Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
File: qQ2awu8R1UaTddbebGv3IRKeO3E.mft (raw, json)
Hash identifier: NgMug2C2SvBxBLkkjlgtaFKg25c6GHuC2qGn73JTLxc=
Subject key identifier: 3D:AA:99:EC:20:1C:47:C8:B2:8E:6F:FD:77:74:EC:48:79:6C:46:C6
Authority key identifier: A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
Certificate issuer: /CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Certificate serial: 01984A77FFA219A35231FD280175FE143C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
Manifest number: 1541
Signing time: Sun 27 Jul 2025 06:00:34 +0000
Manifest this update: Sun 27 Jul 2025 06:00:34 +0000
Manifest next update: Mon 28 Jul 2025 06:00:34 +0000
Files and hashes: 1: qQ2awu8R1UaTddbebGv3IRKeO3E.crl (hash: FWRs9eCBGuZURIirWhjFtzq0agzJr+tNd0K0tkcz940=)
2: yuW5WVwgNaxBxObKx0w_CE3bdf0.roa (hash: bxzeDx/FJJDZscd0BPoaz8SHe0rmx/Qll6/QwchRolI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:ff:a2:19:a3:52:31:fd:28:01:75:fe:14:3c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90d9ac2ef11d5469375d6de6c6bf721129e3b71
Validity
Not Before: Jul 27 06:00:34 2025 GMT
Not After : Jul 28 06:00:34 2025 GMT
Subject: CN=3daa99ec201c47c8b28e6ffd7774ec48796c46c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:92:bc:2c:db:4f:29:90:88:cf:60:fe:77:
1c:a3:a3:05:ae:38:34:c9:ed:88:74:03:f0:3e:38:
86:65:cd:ad:cf:9a:c8:b7:9b:f3:7c:c5:a8:e2:7b:
2b:ae:98:18:d0:da:ff:3b:a4:61:90:3c:29:5a:6b:
9e:74:42:df:33:14:c8:fd:8c:d0:4b:31:fb:f4:a9:
82:dc:d8:23:ac:70:02:54:ae:21:a6:7a:93:da:59:
b9:27:05:d9:87:8b:4e:2e:12:ea:e4:8a:7e:ea:54:
e1:34:6c:b1:f8:5c:17:e1:ab:28:0e:b9:85:0c:81:
34:10:97:71:87:cb:cb:36:95:c1:62:fc:36:c4:48:
2f:f0:98:47:10:17:ea:62:6d:df:70:f5:41:8b:55:
7c:38:64:63:a9:ef:14:bd:76:90:92:12:58:34:c8:
dd:37:db:43:81:7f:0b:e7:e5:90:e7:df:3d:a4:00:
0e:4c:a2:99:1d:80:7a:91:8c:73:d4:32:e2:cf:11:
6b:18:26:ef:c0:a5:f2:cc:f2:b9:74:57:e6:22:e0:
40:96:93:21:b3:30:67:a7:e3:7e:ae:3a:30:f6:50:
dc:96:ac:36:e9:f4:7a:ec:86:a8:4c:4d:88:6f:8c:
73:e3:dc:ab:de:21:9f:42:a8:ed:a4:0b:4f:c9:04:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:99:EC:20:1C:47:C8:B2:8E:6F:FD:77:74:EC:48:79:6C:46:C6
X509v3 Authority Key Identifier:
keyid:A9:0D:9A:C2:EF:11:D5:46:93:75:D6:DE:6C:6B:F7:21:12:9E:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ2awu8R1UaTddbebGv3IRKeO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/59c24e-a21f-46b2-9ea1-b3a6707ead04/1/qQ2awu8R1UaTddbebGv3IRKeO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e9:37:01:04:79:65:4b:76:e5:46:90:3f:6f:e7:cc:32:2c:
b5:34:0d:67:6d:39:aa:5e:15:cb:b4:53:dc:09:32:2b:65:b7:
a1:c3:d0:ac:be:bb:a2:1a:e2:ea:24:59:0d:87:22:f4:3c:a7:
b3:b3:f1:bc:12:8c:cd:f9:08:e8:36:c8:34:27:0b:8f:78:a3:
bf:7d:a8:8c:65:50:61:d3:ce:a8:7b:ef:83:c6:f1:c7:f1:7d:
2d:6d:8a:11:21:87:68:3c:de:2e:45:3d:ae:48:56:15:29:22:
77:f5:e5:9b:d8:35:8a:0d:fc:43:9c:68:ef:a9:06:0b:26:a9:
08:58:7a:fe:24:c0:27:73:c2:88:27:81:3a:28:e7:e1:f9:d3:
c3:05:93:32:91:5f:af:19:6b:43:c6:bd:74:46:58:a9:52:67:
49:d6:8d:d9:8c:57:49:48:81:5f:04:37:a9:96:c4:4a:77:cb:
24:42:ad:af:60:ae:ef:7c:eb:bc:3c:33:74:54:07:bb:df:29:
97:f5:8f:fe:58:a3:6c:29:3d:a7:4b:13:c6:56:64:79:ee:5c:
53:2c:78:27:50:e4:af:b6:90:03:a5:2b:9d:16:8c:7d:16:f4:
e7:26:60:5d:fa:79:93:26:9a:ec:c2:8a:ba:bd:7a:4f:35:b5:
62:3b:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:35:38 2025 by rpki-client