Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: b4/L3U8eHjwVwtFS9y1BkNDKB/lgBMjGh3S0YGEZWGI=
Subject key identifier: 6B:EC:8B:98:3E:04:75:1D:DE:72:A5:08:EA:8B:A7:E9:64:AD:E5:CF
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 01984966089C3AADBED3D350C797668859D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 01:01:20 +0000
Manifest this update: Sun 27 Jul 2025 01:01:20 +0000
Manifest next update: Mon 28 Jul 2025 01:01:20 +0000
Files and hashes: 1: Fxqjt6X76bxQBXWwSZ7TE0DXZ4E.roa (hash: 1w4Y/QhTTxCziVVyNTfr4p7dQVzXdB6YpDvNxykMieU=)
2: Khu0iUVuTs8ZYAwuEt_S3XCnJdE.roa (hash: 0AzGfOb5OfWgiAbeRL3c+g44yXgjZKIdXOkCd1IWoeo=)
3: MwggIWb8xKY_Gmyt-jhjyCB3Knk.roa (hash: 2e03nmncmnuNRXI/WbH4mmPniZO75Z2kJ+MSZTXtduk=)
4: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: pPMh8BRn3bP+pyHJNVIfbEolg707+KN8qeJRw79wxmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:08:9c:3a:ad:be:d3:d3:50:c7:97:66:88:59:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jul 27 01:01:20 2025 GMT
Not After : Jul 28 01:01:20 2025 GMT
Subject: CN=6bec8b983e04751dde72a508ea8ba7e964ade5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:27:45:a2:79:1e:30:c7:1a:b1:e8:68:ca:
b6:1b:32:d6:d4:d1:35:ec:e1:98:29:df:b2:18:15:
ac:26:0f:86:4d:f2:97:6e:18:68:7e:d7:21:7a:32:
d4:f1:51:8a:df:c5:b2:b9:0a:0c:7f:e7:66:f4:2a:
e0:7f:4a:33:7d:f2:61:7f:35:b8:42:31:7d:46:4d:
e4:7e:c7:98:26:d1:74:f4:b3:8d:49:ec:34:dc:ec:
9c:b2:41:60:cd:1c:d3:20:c1:99:93:b1:7e:54:f5:
ba:6a:06:78:3c:b3:f6:b2:27:db:2f:03:7e:97:8c:
7a:fd:2f:83:53:4d:b6:15:de:78:6c:80:d8:01:8b:
e9:43:c0:2b:9b:f8:d0:6d:df:b1:76:dc:c3:88:62:
c1:4b:9d:20:8b:ed:85:9b:80:8a:6b:23:69:94:90:
87:aa:e9:35:c9:2c:5f:ed:51:0a:0a:99:05:45:75:
05:01:a6:cb:2d:d6:a8:92:a0:a3:76:b1:fc:1d:40:
c3:c8:8e:4a:59:83:a7:51:01:40:18:f6:8e:a5:85:
3e:f7:a2:e7:da:5d:6c:d2:67:98:74:e6:42:3b:14:
ae:6d:c3:1a:4f:be:ec:f1:e8:6a:23:0a:90:27:1b:
8d:a6:6f:82:17:0a:b5:1c:4a:71:51:4f:89:c5:1b:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EC:8B:98:3E:04:75:1D:DE:72:A5:08:EA:8B:A7:E9:64:AD:E5:CF
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:56:82:0c:21:aa:8e:06:e2:b7:d7:86:6f:78:7f:f8:8c:50:
24:cd:2b:90:22:9c:25:f5:38:5b:12:9a:8f:f3:8d:2a:29:ac:
57:8e:2b:13:ce:73:43:72:34:cc:19:ec:10:cf:5e:18:bd:08:
28:e3:03:a4:d2:6e:a6:22:b5:e3:ce:4a:96:a7:5a:fc:1b:93:
31:49:3f:d4:38:64:4b:2b:20:2a:ec:b4:01:2c:07:96:5b:86:
d4:38:78:7f:2b:f9:3b:c5:ce:1f:e9:ae:a7:0e:00:e5:f3:4f:
01:22:b3:61:d9:e9:c2:dd:2f:f3:b5:f5:9e:78:78:2c:0d:91:
8e:78:74:64:09:a8:95:99:25:30:7b:33:a6:86:ce:45:19:8e:
ff:8d:8f:24:36:4f:97:a3:11:33:b6:bf:d2:92:54:af:f3:a6:
98:82:2f:02:2b:9d:30:1d:1c:b4:96:81:d6:5c:38:6b:aa:39:
ad:71:ea:79:09:23:d0:c0:01:42:ab:69:85:95:b7:80:66:f1:
95:d5:9b:1d:59:31:06:97:b1:eb:77:7c:d3:5d:ba:26:46:cd:
be:4e:2c:60:57:47:4e:91:c4:82:db:2b:fb:aa:78:21:b4:53:
a3:5a:40:db:a9:28:61:c5:1a:da:ef:36:81:4c:20:25:4a:06:
89:19:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:30 2025 by rpki-client