Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
File: qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft (raw, json)
Hash identifier: Fql/1ygup3A/xlo8R11GGuuL/z2/RMM5C6W6wi9ih2U=
Subject key identifier: 17:12:79:79:16:64:11:2B:24:DA:59:75:58:D3:4D:4B:A6:F2:9C:38
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 0198654B38486FFAAED9B18AA51A9170606B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
Manifest number: 0112
Signing time: Fri 01 Aug 2025 11:01:24 +0000
Manifest this update: Fri 01 Aug 2025 11:01:24 +0000
Manifest next update: Sat 02 Aug 2025 11:01:24 +0000
Files and hashes: 1: 9WCFSNeq3GtWGYrTEMgi1QZ4iF8.roa (hash: i8Np1BwcEIXM1Wv7P+uy0k4NCLXiOZxbaT5Q37bgBvA=)
2: YRj1iGRVMCy4RNf6mBvaYvGJnIA.roa (hash: Jm8MJr8XSRnuve3Kq6+Wn+2PsgepRbJEnsM8Cooldhs=)
3: qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl (hash: cm2kCxLa1VU1DC/kG7scaQleTJIxYLKmm/LRRzn8wqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:65:4b:38:48:6f:fa:ae:d9:b1:8a:a5:1a:91:70:60:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Aug 1 11:01:24 2025 GMT
Not After : Aug 2 11:01:24 2025 GMT
Subject: CN=171279791664112b24da597558d34d4ba6f29c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:d6:81:43:b5:1a:b0:16:ea:64:1c:3f:87:
ae:5a:b1:10:e8:7a:33:f6:2c:41:47:60:15:c4:dc:
ce:b8:97:98:e0:18:50:2e:0c:d9:c3:f8:aa:20:ef:
5f:df:bf:de:3d:9a:55:94:29:42:7a:0c:88:9f:5a:
c4:18:c1:60:fe:a5:7a:44:95:db:09:ad:f3:ae:6a:
d4:93:95:64:e0:49:91:38:1a:b0:06:2b:f6:9b:7c:
50:5b:05:53:67:11:47:a2:15:2d:84:4f:80:a0:95:
cd:40:02:c9:2c:89:13:8d:ff:9e:61:ba:62:11:ed:
8b:9e:24:dd:60:42:e0:d9:1a:b6:32:15:dc:68:e9:
83:04:29:33:82:b5:a2:d1:69:da:b7:4b:35:81:47:
4c:7f:25:07:40:fb:98:67:f4:51:80:93:de:94:da:
66:55:be:17:48:56:79:10:46:31:91:b9:b3:11:69:
c1:81:b5:f9:3f:53:60:99:26:92:fa:58:3d:27:50:
3e:3c:24:4d:bb:f1:c3:c9:83:45:16:81:30:3e:5a:
5f:43:ce:5f:5b:c2:49:6f:dd:b1:3a:c9:67:67:fa:
d7:6b:32:27:70:cb:39:1b:68:5f:07:79:3e:36:eb:
1f:8f:23:e1:85:64:0e:cb:4f:3a:30:ef:4e:7c:81:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:79:79:16:64:11:2B:24:DA:59:75:58:D3:4D:4B:A6:F2:9C:38
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:11:0c:82:43:ad:b2:da:1f:5a:de:34:e7:b9:25:21:23:2d:
23:3f:3d:73:38:af:94:47:0b:2f:b3:e0:d5:b7:68:4e:19:1e:
94:49:5a:87:41:50:16:05:02:ef:79:d2:15:d9:6e:36:c6:4d:
d8:e3:c8:9c:e6:a0:db:d8:8a:04:86:b4:9c:6d:a7:4f:fa:c1:
72:cd:8d:f2:2f:24:68:16:21:53:70:7f:55:3f:d1:4f:32:36:
e6:dd:11:d3:aa:5d:b3:67:6b:6b:70:10:f5:0a:e0:e7:03:d9:
ac:ce:3a:d3:17:b8:1b:2d:14:1e:65:e6:85:93:5e:5b:1a:27:
4b:bf:4d:2e:98:15:13:b7:2d:c9:b6:b5:aa:fd:0a:ea:cf:ef:
a3:6c:61:55:0f:f4:7b:e9:a6:a5:80:dc:bf:0b:18:74:3b:fa:
4c:66:79:71:a8:0c:37:a7:c5:5e:6e:c5:10:e1:d9:c4:b9:23:
c2:5d:71:93:2b:55:79:88:88:10:df:50:a4:17:05:31:a0:81:
4d:1d:f1:07:45:eb:1a:d4:84:29:9c:4d:ec:02:3f:c2:81:8c:
02:8a:be:39:1d:fe:dc:7c:00:b2:2e:1e:49:82:5d:6a:0b:f0:
8c:ac:03:be:ef:be:9f:71:dc:b4:bc:79:6e:ca:78:0e:b3:3f:
fe:44:68:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:15:52 2025 by rpki-client