Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: it32xavfZLgs0PI4ABt+UdXFPVD06w4Ph4RYntylGtI=
Subject key identifier: 7F:E4:E5:0B:17:72:C5:D9:DF:41:D7:65:6C:98:A1:6B:89:50:25:04
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 0198530E2F90C1E0C77E4688E4FEC6E64D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 1277
Signing time: Mon 28 Jul 2025 22:01:35 +0000
Manifest this update: Mon 28 Jul 2025 22:01:35 +0000
Manifest next update: Tue 29 Jul 2025 22:01:35 +0000
Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=)
2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: OU5yIaKLwayeHdsKuW+9vfGpjicvzUyDJ1lOE+M9t0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:2f:90:c1:e0:c7:7e:46:88:e4:fe:c6:e6:4d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Jul 28 22:01:35 2025 GMT
Not After : Jul 29 22:01:35 2025 GMT
Subject: CN=7fe4e50b1772c5d9df41d7656c98a16b89502504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:d5:d8:62:7f:79:34:66:43:7f:5a:26:b6:
be:e0:3d:c8:da:62:05:9d:62:c1:8d:9b:20:20:24:
d7:40:b3:b4:a6:23:0d:0b:07:f3:6f:b0:b1:a5:d6:
e2:7a:a6:53:6a:a5:05:54:1c:7b:27:82:50:d3:09:
e3:5d:6f:65:58:c7:1d:cf:9d:5f:34:74:2c:57:1c:
4a:77:fe:7f:cb:3b:dc:70:92:e5:57:73:0a:e3:c6:
5d:d3:c8:09:97:66:15:9c:22:7d:73:fa:b0:1f:bf:
db:9e:3b:69:a8:48:9b:53:1b:f7:fc:6c:21:c4:84:
9f:0d:73:d9:5a:58:fd:12:76:3f:6a:9d:7e:32:b3:
03:b5:54:4a:3f:78:1b:1b:8c:07:e1:d6:a3:40:9f:
cd:0e:a7:c1:fa:01:d1:ff:58:be:df:b3:5a:dc:a0:
71:11:e6:29:fd:16:b4:77:0f:81:1a:85:e6:a9:57:
59:c7:36:cb:9e:7e:30:66:b8:23:c3:47:a7:97:31:
5b:06:d1:b5:c6:52:8f:6d:44:aa:11:ac:fb:91:7b:
a7:ea:27:e0:bc:67:1c:5c:7e:72:f9:36:b3:23:30:
16:74:90:1d:48:29:a6:7b:7c:36:0b:50:c1:61:8c:
ed:4e:db:83:3d:42:fd:f1:b7:7a:0f:ff:ce:87:25:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E4:E5:0B:17:72:C5:D9:DF:41:D7:65:6C:98:A1:6B:89:50:25:04
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:04:07:1c:27:fb:f3:6f:c0:27:da:41:c0:ba:0b:8a:39:d2:
41:af:28:bd:f4:03:ac:77:7d:c5:e8:71:37:9f:ec:03:ca:b6:
00:bf:c7:c5:ab:0d:fa:5d:c6:cf:ba:35:11:2d:b5:2f:8b:fd:
33:49:83:29:89:dc:7a:f2:1f:54:c7:30:3a:ed:50:72:ee:a3:
c1:89:dc:cd:c0:80:19:29:ad:cb:e2:cc:8c:ae:ca:6d:0f:e5:
72:65:9f:28:b4:a8:bd:53:d8:4c:84:0c:a8:bd:c6:59:db:4c:
a3:88:ef:ee:d2:94:3f:d4:52:ef:c7:f3:7a:c9:16:11:b7:af:
56:f1:04:95:eb:fb:e0:3e:b2:88:75:33:52:ee:57:41:8c:ea:
79:a4:7a:d1:2a:0e:be:d6:4d:e2:ea:80:6d:06:c0:a4:b3:c1:
33:a2:4a:41:28:55:84:69:c4:e3:fd:46:0a:ea:40:ff:7d:f9:
c6:61:3c:79:32:da:f2:4a:50:8d:d2:2f:56:78:a6:3f:8f:2d:
39:94:7f:23:eb:c4:32:e0:82:5b:c1:6c:49:84:53:b0:cf:87:
63:83:b9:61:05:05:0d:48:80:eb:c3:25:85:79:9f:23:cb:8f:
3c:21:b8:c6:5c:60:33:93:bb:9e:8f:d6:0e:64:c4:d4:bf:85:
bc:29:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:04 2025 by rpki-client