Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
File: qwbI8iR9IgQcguVVZniB5Q-RVKs.mft (raw, json)
Hash identifier: GPwI8CiBaVVrTisCN5yB/O8oON59ch1ShJooGiUev9M=
Subject key identifier: B9:73:39:D3:9B:29:E3:88:AC:15:9C:84:60:34:DC:FE:21:AD:8F:94
Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab
Certificate serial: 01984A77BDA8AFB082B05F0BFBF55249FABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:17 +0000
Manifest this update: Sun 27 Jul 2025 06:00:17 +0000
Manifest next update: Mon 28 Jul 2025 06:00:17 +0000
Files and hashes: 1: BvjHm2eLgQsE-EhNaMGys6XuvSA.roa (hash: 3dR8rduC7LW0RozAGEED/FwSFwjDp9QTVfVqQtjf3mI=)
2: kD9wFsIkyemJmyZR5NsOicAOk6Q.roa (hash: 5lwx2dujcX+QPN65pRSgkqXQZ6JloT7CVxLAGTDZ7oM=)
3: qwbI8iR9IgQcguVVZniB5Q-RVKs.crl (hash: QP+WuMe+ThELwpqjh4ucnSY6Vmf8kpO6zqL2spQHoD0=)
4: y-vKKwMZ-Jm1IyyKOX5h3UFOkJs.roa (hash: TREazVziiS/zSuZ98yUE1lCBdvTaOvsRUmgllHq3JrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:bd:a8:af:b0:82:b0:5f:0b:fb:f5:52:49:fa:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab
Validity
Not Before: Jul 27 06:00:17 2025 GMT
Not After : Jul 28 06:00:17 2025 GMT
Subject: CN=b97339d39b29e388ac159c846034dcfe21ad8f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:c9:cd:71:11:7a:40:fe:92:9a:54:c5:d4:
7a:c4:e2:d6:e8:3e:b9:76:27:1a:0d:85:af:39:e0:
2f:cf:bf:c9:4d:42:b0:b2:8d:38:8e:ac:ed:f7:8b:
0a:68:57:63:67:2c:65:14:7c:c4:6f:d9:0b:4d:d9:
99:d0:e3:b0:7e:f2:ca:7e:08:24:4c:a5:28:c8:12:
6d:49:3d:4f:77:57:b8:e2:e2:e0:b6:4c:0d:56:06:
2a:66:c6:b9:75:b2:a5:b9:36:e2:90:c2:f6:0f:37:
2b:0f:7d:e5:5d:48:1f:77:c0:de:b4:3c:88:32:8d:
26:21:83:9c:79:aa:96:f2:40:ea:e6:01:72:69:f8:
72:48:92:7c:86:df:cc:0a:bc:e4:d1:f2:cd:fc:a4:
6b:cb:d0:c8:9e:f5:12:43:d9:ba:da:45:9a:ed:55:
41:54:ce:d3:f4:69:da:32:41:fe:73:07:82:f5:95:
be:5a:fe:0d:8b:37:a9:19:a8:ca:cd:74:90:5a:2d:
2b:79:a0:df:f2:be:a6:5e:4a:f5:17:5b:9b:f2:40:
15:3c:c7:c9:4f:78:b2:8b:a3:3f:13:87:44:38:9a:
00:bf:ca:f3:73:01:1d:0f:78:ae:dc:16:ba:37:65:
4b:67:d5:0b:d8:3c:cf:c9:f8:36:69:98:26:f7:5c:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:39:D3:9B:29:E3:88:AC:15:9C:84:60:34:DC:FE:21:AD:8F:94
X509v3 Authority Key Identifier:
keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:41:c4:8d:c9:54:de:e5:76:23:4e:07:44:43:a2:64:50:bb:
20:cf:60:0c:0b:e3:43:04:a0:2d:85:7a:d4:d9:a1:e7:f2:7e:
bc:85:7e:7b:ee:35:bc:10:90:80:e4:d3:cd:b8:cc:93:a6:2a:
35:65:bb:5c:d0:80:8a:3c:99:10:22:9d:91:6e:da:71:25:d2:
ed:83:25:88:42:15:e6:e1:c0:d5:d3:87:6e:7e:29:38:30:d9:
29:62:97:29:0d:4c:44:e2:02:69:15:9e:c1:95:57:ba:67:01:
db:46:37:96:6a:a4:66:b0:c0:8f:3c:c4:7d:fa:1a:5d:ea:92:
34:d6:50:ad:08:da:ea:16:2f:e5:3b:5a:9a:f0:ef:21:c4:b1:
56:6a:11:cf:ce:1f:bb:26:a9:5a:ef:05:14:6a:e0:c8:f0:73:
0e:45:5c:0b:27:47:9a:6a:0e:c9:af:8b:5f:99:5c:34:f1:c7:
90:46:7c:1d:50:f3:c7:53:28:08:f8:0a:a6:7c:b9:0a:9a:e3:
0e:60:e8:bc:a5:16:5c:62:62:f4:a0:63:0f:26:47:bd:12:e5:
4c:de:f2:78:2a:d4:8a:99:24:25:58:d4:9c:42:16:0d:0d:69:
15:a5:2e:91:1c:bc:de:84:f0:97:ef:c3:ac:21:d1:bb:96:1b:
44:fb:9c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:02 2025 by rpki-client