Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: BDpz5vH4b5F2gRigUPSCG572X2XSE9yJj9RJ0odhfjE=
Subject key identifier: 8A:1A:7C:B2:BA:CA:3D:54:F4:3E:54:BB:79:92:12:B8:4E:5F:06:2E
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 0198380453116FFACFD0B906880A9A6B5043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 11AD
Signing time: Wed 23 Jul 2025 16:01:04 +0000
Manifest this update: Wed 23 Jul 2025 16:01:04 +0000
Manifest next update: Thu 24 Jul 2025 16:01:04 +0000
Files and hashes: 1: 1-9PbJd606SAcljFaDXOqMtimHsk.roa (hash: KXw8kntxbx0A19gUTumtpNuhW4BHiQmmsQFSl5B6ZYs=)
2: 2-vgpJwDsEY_VoNu8cnFA12khB8.roa (hash: iUnRP/l7HzWTkjMJX+R7OEZ9+tX6NbtdM3UPohuBzqw=)
3: 8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa (hash: g6jDxz/UxGzzizwSc5CDzUUAAjalGAWQr2yYfR64f7Y=)
4: Egh3cL0v2_H-TY-QEmnrWnX0arg.roa (hash: uAUHTXbdFEHAhORw9S54HkonrjueALJUqc4yeHLWHu8=)
5: TvcD9AMtT0yWtHonps0hocI3dlg.roa (hash: fuU4HZNYKHN5G71TXaO9NMKHsWQTf51zKQ44BmOWV1o=)
6: nSrKwFeL2JWJX-O6yRsJjMyenO4.roa (hash: T5rsVBpHF0FkBvtcb+csX6yuqxHhug7dklzF66IL7J0=)
7: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: yp9AAyPx7hofP+6p5GuvEkOTeckqtQTfUj+mT1LsnRA=)
8: vEaBzwoEAwzosXDFzJLUwLp5Y64.roa (hash: P0SFRAVbYdQfuoozG6LdZarwkxJX0gGTe/XAuMu2MyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:04:53:11:6f:fa:cf:d0:b9:06:88:0a:9a:6b:50:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jul 23 16:01:04 2025 GMT
Not After : Jul 24 16:01:04 2025 GMT
Subject: CN=8a1a7cb2baca3d54f43e54bb799212b84e5f062e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:6e:33:66:af:18:17:c3:08:b5:fc:37:5d:
32:10:5c:a1:e7:8c:e6:06:ee:b9:17:8b:c7:8e:19:
d7:a8:e4:64:53:6e:ed:b4:aa:29:8d:47:5d:c8:c9:
d4:d7:9b:95:e6:df:69:7b:f6:71:a5:a1:e4:7f:f8:
e3:93:53:2f:bd:9e:28:f9:bd:2d:05:be:52:f2:28:
18:f4:02:96:17:32:41:a3:21:fa:9f:d0:2f:6b:4b:
7d:21:41:e7:a8:a4:9a:6c:09:3f:1e:3b:55:71:74:
5a:dd:04:16:19:39:67:36:36:f6:50:71:67:6e:5f:
ef:91:38:fa:84:2d:dc:b3:61:eb:47:66:33:3b:97:
09:08:b0:a0:8d:e1:9c:e6:71:f6:29:24:f9:a0:fb:
64:41:c9:8b:53:9c:6d:4a:dd:f7:01:6a:05:c3:4a:
8e:26:f7:6c:e2:87:bf:14:92:4a:14:2e:2d:e9:60:
01:d6:2a:0c:0a:68:55:50:01:60:5f:73:05:a8:7a:
ff:ca:87:69:26:98:e6:07:4e:43:a4:ff:df:9a:86:
64:ee:07:6b:36:fa:09:e2:94:89:dc:d7:ad:00:d6:
9b:4a:4a:e6:45:9b:23:ed:52:88:20:0c:4d:4c:79:
41:2f:4c:f5:d6:44:56:1a:32:47:48:20:cd:49:7a:
7b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1A:7C:B2:BA:CA:3D:54:F4:3E:54:BB:79:92:12:B8:4E:5F:06:2E
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5d:e3:97:e7:7d:2a:55:06:0b:a6:69:1c:79:07:51:82:9c:
2c:4c:02:33:ff:dc:23:8e:6a:3e:14:66:fa:c9:71:3b:cf:82:
91:f0:56:a1:20:16:91:56:3b:f7:41:e7:a7:7b:7f:1a:d5:64:
88:0f:51:a1:ed:9e:b2:df:f3:6a:4b:96:bc:39:cb:39:1c:ce:
37:80:fa:e5:6a:b6:ae:42:01:f5:31:4f:15:9a:bd:c1:85:72:
f9:4c:11:12:d8:c7:f3:ee:33:b0:8d:a0:8f:e7:52:c0:7b:cd:
3f:98:e1:8e:50:80:d9:ef:65:2b:25:28:39:4b:1d:67:5c:02:
c9:9b:ba:f0:9b:63:36:72:37:7d:3b:54:07:ce:8c:42:98:b0:
b4:2b:23:aa:b9:64:c5:26:66:78:97:d0:38:d1:ff:29:63:3b:
3e:9d:1e:28:5b:d6:16:f6:13:ac:38:5f:3a:dd:ce:01:e6:ad:
df:4d:81:29:a9:9a:1b:c2:95:3d:9b:bc:6c:a1:a8:d8:ee:41:
17:28:a3:09:ec:78:73:17:96:a5:41:0b:d8:5f:30:29:7b:66:
8a:42:09:6c:f8:62:3a:12:88:63:39:51:b4:88:54:90:49:a1:
d9:65:8d:09:38:48:71:11:7e:58:17:42:9f:34:66:27:bb:6e:
38:c8:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:32:43 2025 by rpki-client