Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json)
Hash identifier: cUUIu6tn184IugrK8sQPxvXh9tX/8746MzWt9u3oXj8=
Subject key identifier: 7F:17:D7:D6:00:42:21:2F:B9:11:D6:5C:1E:F5:5E:63:EC:45:46:B1
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial: 01984B53769D534228D7C88E3EEFED3ABD18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
Manifest number: 1084
Signing time: Sun 27 Jul 2025 10:00:17 +0000
Manifest this update: Sun 27 Jul 2025 10:00:17 +0000
Manifest next update: Mon 28 Jul 2025 10:00:17 +0000
Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=)
2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: vWevLZWuu1VDa0ZBXaBBpp0S5YKMq1TjaxwcHCWZSvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:76:9d:53:42:28:d7:c8:8e:3e:ef:ed:3a:bd:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Validity
Not Before: Jul 27 10:00:17 2025 GMT
Not After : Jul 28 10:00:17 2025 GMT
Subject: CN=7f17d7d60042212fb911d65c1ef55e63ec4546b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:9a:d4:f6:b8:e7:55:a4:2a:76:70:11:1b:
9c:9a:dd:0c:64:9c:cb:23:71:72:d1:8b:bd:a9:53:
1a:aa:7d:cc:df:fb:12:35:56:69:12:56:4a:be:11:
e7:33:e9:17:cf:e3:d5:5d:68:00:03:66:78:74:5a:
d5:d5:71:f6:e7:5d:14:72:af:45:97:d9:ac:99:e1:
f2:b6:62:97:e9:8e:83:ee:a2:38:9b:15:db:cd:62:
8d:cf:1a:5c:b4:c6:e5:e1:73:fd:7b:f6:00:6b:d4:
b2:87:89:a8:9c:6a:7c:92:41:b6:e3:fe:1f:12:92:
67:62:96:86:5d:82:77:6d:f1:b6:89:49:51:74:e9:
51:04:c5:19:69:c3:36:01:e1:a1:db:73:32:e4:3e:
7e:fb:7b:49:f0:64:75:1a:d4:cb:00:f3:37:b9:8e:
6b:c1:7b:69:2b:3d:07:4c:0f:64:c1:26:f4:4b:9a:
a0:f7:f3:b5:46:b9:41:36:da:c3:32:5e:79:c9:17:
5b:09:f9:24:ef:99:7a:79:c8:1a:29:eb:94:fd:d1:
7e:9d:be:54:d5:8a:1e:c0:00:9b:a6:6c:42:c5:ae:
3e:84:3f:e9:78:4f:a9:83:8c:c3:fb:74:aa:89:aa:
20:b2:4d:86:e5:93:f9:0c:5c:cf:98:6d:c5:a2:92:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:D7:D6:00:42:21:2F:B9:11:D6:5C:1E:F5:5E:63:EC:45:46:B1
X509v3 Authority Key Identifier:
keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:49:be:ed:03:33:3b:1e:b5:e3:2f:b1:80:ce:d7:0f:40:62:
0a:dd:84:17:da:e6:d2:70:cb:e1:33:c6:6f:34:0a:4f:4c:bd:
61:58:53:96:6c:4d:fd:9e:28:0b:ca:b4:74:86:82:9c:2e:6b:
2c:c6:d6:76:e2:36:fc:50:ee:8d:97:b9:27:1c:c4:6d:bb:3b:
1a:d6:ae:bb:d6:4d:1f:5a:38:b6:36:ca:80:c0:cd:32:4b:24:
cb:eb:b2:cd:82:06:f5:7c:b4:c0:6a:c9:fd:3a:b8:27:b9:e7:
4e:8f:10:c6:68:0e:72:31:ad:a7:cd:bb:41:2a:07:f0:bb:c2:
a7:eb:ba:fa:57:19:1b:b8:1b:66:e0:c8:28:84:21:ed:ff:06:
c4:64:8d:52:ea:e4:80:12:c1:6e:18:d1:1a:1d:db:4e:7a:ab:
49:a3:58:22:74:6f:e2:a9:9d:03:71:fb:1e:e5:0b:0e:3b:57:
54:69:3a:5c:00:09:0d:29:81:08:39:13:d9:68:fc:6d:30:48:
ef:0e:2e:76:f4:67:53:da:fb:e1:aa:78:41:f5:c0:8c:29:53:
6e:10:39:0f:7e:c0:67:10:4d:6f:65:65:c9:9d:88:3a:3b:54:
a2:92:71:67:11:82:6d:0b:cb:7f:a1:37:e1:76:4c:80:60:19:
95:23:bb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:42:53 2025 by rpki-client