Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
File: qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft (raw, json)
Hash identifier: +KokpfkQFRESM5gSECl8v9q0yRn2i8SAf7Kwiw7jKZA=
Subject key identifier: 77:58:08:F6:6F:7A:80:14:19:E4:51:24:39:FE:7A:C1:F8:56:2D:9F
Authority key identifier: A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
Certificate issuer: /CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Certificate serial: 019849D399AA00C108E7A0A4F60DED8D1B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
Manifest number: 1461
Signing time: Sun 27 Jul 2025 03:01:00 +0000
Manifest this update: Sun 27 Jul 2025 03:01:00 +0000
Manifest next update: Mon 28 Jul 2025 03:01:00 +0000
Files and hashes: 1: bqwyrPoxmVXRueWqADmdY3mrGG0.roa (hash: DoTBiSo5d9SpNBc99v9ttgOOUKnC5aTKUP1YPPWUSbU=)
2: qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl (hash: 8pqX/aU+MbQrnb55evhAtBzZLSLkOc6DNgefAfy9bOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:99:aa:00:c1:08:e7:a0:a4:f6:0d:ed:8d:1b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d29f703b8ec8e93ca48405dee4730eed93c6b2
Validity
Not Before: Jul 27 03:01:00 2025 GMT
Not After : Jul 28 03:01:00 2025 GMT
Subject: CN=775808f66f7a801419e4512439fe7ac1f8562d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:e0:f8:d1:b3:03:5f:93:10:cd:55:ae:80:
5b:d7:48:4f:d7:93:5a:f9:4e:a5:31:d1:c7:45:55:
5b:8e:e1:3c:2f:80:0d:6a:f3:52:8e:ee:c5:3b:99:
23:39:ee:86:02:8a:0b:53:90:40:b3:d9:de:9a:73:
a1:2f:a5:fd:fc:d5:53:a1:0f:d9:af:f3:de:57:f3:
1a:d1:e4:fc:e9:b5:1e:9f:99:b0:e1:46:95:09:aa:
c6:fb:5a:8f:7e:4b:a8:64:3e:5f:27:69:86:4b:de:
37:29:75:81:78:f9:b7:18:e9:21:8b:cc:17:e7:9c:
6e:22:48:4b:a8:51:c5:99:6d:00:cd:fb:46:ee:de:
94:ad:fc:71:6c:dc:03:67:e2:93:01:92:14:a5:61:
4e:e2:65:f6:10:49:43:4e:bd:21:95:13:f2:10:f3:
49:dd:a0:74:c1:b7:17:be:b1:f1:94:43:1f:1d:6f:
44:2f:81:71:de:19:17:81:40:cc:94:e1:ea:56:dc:
72:87:49:16:f4:19:8c:26:78:5e:6f:77:66:f3:01:
1b:c0:ba:a8:28:c6:97:3d:dc:5a:f4:c5:30:d6:8b:
7a:c3:c9:56:95:06:f5:3b:e3:a1:30:f7:df:00:31:
72:95:de:03:51:cc:54:2a:ee:1d:05:df:dc:16:cb:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:58:08:F6:6F:7A:80:14:19:E4:51:24:39:FE:7A:C1:F8:56:2D:9F
X509v3 Authority Key Identifier:
keyid:A9:D2:9F:70:3B:8E:C8:E9:3C:A4:84:05:DE:E4:73:0E:ED:93:C6:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdKfcDuOyOk8pIQF3uRzDu2TxrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ab96f-093e-4c52-bf9b-52e151f42c23/1/qdKfcDuOyOk8pIQF3uRzDu2TxrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:36:02:7f:4a:89:82:3f:38:c3:6a:61:b5:39:b5:7b:73:e5:
8c:40:62:19:4b:41:53:5b:6c:b3:fd:c7:f2:ad:fe:16:12:15:
2c:f1:5e:3f:16:27:77:3d:70:b4:13:17:69:1f:dc:09:e3:a9:
1b:b6:dd:9e:35:a9:39:96:25:75:fb:a1:0a:3f:f8:6f:d3:65:
7a:bc:43:cc:f0:25:ec:76:a8:c2:5a:6b:0c:34:c2:92:73:7d:
49:ee:26:50:ef:d5:fb:bb:a1:e4:d7:4f:d1:30:31:4a:e8:95:
93:7c:da:95:58:bf:1f:07:ea:36:3c:84:94:2c:85:85:ed:56:
d5:fe:78:9d:c1:63:11:32:2e:9a:a8:09:12:02:b5:d6:8b:28:
e9:0c:4d:e0:5c:b4:9a:4b:97:78:91:ea:49:59:6d:ff:ad:8f:
5d:f1:c8:7a:d9:e9:06:e8:54:a7:04:45:fb:e6:7b:fd:fa:2b:
70:57:80:cb:c7:8d:45:68:db:87:87:1a:e4:3b:ec:13:6e:a3:
96:9a:8d:b5:4b:78:67:ce:bb:ec:60:c1:a1:7c:70:3a:47:cb:
57:c3:f9:b2:b8:ba:3a:fe:5e:93:f9:e7:10:d9:80:5a:ce:ec:
d5:3e:8b:63:5f:78:03:bc:8d:47:f9:22:6a:5e:f2:34:c2:32:
da:c3:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:47 2025 by rpki-client