Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
File: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft (raw, json)
Hash identifier: On9SfAlb9g1IbYq8CvqPXOEj1DhFdvj+d1DhudB8Iq4=
Subject key identifier: 5A:2A:77:D7:F5:75:4E:1A:D4:86:F6:31:E1:4C:F3:BC:14:D8:79:C1
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 019850444AB5E34D25667DF4BACC57125E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 09:01:49 +0000
Manifest this update: Mon 28 Jul 2025 09:01:49 +0000
Manifest next update: Tue 29 Jul 2025 09:01:49 +0000
Files and hashes: 1: 16CgswubAdPMVdO4tgEfY5qKNrs.roa (hash: n5RFNLHwGdJjAY6bUd3g0velwE7SisBVqsbQRj3nQN0=)
2: XnHSd3VergE-5i8djUYaPVthHRw.roa (hash: uQ/MzKJnXoMvhw4GTUaONVGqEgrAqEMlJbP8etG5Lic=)
3: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl (hash: OxqimPuM6vpAZRKGY4HfaFyHR2/v85XkU6ItB29h7lU=)
4: rIq_k7twwBEbcOVYDic1qJC6tII.roa (hash: Tg0LY1U/RM7mfyNDRaQJFL93vVjMEcfzKcJNDGxepYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:50:44:4a:b5:e3:4d:25:66:7d:f4:ba:cc:57:12:5e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Jul 28 09:01:49 2025 GMT
Not After : Jul 29 09:01:49 2025 GMT
Subject: CN=5a2a77d7f5754e1ad486f631e14cf3bc14d879c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:43:d8:6d:43:9d:37:d7:5a:7e:83:c5:5a:44:
fc:93:c2:12:78:81:2b:e4:43:1e:7a:04:93:1c:7a:
a0:ff:be:c2:fd:b4:24:97:99:85:cb:0c:e0:4d:5a:
41:7a:ef:7c:bb:63:5d:c7:b7:99:a0:2c:8c:33:b5:
0a:fe:79:34:e9:9f:6b:a4:c9:c5:ce:b6:72:ba:66:
5f:03:74:46:3d:7f:26:4a:83:97:7c:20:f4:5b:92:
34:7f:3d:85:56:c9:78:ce:4a:a1:48:74:bd:9d:0b:
e0:59:b8:f0:fc:e8:48:db:eb:81:58:ce:72:12:19:
e3:8f:06:fc:1c:58:c0:ed:5c:56:50:b2:c3:67:49:
1f:32:8e:b3:91:6d:57:2c:14:bd:0f:26:ee:70:1b:
53:cd:e0:1f:3f:33:58:f0:6c:33:7b:f0:21:4f:bb:
67:75:d4:66:04:62:99:eb:21:16:9c:d8:fa:4e:78:
0d:3d:6d:53:37:9b:f3:17:72:ef:5d:34:ee:d4:9f:
f3:22:f1:d5:1f:99:43:b3:7f:29:e7:05:c5:dc:dd:
cd:33:7c:da:b6:f9:99:a5:ec:9e:33:22:25:91:5b:
46:3c:37:f5:63:16:4c:17:06:9c:f4:26:91:21:eb:
5f:25:0a:2e:f0:7f:af:03:ce:c1:0d:83:0c:da:70:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2A:77:D7:F5:75:4E:1A:D4:86:F6:31:E1:4C:F3:BC:14:D8:79:C1
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:30:e0:c0:62:c6:0f:33:f5:d7:e3:2f:ab:73:90:2a:89:14:
59:77:ed:84:a2:01:71:04:4a:1a:10:ee:00:3e:6b:f5:2e:e7:
35:29:f6:c9:00:54:1e:12:4b:5b:b6:3d:7a:7a:43:f1:dd:9a:
39:d8:4c:21:23:12:b2:95:99:d3:63:d5:fc:a3:9d:26:32:da:
16:31:91:c3:17:3e:81:e6:c8:3f:61:f9:7c:64:2e:bc:01:36:
c2:a5:74:00:67:a2:04:6f:31:d1:65:92:a7:f2:93:bb:bb:bb:
cc:27:c3:e1:8a:e5:c9:65:c1:d1:a3:39:82:6b:af:49:dc:bc:
e0:de:6c:f7:80:88:28:6f:43:aa:02:57:b0:42:70:43:7a:f5:
23:6b:88:e5:99:22:62:c1:08:05:20:97:3d:5a:32:44:5d:6f:
e6:36:78:16:a5:64:93:65:79:14:9c:51:de:89:43:9c:b8:51:
81:94:6a:d9:40:a4:b9:dc:59:40:e2:05:0c:81:f1:18:1e:bb:
e3:36:27:c4:cf:e7:ec:21:70:f0:57:ca:03:85:5e:f5:75:48:
11:94:61:b0:20:79:32:3d:fb:d9:bb:31:af:15:1a:bd:62:d3:
6e:cc:e2:1c:20:23:ad:41:92:13:37:4c:b3:a2:81:2f:87:42:
d9:8a:e8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 15:15:48 2025 by rpki-client