Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
File: qsV1yvoAvEHVfElKwfXbz-54My4.mft (raw, json)
Hash identifier: ilVePlvme9c3O4iAOWOdqXnjxkIChAUziLAzL1ImGM4=
Subject key identifier: D2:8B:71:29:3F:2E:9B:61:5A:DB:24:EF:DE:02:35:A6:EF:16:5E:EB
Authority key identifier: AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
Certificate issuer: /CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Certificate serial: 019849D30183A1BC750B9483A3B45A055482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:21 +0000
Manifest this update: Sun 27 Jul 2025 03:00:21 +0000
Manifest next update: Mon 28 Jul 2025 03:00:21 +0000
Files and hashes: 1: XtPvNkbtFvkSrn1XGkdkM55xfJ4.roa (hash: XvdvDvnaLffIXutFMAXtL47S87Pb9dwgFS/EYsDxu5Q=)
2: qsV1yvoAvEHVfElKwfXbz-54My4.crl (hash: UMyNVbaarMeafqKWJyE6fatGnI4+UH0ZCq+pN1Zlgbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:01:83:a1:bc:75:0b:94:83:a3:b4:5a:05:54:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac575cafa00bc41d57c494ac1f5dbcfee78332e
Validity
Not Before: Jul 27 03:00:21 2025 GMT
Not After : Jul 28 03:00:21 2025 GMT
Subject: CN=d28b71293f2e9b615adb24efde0235a6ef165eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:6b:a1:88:70:3c:ee:e5:e1:ea:37:b0:9c:
9e:8a:f4:41:b5:59:d4:98:5e:69:0f:75:ab:7d:23:
cb:ab:60:28:8e:46:3d:c3:1e:e1:8b:49:1a:55:9b:
8e:f3:d8:7e:8c:9a:a1:e7:0e:34:c6:2e:d0:59:50:
da:5f:cc:6c:3f:7e:a4:28:1a:38:ec:ba:9a:ac:b8:
42:53:fc:fe:86:43:8e:af:ce:18:70:73:c7:cc:f6:
27:02:72:8a:b4:73:5b:82:93:e4:25:05:e5:89:32:
37:16:91:48:8c:f7:9c:e5:a6:4d:80:7f:62:1b:f4:
5f:65:8e:88:b0:5a:ac:6e:37:ee:97:59:55:f5:b7:
a1:61:89:15:9d:b3:74:39:d7:54:dc:8a:3a:0e:02:
01:3d:b6:f4:17:e1:cb:26:b0:c6:2d:92:fd:18:3f:
10:03:89:02:86:30:64:6e:87:c4:60:1f:02:c4:79:
d2:36:88:2a:7f:df:04:08:f6:ed:93:62:49:5e:5b:
36:9a:de:c8:e6:41:6f:ff:72:97:4f:43:cc:8d:10:
d8:90:fe:5a:07:3c:df:d6:08:80:78:b4:f2:37:8f:
95:f7:56:74:4c:66:1d:12:35:a4:12:33:1f:a8:40:
b7:09:6e:39:93:38:d8:43:e9:6d:64:30:94:21:a8:
4b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8B:71:29:3F:2E:9B:61:5A:DB:24:EF:DE:02:35:A6:EF:16:5E:EB
X509v3 Authority Key Identifier:
keyid:AA:C5:75:CA:FA:00:BC:41:D5:7C:49:4A:C1:F5:DB:CF:EE:78:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsV1yvoAvEHVfElKwfXbz-54My4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/35d598-c32c-49a7-b1f6-8f913e2696e5/1/qsV1yvoAvEHVfElKwfXbz-54My4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:63:c0:9a:ca:c5:9e:66:97:a2:35:c0:b1:94:a4:10:7b:ce:
d0:38:6e:07:9e:87:5d:56:b3:3e:40:cd:fc:0e:1c:0c:f5:2d:
e8:57:55:d9:a8:79:fc:7c:8b:86:29:1d:ff:9a:bd:66:64:89:
1c:1f:f7:67:aa:f7:8b:42:b2:c5:14:cf:c7:88:bb:32:5b:7e:
39:44:21:d6:30:d7:59:64:8d:a1:38:6d:6e:46:a3:20:4c:fb:
dd:19:65:c7:06:a5:08:b0:57:3f:9a:61:73:fa:fb:29:f5:59:
78:1e:06:ee:9f:05:e4:bb:2a:fc:21:13:7f:28:98:fa:e2:0e:
8e:14:02:44:22:47:f5:15:3f:74:3a:9e:3c:b7:83:97:37:ac:
cb:1d:f4:70:6f:e0:25:bb:66:b1:47:5b:0a:08:f8:45:62:6a:
9a:0f:2d:91:fd:53:85:41:19:9b:99:08:24:1c:b8:76:f0:0b:
92:c6:a6:2b:54:47:08:78:1b:6b:e4:42:86:5c:e1:ac:c3:41:
a2:22:16:00:a8:62:31:87:46:65:16:91:2f:18:44:26:a6:c3:
36:6e:0f:ed:dc:c3:2a:2b:20:94:41:70:2e:e7:74:b6:c7:27:
a6:a5:5a:1c:95:eb:83:1e:9d:1e:42:b7:c2:54:70:c7:d8:29:
1c:c6:84:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:21 2025 by rpki-client