53:e6:a6:7e:5c:87:e4:d0:f3:5d:a1:d8:45:3e:03:f5:af:f4:
62:e0:fc:df:c5:0e:86:ff:d3:27:14:02:c8:8f:f7:7f:36:b8:
89:cc:ff:cc:d6:88:f6:53:16:f8:ab:91:90:6c:e9:b1:77:fd:
d7:97:c2:d8:63:dc:69:31:ca:5e:a6:ef:5f:43:8e:02:99:9f:
2e:b6:66:e9:b9:06:42:14:39:42:09:89:db:a4:06:0c:f8:1c:
0b:91:72:7f:5a:e9:6a:0d:44:e9:f5:21:e4:4b:d1:a1:55:f5:
8e:32:53:d7:40:fe:91:12:d7:4b:65:6d:dc:d4:0a:11:c6:94:
5b:a7:ae:cf:2a:82:73:50:d5:b9:c5:a5:a2:f1:4e:a9:1c:20:
81:a2:55:b0:81:66:04:20:52:ef:0a:5a:38:6a:4c:93:c8:02:
e9:24:52:48:db:5a:b1:0e:78:f9:93:c2:e5:df:80:5e:8c:20:
95:22:27:4f:dd:83:1b:6f:76:f4:e5:68:c1:ca:d5:80:5b:ed:
b9:8f:7f:ce:a0:d2:01:04:27:5f:c5:ba:68:54:81:fd:05:09:
75:fe:85:10:3c:ac:55:bd:df:92:95:de:3b:4a:c8:3a:3f:6e:
7d:76:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:38 2025 by rpki-client