Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
File: QvGiTID9yjKWRFc65tYcny43Ttg.mft (raw, json)
Hash identifier: rJiPviMXORvuoPLY0OJbHGnmnH+r6Br4i2hX1kd0SA0=
Subject key identifier: 6B:0A:49:A9:E7:1A:96:1A:16:8D:89:B7:19:C3:1A:CB:EC:02:97:EE
Authority key identifier: 42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
Certificate issuer: /CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Certificate serial: 01984AAE8143CCB00F25BA1A84550C538C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 07:00:06 +0000
Manifest this update: Sun 27 Jul 2025 07:00:06 +0000
Manifest next update: Mon 28 Jul 2025 07:00:06 +0000
Files and hashes: 1: I4AtuDZrbSqrgt1jAfNEMLFaaig.roa (hash: 7wTj3H6so/8/7mTO73IV6vt8mViKC1vPmg3wdN+1rZ0=)
2: IAPxu4HRLcUJCMnInPlbG2uB4Mo.roa (hash: UkwEFu/9WcHNWqkhhJVrUVhhQx3PtWZnB4zT5tjJmec=)
3: QvGiTID9yjKWRFc65tYcny43Ttg.crl (hash: dNuMGB/vF6al6QFuYYYPDuTk+mptlrpKA5Xh4KQxDKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:81:43:cc:b0:0f:25:ba:1a:84:55:0c:53:8c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f1a24c80fdca329644573ae6d61c9f2e374ed8
Validity
Not Before: Jul 27 07:00:06 2025 GMT
Not After : Jul 28 07:00:06 2025 GMT
Subject: CN=6b0a49a9e71a961a168d89b719c31acbec0297ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:3b:5d:22:02:3e:e1:29:25:5d:50:37:76:
b0:79:61:5d:3d:ff:e7:a9:af:c8:a9:fc:dd:ff:d3:
10:1a:b4:ef:7c:39:b9:8b:98:b6:1a:33:1f:ff:a2:
f9:23:13:da:09:94:a2:2c:3f:bc:77:65:4d:fb:65:
98:30:ec:c2:6a:ac:51:ef:16:34:20:c4:11:ce:e3:
49:74:d8:00:b9:40:1a:2f:4b:76:ea:5c:3c:14:f0:
f9:7f:a4:3b:e4:0c:59:cb:f3:51:ab:86:fc:0d:f1:
ed:2f:5f:b6:0c:fe:35:b3:3b:28:cb:a5:21:7d:5b:
6d:35:05:88:b2:40:08:1e:81:31:2c:a8:0d:fa:e5:
1c:19:dd:89:fe:e4:27:07:51:57:60:32:a9:e0:75:
0f:9d:44:3f:c4:98:c2:70:5f:da:ea:8a:43:98:81:
36:f5:b0:72:ca:a1:c4:ed:92:ea:85:88:90:45:8b:
22:d4:b4:f7:e6:4a:c5:29:c2:29:6e:d3:8b:1c:7b:
66:3a:66:33:3a:7e:85:f7:22:c6:b0:cd:f0:66:14:
4e:21:f3:e8:cc:e3:04:2e:43:87:b8:ec:54:95:58:
e1:16:47:cf:ed:da:cd:b4:4a:6d:ca:ea:53:cf:09:
33:84:16:57:05:40:25:f2:01:d5:39:81:90:e8:fb:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:49:A9:E7:1A:96:1A:16:8D:89:B7:19:C3:1A:CB:EC:02:97:EE
X509v3 Authority Key Identifier:
keyid:42:F1:A2:4C:80:FD:CA:32:96:44:57:3A:E6:D6:1C:9F:2E:37:4E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvGiTID9yjKWRFc65tYcny43Ttg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fed92a-2120-4326-a0c9-7168ae0b8278/1/QvGiTID9yjKWRFc65tYcny43Ttg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:8d:e4:35:71:72:f0:cb:bd:ac:5c:63:7b:cd:f6:12:a1:6e:
34:52:76:18:ee:60:66:8c:ec:22:f0:09:65:b1:f2:fc:af:fc:
0d:be:e9:61:20:d8:50:58:79:4c:79:a3:76:f0:97:0e:27:7b:
b2:52:77:19:04:21:49:fb:b0:8d:b8:f5:b6:a6:3f:1b:ca:e5:
b6:f2:9e:10:56:6a:c1:68:ff:f1:1f:6c:2b:bc:3d:61:35:81:
2c:a0:f4:77:58:bf:5f:0a:7f:3b:e7:6f:11:46:14:fa:4a:be:
c0:f1:8e:dd:be:25:fa:8f:99:26:aa:99:19:52:dc:aa:01:7f:
cc:43:d0:23:46:1f:05:1b:41:64:fc:1d:1e:73:ef:62:82:ad:
a9:ae:4d:a8:8f:ec:41:e1:e0:15:08:e7:e4:e1:91:1c:43:35:
1e:5f:4f:cc:76:fa:24:1d:30:ab:86:71:7b:7c:4f:99:86:18:
0f:ff:f2:c3:6b:96:40:e1:0c:8d:56:93:aa:c9:81:e4:b4:37:
22:75:90:5e:2b:e0:70:a5:ec:99:84:c7:1d:5f:a7:fe:34:c2:
bf:47:47:e8:6b:b3:60:5b:16:0c:a6:8f:08:85:d6:57:30:0d:
ef:90:b8:83:63:96:26:e4:1a:bb:a2:4e:51:af:26:28:2f:db:
0d:08:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:54 2025 by rpki-client