
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
File: qvIogBSZWTJzeuf5_CJN8QIUElU.mft (raw, json)
Hash identifier: PdckNA2WG8Mvmd5VA9IpxIirlI/5MOXvRFEAiJxAkg0=
Subject key identifier: 51:A4:2B:F2:F3:EB:23:92:97:BA:A9:7F:F9:51:6E:3A:12:CE:60:D5
Authority key identifier: AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
Certificate issuer: /CN=aaf2288014995932737ae7f9fc224df102141255
Certificate serial: 019857C63F248300B48D6AD895C76C56BE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
Manifest number: 1343
Signing time: Tue 29 Jul 2025 20:01:06 +0000
Manifest this update: Tue 29 Jul 2025 20:01:06 +0000
Manifest next update: Wed 30 Jul 2025 20:01:06 +0000
Files and hashes: 1: qvIogBSZWTJzeuf5_CJN8QIUElU.crl (hash: HB70TP4oytdTlZ0gfur6RjcnhWQ3VDnMV4JwFZTmDus=)
2: ssFjFRP8rOyA12qsYqju5Tngnd4.roa (hash: hIS1+X5/5zlmutztUW28Al86ZCC1Pn71/f8lra8GU0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:c6:3f:24:83:00:b4:8d:6a:d8:95:c7:6c:56:be:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf2288014995932737ae7f9fc224df102141255
Validity
Not Before: Jul 29 20:01:06 2025 GMT
Not After : Jul 30 20:01:06 2025 GMT
Subject: CN=51a42bf2f3eb239297baa97ff9516e3a12ce60d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:a5:6d:e5:bb:ee:cc:a3:01:f9:ab:e8:03:
eb:82:26:a1:d9:90:e1:ed:94:8e:bd:87:c8:46:b0:
c6:8b:d9:1f:a1:f4:bb:40:69:8e:29:79:fe:ee:b0:
d1:bc:3a:d4:30:66:d8:46:1c:b1:23:69:0d:be:1a:
03:9d:cb:09:1e:af:57:ee:ea:61:3a:d5:6b:92:83:
08:10:2f:64:bc:97:94:ef:a0:2d:ec:26:e0:d7:59:
a6:c1:6f:71:68:98:0e:89:7b:37:e5:61:6d:b4:6f:
6d:9b:f6:fe:5d:bc:40:3e:92:68:13:d8:b6:78:00:
a0:3f:d5:cd:c9:3c:2c:26:e0:be:74:7b:48:f7:7f:
48:08:b4:08:2a:b2:e7:74:72:fb:9a:51:00:af:ed:
ce:9e:83:1c:08:5c:48:16:30:ff:4d:3a:86:ff:80:
66:0a:94:45:ab:ad:f0:43:8d:bd:46:30:96:4a:1e:
46:2b:9a:89:b1:ff:95:fc:b0:7c:27:95:2d:43:ee:
6a:3f:7e:d6:36:e2:c1:c4:41:63:66:9f:dd:b9:51:
56:12:c5:64:b6:ee:11:24:49:b1:94:01:ae:10:35:
a0:fe:13:24:1a:0c:14:4b:ec:54:eb:4e:a9:fa:bb:
8d:63:be:fc:83:9e:1f:82:19:c8:ea:45:9b:9b:98:
7a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:2B:F2:F3:EB:23:92:97:BA:A9:7F:F9:51:6E:3A:12:CE:60:D5
X509v3 Authority Key Identifier:
keyid:AA:F2:28:80:14:99:59:32:73:7A:E7:F9:FC:22:4D:F1:02:14:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvIogBSZWTJzeuf5_CJN8QIUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/ea0623-36c1-4f3a-bff3-6314b98bda42/1/qvIogBSZWTJzeuf5_CJN8QIUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:98:1c:5d:4b:c3:41:ce:6b:fc:07:d6:5e:64:88:5a:c9:10:
94:8b:56:6a:63:71:a9:6f:15:ea:3a:3d:e5:b2:28:61:97:80:
ab:b7:60:1b:01:5d:ed:ce:b8:88:b7:62:01:07:a9:4b:25:36:
af:69:c0:d0:22:56:5d:39:0b:ad:ec:4a:7a:9b:a8:16:bd:28:
09:e0:1a:d2:89:12:0f:89:7e:0f:e3:22:a2:7d:83:b5:be:c7:
cf:8d:ae:16:3e:67:d5:08:b8:6b:f2:4d:58:2b:dc:09:b1:de:
05:7e:c3:e7:a7:71:96:ff:0b:30:09:9f:51:ad:04:0a:a5:d4:
da:60:2d:f2:af:a3:ff:b2:f2:22:52:5a:cb:35:63:4b:d5:e1:
bc:3e:9b:44:3e:57:5c:f9:4e:d3:3d:94:bc:a3:8f:36:65:9f:
b5:70:db:de:11:d1:e8:c5:f4:a5:d7:33:ac:d9:6b:98:98:b6:
02:8f:c9:38:dc:47:94:aa:6d:07:b6:79:4d:84:20:c8:53:7e:
b2:1e:6d:22:6e:c1:bb:1b:85:f5:e3:0f:2f:e2:fd:c6:eb:70:
13:91:a0:5f:16:8b:fc:de:1e:4c:40:c7:61:6b:8c:65:82:da:
7d:35:ae:91:66:9c:f6:70:6f:2f:57:31:5d:76:d5:48:5f:9e:
07:94:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:42:25 2025 by rpki-client