Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
File: qmWvaX3x9s2vTLvWbePUO-2GnpA.mft (raw, json)
Hash identifier: Lk2ZYFzTCKva+7z4e3pg0qn+euI3z9F15h7eXfpEjIA=
Subject key identifier: 83:C6:64:9D:78:D5:0B:51:DB:72:DA:7D:53:6C:70:B9:8D:DD:D4:64
Authority key identifier: AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90
Certificate issuer: /CN=aa65af697df1f6cdaf4cbbd66de3d43bed869e90
Certificate serial: 01984AAED535E342AD9257EDCA71AE4BB4EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
Manifest number: 0C1E
Signing time: Sun 27 Jul 2025 07:00:28 +0000
Manifest this update: Sun 27 Jul 2025 07:00:28 +0000
Manifest next update: Mon 28 Jul 2025 07:00:28 +0000
Files and hashes: 1: qmWvaX3x9s2vTLvWbePUO-2GnpA.crl (hash: 9HuSGpE9XrHG553VwT6eIydEhx9HfJpT4qMOTnzSIVo=)
2: u25_l7rqpA4jc9Mn9X_nn6jE1D8.roa (hash: XxkiW8kKfa52GpQHHiGBtUNZJLczRvJy5PTfiodYsrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d5:35:e3:42:ad:92:57:ed:ca:71:ae:4b:b4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa65af697df1f6cdaf4cbbd66de3d43bed869e90
Validity
Not Before: Jul 27 07:00:28 2025 GMT
Not After : Jul 28 07:00:28 2025 GMT
Subject: CN=83c6649d78d50b51db72da7d536c70b98dddd464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:23:4d:7a:27:a9:69:86:c6:f9:c3:d8:e7:
8c:5a:d6:ec:85:f5:20:e2:f3:a2:b6:36:7a:6b:d1:
c8:19:0f:59:4a:1f:44:ae:a8:4e:12:45:1b:81:9b:
10:7c:a7:ff:72:25:41:d2:a4:47:99:e3:a9:a0:dd:
61:57:95:15:9f:40:6c:47:2c:5c:c7:2d:e5:44:28:
80:e0:09:09:40:db:26:c3:43:dc:6d:5c:19:39:b5:
f8:af:4f:d0:3d:a2:9f:bf:6f:2d:65:fd:12:fe:f3:
1c:b8:a7:0f:40:1e:1d:d2:d3:ad:30:33:b5:16:0b:
2b:bd:f7:a2:36:de:08:90:73:dc:0c:d7:38:e7:6f:
63:e2:cd:56:2b:10:86:43:50:42:26:43:b2:d0:bf:
ad:0c:6e:54:c3:3f:79:33:d8:55:3e:d0:21:6c:04:
c3:30:80:bd:67:39:91:74:4b:fa:6e:97:fc:f1:f8:
38:57:a5:17:76:64:41:80:8d:fd:85:d8:5a:62:f2:
b3:56:af:62:27:fa:e1:91:32:13:b5:81:9c:0b:9d:
ad:bc:00:3c:c4:d7:af:7f:4b:35:3e:9c:05:07:fc:
2f:d2:9f:d3:98:ca:a1:12:2d:cb:b7:6f:41:61:f2:
a3:14:72:fb:d8:76:63:ed:73:3b:57:53:cd:ff:4c:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C6:64:9D:78:D5:0B:51:DB:72:DA:7D:53:6C:70:B9:8D:DD:D4:64
X509v3 Authority Key Identifier:
keyid:AA:65:AF:69:7D:F1:F6:CD:AF:4C:BB:D6:6D:E3:D4:3B:ED:86:9E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmWvaX3x9s2vTLvWbePUO-2GnpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/04019c-ad17-428d-b3a2-1be13ba8d456/1/qmWvaX3x9s2vTLvWbePUO-2GnpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:45:bd:dc:eb:9d:dd:ad:b4:cc:2f:2b:54:54:9d:b1:6a:16:
03:3f:ba:63:1b:28:cf:7d:19:2c:0f:95:3b:f5:c8:92:05:84:
b4:6c:2c:7f:5e:25:9a:98:13:f9:ac:e1:5d:9f:69:e7:86:e8:
96:7f:f1:38:08:82:72:fa:8f:b8:56:3d:c9:f3:95:01:19:2c:
10:74:f0:f1:35:2a:2a:21:00:0e:04:29:fd:5b:89:13:d6:9c:
20:44:0f:58:ac:8e:cb:64:43:7e:47:10:74:0a:4d:9d:57:04:
f3:76:b9:f7:87:04:ed:64:f4:b8:d7:03:ce:5e:1d:09:a3:92:
f6:2b:1a:5c:eb:8d:15:cf:1b:7b:66:d5:9e:a3:3b:ea:31:ee:
9d:28:29:79:c6:4f:65:52:b6:65:b4:ae:c0:89:7f:50:29:ce:
cc:d6:9b:6c:ed:d6:3b:5a:2d:d4:74:c6:89:02:d3:ee:0d:06:
b4:3a:88:43:89:d2:8d:52:a8:6c:e1:b4:f5:a0:d5:42:55:60:
9c:60:fb:3b:af:99:ff:6e:c4:ba:ff:43:0a:cd:95:c3:d8:62:
b2:b8:86:21:3e:9e:15:61:e4:ab:b2:b8:97:ae:20:8c:fa:70:
01:07:58:8f:be:c0:0b:5c:23:e3:be:e4:7a:29:0f:f2:78:08:
5a:a5:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:02:30 2025 by rpki-client