Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: qWUEpJAV8Vzxi7jKhrTf6HtCrRvVHD7t58kwUHFmla0=
Subject key identifier: 46:0D:6E:2D:43:70:C2:88:25:45:55:77:D5:3B:8A:5F:23:1F:80:01
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 01984A09DEEDFD8B8F6B2AC148CD4A4256E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0AE4
Signing time: Sun 27 Jul 2025 04:00:17 +0000
Manifest this update: Sun 27 Jul 2025 04:00:17 +0000
Manifest next update: Mon 28 Jul 2025 04:00:17 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: FTE3hP5H4pzQwuhAWq0hiTZx/0LvTl4pToaF0k73DyE=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:de:ed:fd:8b:8f:6b:2a:c1:48:cd:4a:42:56:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Jul 27 04:00:17 2025 GMT
Not After : Jul 28 04:00:17 2025 GMT
Subject: CN=460d6e2d4370c28825455577d53b8a5f231f8001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b9:cd:99:4d:09:96:15:9c:b8:9c:7d:09:a5:
42:53:70:ac:2c:c3:db:13:a4:27:b4:75:1f:cb:d6:
b3:e1:e6:6a:2e:1a:c6:4a:a7:f7:a0:50:ba:ef:2d:
29:08:b0:d2:ef:5d:9d:32:4b:b0:46:ff:6d:9d:cc:
d7:3e:9e:da:da:da:01:47:66:67:d5:6f:27:d4:07:
b5:a1:0f:25:b0:b0:21:cd:25:af:05:51:04:94:66:
35:c6:29:3e:9c:3c:54:39:b2:a3:c6:05:1d:72:94:
c0:6a:74:5c:fc:6f:79:0c:64:0e:97:5a:28:1e:1c:
d7:b8:c5:dc:e2:66:de:36:13:1b:60:de:44:b2:5b:
0a:77:aa:09:c2:38:7b:e2:53:df:d5:b0:61:dd:6d:
00:8f:97:33:8f:6c:32:09:ee:f7:e6:24:b7:e3:97:
97:06:91:7c:55:4d:61:87:2e:43:92:b4:bb:c4:73:
60:0f:2a:ca:97:a2:79:76:d3:a1:42:02:0d:e6:cd:
87:f8:f8:e9:c2:35:86:58:c5:58:bf:2f:5e:0a:1d:
55:10:78:49:e0:82:7f:8a:6b:a0:fa:a7:01:51:75:
ef:f2:84:11:e1:ad:16:e9:6e:95:84:9f:0c:f0:e8:
29:b0:71:88:36:f1:6e:1c:38:df:90:70:2b:66:d1:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0D:6E:2D:43:70:C2:88:25:45:55:77:D5:3B:8A:5F:23:1F:80:01
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:78:f1:f5:cd:f6:a5:25:b9:42:a8:e6:8c:a0:ab:ff:cf:3f:
51:8a:b5:a0:66:69:6c:66:5b:5b:de:0d:f3:65:9e:7d:fa:7c:
fa:7f:a3:50:f8:64:e9:b2:d5:44:1d:9b:ee:4a:44:4a:d4:15:
9a:5e:0f:48:8a:ff:06:96:bf:92:ea:0e:51:70:db:da:03:78:
df:af:e3:34:5d:c2:8c:cb:9b:e6:20:c6:d3:5e:8a:f2:1c:5c:
68:39:f8:53:d7:60:cc:19:e5:3e:be:9e:11:25:fa:b5:b9:a3:
4e:45:22:86:d1:f9:d9:cc:d4:87:15:f5:10:5f:b7:d8:d4:0a:
bb:72:92:0c:a0:66:da:bc:d4:dc:56:43:60:ae:e0:dd:51:ba:
67:c3:5c:20:27:e3:bf:8e:47:8a:2e:26:6d:5b:b8:fe:0f:2c:
49:20:9e:84:05:66:e8:a9:65:59:da:fb:6e:17:3e:34:a4:ef:
9c:90:d5:29:ce:4b:5b:4a:a3:21:8d:63:84:63:4c:b7:3e:6a:
53:95:6d:47:fd:00:f4:2c:8a:0f:65:0c:77:da:b1:5d:40:15:
32:16:5a:c9:05:ae:78:e0:df:d6:2c:ce:45:ce:ad:05:08:73:
7b:30:2d:7d:b8:2a:65:7e:ca:8f:2a:95:a6:03:8d:fd:9b:c1:
c0:a8:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:26:30 2025 by rpki-client