Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
File: qsavDCm-vHxIXPgAHanxmTCs5F0.mft (raw, json)
Hash identifier: LlHybBuMFBZdwAfvoO1bwausEBZgIzIN4aR4WVyU5m8=
Subject key identifier: 2C:C8:A7:5F:FF:CC:F8:59:1C:FE:35:DC:B3:7D:EF:8C:5E:9D:D7:B8
Authority key identifier: AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
Certificate issuer: /CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Certificate serial: 01984965A0582B3BEB3A9BB45C175B378A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:00:53 +0000
Manifest this update: Sun 27 Jul 2025 01:00:53 +0000
Manifest next update: Mon 28 Jul 2025 01:00:53 +0000
Files and hashes: 1: 6fJ4zkF0Wp752Gh82PiGV0cycFs.roa (hash: zmN/ZdPf9fmMKW0I3LZoD4w3jrap740/mP6rHx2Dkzc=)
2: qsavDCm-vHxIXPgAHanxmTCs5F0.crl (hash: CK/3AFg0Vl0+2va55I7Bx0IJPbtfidD5K1y+FjqxmB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a0:58:2b:3b:eb:3a:9b:b4:5c:17:5b:37:8a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac6af0c29bebc7c485cf8001da9f19930ace45d
Validity
Not Before: Jul 27 01:00:53 2025 GMT
Not After : Jul 28 01:00:53 2025 GMT
Subject: CN=2cc8a75fffccf8591cfe35dcb37def8c5e9dd7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:7c:7d:e8:48:d8:68:9c:66:86:5a:b0:b6:
de:63:0f:52:de:1f:d5:b7:26:b5:5a:a1:e7:6b:ba:
6c:9c:62:d7:32:47:00:51:5a:74:59:19:d9:0a:4b:
2f:a2:ca:e7:eb:f8:f0:ea:95:6f:fe:f5:44:0d:34:
6d:36:73:d5:4a:23:88:1d:b7:19:cf:f6:a3:d8:ca:
24:e4:a7:df:e2:04:b8:00:e5:7b:36:b9:ee:2e:6f:
45:a8:f2:37:30:8f:72:fc:58:6c:bc:96:f2:60:78:
d8:5e:d3:d9:f1:2b:1f:1f:dc:20:f1:94:ea:8b:f8:
f8:12:db:1b:fd:ea:9c:17:ac:18:0f:8a:11:0a:83:
4d:50:da:db:7f:91:3b:be:33:f7:c9:24:d2:c1:15:
18:d8:ba:93:b5:05:79:83:2d:6f:b8:1d:e4:d6:44:
57:23:27:58:1c:57:d6:8c:ba:09:bc:c3:24:67:3d:
4d:e9:f5:7d:9c:d2:3e:5c:ff:76:9f:71:9b:e8:41:
33:c6:27:b7:3e:e4:b8:23:da:8f:62:5c:52:09:83:
21:4e:6c:f1:f7:ec:6b:09:c7:fa:08:f1:18:7d:86:
62:e3:dc:7a:40:03:c8:9e:c0:9a:a6:b3:56:c7:cb:
10:c7:e5:bf:57:7a:46:1a:ff:2a:b5:50:c5:fe:a4:
74:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C8:A7:5F:FF:CC:F8:59:1C:FE:35:DC:B3:7D:EF:8C:5E:9D:D7:B8
X509v3 Authority Key Identifier:
keyid:AA:C6:AF:0C:29:BE:BC:7C:48:5C:F8:00:1D:A9:F1:99:30:AC:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsavDCm-vHxIXPgAHanxmTCs5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f8c445-0aab-4087-a0d3-9347591910a8/1/qsavDCm-vHxIXPgAHanxmTCs5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:94:06:07:0e:53:77:8b:7b:c1:6d:f9:8d:bd:3d:51:95:0f:
70:9d:59:05:00:1f:14:c3:27:f8:e3:43:3d:f7:a3:63:2d:2c:
de:29:17:24:19:bd:e2:eb:28:a7:f0:9e:f4:eb:28:5a:e4:84:
22:fb:76:f3:b2:34:4a:1b:a4:cd:0e:99:79:94:e9:39:db:86:
46:f6:a5:dc:65:77:15:e0:45:08:86:92:74:46:dc:f6:74:6d:
ac:c7:d6:bb:cd:87:1f:d3:94:3d:e3:5e:aa:13:32:aa:cc:be:
9d:61:63:2b:03:64:51:c0:33:71:c9:dc:ff:8c:10:f9:64:ba:
ab:03:bf:b2:99:7d:22:5e:7a:24:56:00:cf:4c:aa:1f:96:b2:
06:50:42:9b:a8:4c:18:87:a4:45:96:b6:d2:62:9b:48:41:e0:
2f:65:28:aa:33:a2:0c:16:78:9f:bf:63:cd:ae:c1:42:6c:e5:
74:61:06:db:10:91:0b:1d:2a:38:f6:97:ae:05:7e:6b:b9:51:
5f:07:57:12:30:41:4c:92:82:0c:ac:4c:b1:e6:62:05:ed:28:
f4:de:a2:03:c5:4e:51:a0:e1:d6:59:65:1d:d1:10:fe:34:48:
3e:78:9d:36:92:8d:49:f7:4f:7e:75:d6:a1:c5:0a:f0:83:c3:
42:d1:43:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:42:03 2025 by rpki-client