Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: xxhxsOBAgAGlG2OtLM/jDiclo9ufi/UXo043LWJIfsM=
Subject key identifier: 9A:93:4E:64:44:E2:2C:08:26:8A:FD:8A:1E:4B:8D:8E:6C:BC:0E:C7
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 0198499BE2C02080B468DC1143442BF17DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 087C
Signing time: Sun 27 Jul 2025 02:00:09 +0000
Manifest this update: Sun 27 Jul 2025 02:00:09 +0000
Manifest next update: Mon 28 Jul 2025 02:00:09 +0000
Files and hashes: 1: Eax-YG047Te5n0m45RUjhbrR1oI.roa (hash: iDlk1T+vVuMTMOmIBdx2Kl0rk1EldiQCxibfcQYd5i0=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: bC3qfj8oPRztE2JfLZnJpd61lDKYjOvcM7xK61Cxb+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:e2:c0:20:80:b4:68:dc:11:43:44:2b:f1:7d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Jul 27 02:00:09 2025 GMT
Not After : Jul 28 02:00:09 2025 GMT
Subject: CN=9a934e6444e22c08268afd8a1e4b8d8e6cbc0ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:bb:ae:63:55:36:e0:21:31:80:ec:56:c2:
2f:2d:cb:a6:09:bb:e0:2d:f0:ec:f2:76:b8:90:77:
5e:f3:89:05:9c:02:d6:e7:39:7f:a8:ad:32:e1:c2:
1e:9a:de:f3:c8:fd:c2:d7:b3:ea:d6:42:cb:79:38:
3d:89:12:08:2f:a8:60:33:6c:e6:43:20:4f:82:8e:
62:fc:ac:eb:83:79:4f:f0:a1:8d:8c:26:66:6c:76:
50:c7:54:7a:89:d9:3e:21:d6:62:48:e2:1c:78:46:
21:84:11:7c:09:1d:ec:be:a2:33:05:08:13:1a:bb:
e6:29:68:12:87:4a:a7:f2:24:e1:9c:85:08:01:30:
70:ad:21:ef:bb:0e:c7:db:7f:3f:5e:d5:aa:87:58:
52:75:8f:56:c8:37:6d:0f:7f:a2:b2:78:ff:68:e5:
36:07:ad:c9:5a:c8:a8:99:cc:71:ff:2e:15:1c:3c:
ab:77:81:68:31:9f:d0:b4:94:61:20:42:75:6e:59:
80:ef:dd:be:fc:2c:91:60:60:c0:e4:a2:d5:4f:74:
b0:d2:35:c0:65:c0:49:20:70:e3:c0:e6:c1:69:0a:
a4:e3:0a:f0:93:6a:51:26:1f:53:18:24:1c:82:d7:
de:c9:2e:c3:a5:79:b2:f1:5d:cc:9e:5b:9a:52:8c:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:93:4E:64:44:E2:2C:08:26:8A:FD:8A:1E:4B:8D:8E:6C:BC:0E:C7
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:28:70:26:5e:80:ac:04:d7:d2:1a:04:64:b6:b4:04:1a:e1:
0d:58:c0:3c:01:21:94:f5:4c:45:e5:d0:43:8f:09:54:33:5e:
f2:23:1c:3d:63:23:61:bf:62:d7:53:9c:51:ed:02:68:9b:2a:
df:12:c9:80:78:f9:8b:e2:ad:62:f6:a4:ef:bf:fd:96:a3:ba:
16:2d:ed:39:17:0f:e2:47:f3:87:7b:e1:1e:5e:0d:fb:aa:db:
b2:95:1d:bf:f8:db:72:b5:38:88:52:cf:4d:dc:6f:83:86:b4:
5d:f6:33:e0:a3:f8:ab:07:71:32:a3:ff:db:0c:4b:bb:b9:8e:
a6:e9:fa:b7:66:b8:e2:e7:0e:50:91:21:ab:e7:ae:cb:29:65:
d6:06:57:fa:cb:34:fa:2a:9a:46:d6:02:b7:6f:bf:8a:ab:66:
2c:18:3d:70:c2:ad:33:af:7a:fd:02:ad:c5:c6:c1:51:8a:c8:
b8:6c:91:ec:c4:c5:82:73:5a:b9:6f:a8:66:34:a1:4f:8a:85:
ab:93:4c:4c:c1:d4:a0:89:f1:11:f5:d7:30:5b:f6:87:ac:97:
0a:79:09:7b:ea:54:54:65:88:dc:7d:cb:87:31:ec:3d:6c:87:
4a:0a:f4:a6:9c:7d:17:87:39:0b:79:c9:40:0d:68:2d:25:77:
00:5a:9d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:48 2025 by rpki-client