Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier: MMJ1GYbWDUCkJRFghJAg9aTeuiUGF29dG2VTWVc68Yo=
Subject key identifier: 2E:5C:4E:37:D7:1E:77:82:4D:8E:1E:AC:31:BF:20:4C:D1:72:AB:DA
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 01984965E2CB048258BECF8E9E491C0318FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:01:10 +0000
Manifest this update: Sun 27 Jul 2025 01:01:10 +0000
Manifest next update: Mon 28 Jul 2025 01:01:10 +0000
Files and hashes: 1: nEGj30N7Wbasb6AnvF-74ldwKOw.roa (hash: 4FClR6vcMY2SCJnOebSa9NEF0JcRgbJiRCF7Wp1Q7zQ=)
2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: B8VeRmUHMh3pJdSVsdtd7RqEFFy9qTSz+vDzG9umVtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e2:cb:04:82:58:be:cf:8e:9e:49:1c:03:18:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: Jul 27 01:01:10 2025 GMT
Not After : Jul 28 01:01:10 2025 GMT
Subject: CN=2e5c4e37d71e77824d8e1eac31bf204cd172abda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:d3:c3:a1:15:02:2e:e7:84:8c:19:3a:b5:
75:8d:70:01:f0:9a:0f:0f:6a:bc:4c:e8:b0:45:f2:
b1:68:6f:13:97:49:a7:2a:9d:4a:f4:b1:77:3e:b1:
e2:63:9b:cd:b0:29:2d:03:ea:e3:4d:ba:c3:61:12:
a3:55:a9:de:7d:1d:03:68:ac:5d:7d:57:10:f6:5f:
1c:ea:30:24:ed:97:32:00:bc:86:34:50:f4:41:ab:
2b:4a:e4:3f:47:7c:a9:49:1d:2f:92:0d:20:fa:cc:
e2:74:66:b5:1b:c0:62:27:8e:c2:9c:c4:33:be:a6:
fc:8c:41:63:5c:92:d5:b6:e6:9f:1a:bd:94:ea:a2:
c4:60:ac:68:df:fa:2b:f1:81:15:e7:62:da:ad:57:
63:52:d3:cd:29:79:77:95:65:c4:e1:3d:47:df:5b:
9d:a6:03:fa:25:a8:91:e8:4c:b6:5a:31:4f:92:ef:
f0:d6:eb:af:1f:d2:c4:b8:5f:a3:25:6e:a2:36:05:
57:1e:43:b2:4c:6b:ba:44:6f:df:28:e8:b1:c4:e7:
03:1f:8c:86:33:a1:38:e2:4d:61:c9:69:b5:20:a6:
ce:73:f7:08:18:9b:92:ab:e5:64:89:9f:93:86:bc:
78:78:56:94:52:54:45:98:13:4f:5e:88:62:e2:4a:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:4E:37:D7:1E:77:82:4D:8E:1E:AC:31:BF:20:4C:D1:72:AB:DA
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9d:cb:4e:a3:5d:31:94:ae:51:3b:c2:96:e7:47:1f:f9:ae:
34:b2:80:45:99:0b:b8:a2:17:d3:8f:ba:fe:b1:27:a7:16:7b:
41:b8:5f:7c:9d:8c:62:e0:1c:a9:97:19:62:3c:b8:8a:c5:4a:
40:0b:cf:93:4f:d9:78:01:8f:46:83:81:a4:e3:ca:f8:0b:34:
df:bd:e1:4f:38:0f:48:60:b7:70:52:70:61:94:1c:0a:26:1e:
80:f4:80:f9:e9:91:6b:29:cd:4b:57:54:36:75:38:6a:68:49:
2a:6e:05:4e:c8:61:25:24:72:e8:e4:fe:2e:ca:d6:ac:ea:1d:
84:c5:7c:75:65:ee:69:60:62:ee:7e:1c:c3:22:0c:1b:3b:bc:
d2:ff:cd:99:92:36:46:89:4c:2a:ce:b1:38:7a:ea:7b:63:6a:
9f:ca:29:b6:3b:40:95:6b:48:06:6d:0b:74:eb:a4:cf:a0:9a:
73:8f:d5:f2:dc:99:b6:9d:f3:c2:85:97:82:16:ac:3b:9f:8a:
8a:b7:4e:91:c1:28:7a:f1:79:1e:03:81:29:bc:37:5b:31:d8:
71:34:e3:75:65:83:ac:49:61:92:c7:2a:9d:35:3c:73:92:0a:
1b:33:dd:ad:3b:39:4c:21:36:0c:cc:c6:2d:36:1c:c0:fd:ea:
a9:92:b5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 03:19:56 2025 by rpki-client