Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: QD3W/rBgc5JeaGxQ+79uPLaIoWWeZNHrWAjvs5T7vTE=
Subject key identifier: CF:E0:7F:58:03:B4:72:62:0E:66:E7:54:8F:A3:80:E3:4C:92:AF:1C
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 0198511EE0172A2C9E5E1542C1E201658700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 13:00:34 +0000
Manifest this update: Mon 28 Jul 2025 13:00:34 +0000
Manifest next update: Tue 29 Jul 2025 13:00:34 +0000
Files and hashes: 1: DxU6Tj_sH9i6nYuhG62Zr3rykbI.roa (hash: m10v06RZq7QrBohirh1LPManMxgfja3ZfQ1j9hj5ZLI=)
2: kZG65yjYhzWbyjVxS5nDngYTn7o.roa (hash: NxEcj6vOgWy2wxB1Tg6EXlBHbNa6oBK7xEqZZsDpfQk=)
3: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: 2LOZNqjznZygvmJsoJ59InRYa85W9FLvrLtTt7QboZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1e:e0:17:2a:2c:9e:5e:15:42:c1:e2:01:65:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Jul 28 13:00:34 2025 GMT
Not After : Jul 29 13:00:34 2025 GMT
Subject: CN=cfe07f5803b472620e66e7548fa380e34c92af1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0d:9b:5a:6f:24:00:c7:ab:81:52:79:0f:34:
32:0b:0a:e3:e5:00:93:02:e5:9f:2e:4e:7b:4d:c7:
40:2f:0b:2e:d8:db:29:df:a8:f2:45:50:c7:17:91:
b3:d5:bb:88:28:76:1f:94:90:6c:98:b0:c1:3b:5c:
d6:dd:c4:56:ae:0d:0e:6d:d5:e3:0d:14:b5:7c:0d:
e1:da:10:db:5f:37:43:51:96:30:20:eb:32:58:65:
5e:48:8c:01:ec:9a:c1:fb:73:a9:8f:88:56:3a:40:
f1:72:dc:a5:b7:de:86:a9:43:e5:de:d2:e8:ba:b9:
d5:d5:bf:64:23:8c:a9:5c:45:30:5e:fe:7e:2a:b8:
ac:df:3c:c6:ab:e1:ae:7d:d1:dd:f7:71:32:a3:a9:
96:97:a2:d6:25:68:c1:de:a4:1a:ca:36:96:32:25:
97:4e:28:fb:03:89:f9:34:ec:00:77:c9:c8:aa:45:
50:2d:64:a5:c4:0c:5c:5c:2b:48:b9:0c:7a:77:10:
87:70:09:68:f7:f1:c8:92:a6:a0:b1:16:a3:fb:ea:
85:57:49:d9:21:74:da:40:7e:72:71:1c:f4:ea:14:
f0:55:ae:79:78:39:cf:34:d0:40:3f:c2:bb:6b:d1:
02:2a:6c:53:8b:39:82:f0:04:23:87:4b:ce:90:b1:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E0:7F:58:03:B4:72:62:0E:66:E7:54:8F:A3:80:E3:4C:92:AF:1C
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:15:bf:3a:52:9f:99:e3:c5:3a:86:5c:9a:9c:93:84:1e:
90:91:0f:95:2f:bf:e9:4a:42:d1:69:8f:1b:31:79:0e:1a:a4:
13:5d:63:be:67:4f:7f:67:43:82:9a:6d:93:a6:9e:92:62:0b:
44:b6:93:df:52:af:cd:86:5f:90:04:8c:ac:c4:f9:d2:74:a1:
77:69:2a:c6:65:6d:93:4e:31:eb:46:22:0d:9f:ec:2e:ca:d1:
f4:08:1f:d3:58:6e:0b:5d:79:79:f4:a6:ca:64:65:2b:38:46:
ae:a3:fe:fa:77:ac:85:e8:e5:d1:09:0b:79:39:d2:18:61:e0:
2a:e4:dc:41:78:41:f0:e0:f7:2e:3a:b3:bd:c6:9c:07:bc:ec:
2d:ef:10:d4:ec:dd:69:59:9c:3d:da:6e:42:fc:b3:59:59:96:
65:ec:f5:b0:eb:5b:81:b5:2b:05:88:1a:dc:8c:62:82:cf:80:
c0:ca:5a:d8:5d:14:73:f9:be:82:f8:c8:f6:42:6f:93:90:19:
92:78:90:0b:f5:d7:d4:0f:d5:50:54:8f:1a:36:c7:ff:9e:be:
61:f0:3d:cf:cd:5b:43:68:a3:c2:53:b2:40:42:e9:8e:7f:9a:
f0:4d:5c:ee:8e:e4:17:bd:e6:eb:dc:fa:53:cd:15:7c:1d:65:
dd:fd:72:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 23:02:25 2025 by rpki-client