Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
File: qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft (raw, json)
Hash identifier: vnx9wCl+F1XWDUKV9V3+QQGk25cuBTZpELj70UQsFq0=
Subject key identifier: A6:19:E1:3D:92:1A:33:38:CE:28:B6:E5:55:B6:FC:99:EA:98:6B:61
Authority key identifier: A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
Certificate issuer: /CN=a9a073b31d888e4439e272e007c9532fc305c80d
Certificate serial: 019856EB2F47FDDA0E3C8BDEA921D37D4C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
Manifest number: 0CCA
Signing time: Tue 29 Jul 2025 16:01:50 +0000
Manifest this update: Tue 29 Jul 2025 16:01:50 +0000
Manifest next update: Wed 30 Jul 2025 16:01:50 +0000
Files and hashes: 1: E0nL2r6tA4Kip6utbHVTl2QsGcA.roa (hash: aen5+JQjIiPGZfLBCbBcX/i0rEODfLs98wUB0AIvd0A=)
2: qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl (hash: 9UiExhTDYV+rlKt2P8oGXUzAfpLZDeQ+4+9o5aPahUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:eb:2f:47:fd:da:0e:3c:8b:de:a9:21:d3:7d:4c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a073b31d888e4439e272e007c9532fc305c80d
Validity
Not Before: Jul 29 16:01:50 2025 GMT
Not After : Jul 30 16:01:50 2025 GMT
Subject: CN=a619e13d921a3338ce28b6e555b6fc99ea986b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ec:58:e3:fd:11:c2:cb:57:ab:bc:6a:78:60:
d9:99:86:c6:a5:fe:b4:d0:25:84:97:83:b3:e8:dc:
8f:d3:69:c9:ea:98:e3:d0:0b:f3:be:83:ce:85:38:
2a:ea:08:50:f1:01:b8:d6:6a:cd:1d:c9:69:17:ff:
b1:8a:18:c6:96:fc:2b:7e:1c:be:7a:13:70:31:e9:
60:0a:a8:ec:b8:fa:a3:02:0e:87:96:c6:6b:0f:23:
b9:a4:6e:24:f3:97:8b:ba:de:5c:e5:b3:b4:58:6e:
ea:e5:79:1c:d7:6d:b8:5a:d8:d3:a2:7c:17:95:00:
0a:1d:64:a0:46:85:d2:5d:dc:d0:50:eb:d9:54:5f:
17:9a:12:00:62:4f:33:42:b0:d1:36:17:97:fc:97:
e5:68:59:7b:2f:84:15:e4:53:5d:9b:fb:28:b0:1a:
28:d6:00:b0:3e:14:3c:cb:fa:e0:13:bc:a1:09:f7:
6f:06:5b:3f:c6:1e:52:a1:c8:6f:10:86:79:14:b9:
a1:38:ad:7f:8f:52:bc:c9:1c:70:c7:37:12:ef:13:
77:55:61:6a:06:16:a4:23:ff:9e:69:d9:72:d2:67:
24:76:40:50:8c:65:67:6f:aa:1b:11:fb:f6:c2:75:
6d:4d:3d:0f:70:84:a6:af:a0:56:fc:2a:f5:7b:9a:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:E1:3D:92:1A:33:38:CE:28:B6:E5:55:B6:FC:99:EA:98:6B:61
X509v3 Authority Key Identifier:
keyid:A9:A0:73:B3:1D:88:8E:44:39:E2:72:E0:07:C9:53:2F:C3:05:C8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaBzsx2IjkQ54nLgB8lTL8MFyA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ba3b2f-a289-404e-aef8-4e737e06d290/1/qaBzsx2IjkQ54nLgB8lTL8MFyA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:71:6e:77:78:6e:b9:6d:0f:de:f7:8d:ea:e9:b1:d8:37:37:
09:37:fe:b4:5d:7f:98:28:cc:26:18:47:12:5c:95:69:c1:6f:
11:1d:07:2e:4f:04:57:5c:98:3b:75:20:f2:08:19:73:17:9b:
57:cf:c5:cb:7d:39:cf:9e:9b:8a:3e:c3:33:b7:d2:a5:b5:c8:
da:68:d7:58:bd:16:c8:53:7b:99:19:90:95:6b:ed:95:c1:25:
23:3c:ae:35:e2:e7:36:11:20:86:ef:b4:31:aa:b1:3a:8b:f8:
fb:bb:3e:0b:1d:b8:aa:27:49:f5:75:54:0a:39:a3:61:9f:68:
75:fe:6a:76:74:fe:9c:a3:79:cc:5d:e2:86:3b:94:0e:f3:76:
a8:65:f3:6a:dd:72:5c:91:6e:93:86:6d:66:09:92:20:73:f6:
a2:d8:90:12:02:17:dd:9a:a5:53:40:be:de:f7:df:d9:5f:9e:
b6:e2:48:09:36:9c:6a:1b:35:fe:06:67:05:0d:79:60:d0:33:
a9:8d:45:a7:29:e6:81:7e:aa:78:a5:b7:a1:f5:64:48:30:ef:
13:fd:11:08:73:e2:54:82:27:51:0f:3b:80:40:2d:b0:95:2c:
08:0e:85:64:37:fc:f8:05:9b:80:e3:2c:7a:bc:10:a5:17:bc:
da:7a:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:09 2025 by rpki-client