Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
File: qpoWTGVkErfar66FccxnnMb1h9A.mft (raw, json)
Hash identifier: ehQI4bjy6a8vg+WX4X9fY3Pi8T/2Oq/xsB15wzt0Vuc=
Subject key identifier: F2:0D:72:79:E9:EB:72:AC:46:1F:15:DC:85:3C:3C:D5:AC:79:C1:BE
Authority key identifier: AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
Certificate issuer: /CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Certificate serial: 01984776F8E4651E40D981B13A109304321C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 16:00:35 +0000
Manifest this update: Sat 26 Jul 2025 16:00:35 +0000
Manifest next update: Sun 27 Jul 2025 16:00:35 +0000
Files and hashes: 1: VnsTdGec-3pHRJVLeuucM8lE74g.roa (hash: VZlx25MKWdF5CVCWwcXrJ37GBCTfmMAe38xqZnEYBGw=)
2: _1ATULCZ98sbSKA4UnZIqchgnFI.roa (hash: dqzQIeMxGMrNSZ+FakLTrNvjbHnx3VcQtBASfsN8WNM=)
3: qpoWTGVkErfar66FccxnnMb1h9A.crl (hash: 0gbTQg3wpxDXQt2MlcCh2xACwgUUZcUwF6OQ3EHU9hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:f8:e4:65:1e:40:d9:81:b1:3a:10:93:04:32:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9a164c656412b7daafae8571cc679cc6f587d0
Validity
Not Before: Jul 26 16:00:35 2025 GMT
Not After : Jul 27 16:00:35 2025 GMT
Subject: CN=f20d7279e9eb72ac461f15dc853c3cd5ac79c1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:94:86:c4:01:f7:2d:d8:0e:62:d4:a7:1e:
1d:1e:bb:75:7d:fe:d1:75:a5:cd:31:ee:56:31:1b:
ac:78:9b:28:87:de:a3:e7:97:13:ca:5e:1c:ab:33:
a4:ba:b0:48:d8:39:0b:9b:c1:e1:1f:fe:63:1b:6f:
ee:56:10:15:98:85:f6:2a:69:eb:6e:ee:e7:70:03:
96:d3:ed:ac:7d:b5:83:be:92:de:6b:4e:bf:fe:5a:
b0:38:fd:ba:14:3b:b9:0e:61:c8:ac:27:a1:a3:4e:
c7:c1:41:bd:9e:12:f1:0a:c5:13:82:05:be:10:56:
f3:d7:c2:c7:6a:1a:64:31:ff:30:4e:6d:66:35:12:
8e:8e:3a:5b:97:fc:4a:df:9b:75:60:3a:d4:f2:85:
31:b4:51:f0:aa:17:67:63:20:d3:bf:54:3d:90:5b:
d9:07:91:4e:b4:a3:01:06:e8:c3:8c:c5:87:7e:ed:
5f:67:b8:07:8f:d0:68:a7:14:d5:ee:7d:cd:5a:22:
5e:9b:4c:19:b2:12:1c:89:e5:b3:71:e5:65:d3:e1:
8b:c0:54:06:a0:d7:c5:b6:43:33:7e:bb:55:c4:3e:
92:05:fe:b9:05:82:ec:46:28:3b:7b:28:58:c8:d6:
d7:d0:64:df:67:33:f2:31:a2:2b:89:e7:39:32:12:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:72:79:E9:EB:72:AC:46:1F:15:DC:85:3C:3C:D5:AC:79:C1:BE
X509v3 Authority Key Identifier:
keyid:AA:9A:16:4C:65:64:12:B7:DA:AF:AE:85:71:CC:67:9C:C6:F5:87:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpoWTGVkErfar66FccxnnMb1h9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/afda9a-6630-4a9f-b522-28829c03c69a/1/qpoWTGVkErfar66FccxnnMb1h9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b4:a7:1e:1d:fe:8c:cb:98:b2:56:e9:91:9c:9e:df:f9:d4:
8e:3e:4f:05:80:a0:0d:46:60:c4:9e:2d:ab:af:e9:70:7f:11:
a8:f2:2f:c4:8f:b2:b1:5a:d4:8c:57:bc:13:a8:1b:08:09:6d:
06:29:52:1f:a7:a9:b4:3f:97:a8:ae:32:e5:a9:81:88:a1:d9:
c1:2b:31:23:e3:d1:38:84:5e:1b:2d:c5:a7:cb:b1:e2:3d:16:
97:bc:b4:0d:2d:19:41:0d:0f:96:0b:e8:98:9e:1a:5e:2b:7c:
e0:48:8e:04:80:39:8f:91:39:f7:bf:db:85:41:7d:f6:a2:9f:
01:81:23:3e:d8:4e:65:02:54:07:c9:4b:a9:c9:6b:6b:c2:27:
f4:66:a1:b1:55:25:04:e7:dd:73:18:47:8e:f6:16:3a:c3:93:
68:25:3a:f6:b5:71:b2:49:43:6d:06:f4:7b:4c:43:cb:80:05:
83:dd:96:19:12:0b:3b:ac:ab:38:bb:5d:ed:c3:83:16:e6:67:
55:58:60:89:77:d1:a0:32:ea:ad:bb:22:4c:e2:03:38:be:f4:
55:e3:54:a9:da:f4:0f:e5:43:90:ac:8b:b8:79:96:28:30:30:
c0:f7:18:f4:e5:53:4e:2b:09:81:68:44:d5:a3:0e:a0:89:69:
01:3b:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:57:24 2025 by rpki-client