Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: o+LVMlJbOW2WHRVn+v1Prj/sn/M+HpScMsUgOhvrXrk=
Subject key identifier: A7:C4:05:9D:01:C5:E5:F0:A5:E6:DB:CE:CE:05:1E:A4:77:2D:98:8D
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 0197470B70DC5D872E5AB0D083AAECB0F850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 1A
Signing time: Fri 06 Jun 2025 21:00:21 +0000
Manifest this update: Fri 06 Jun 2025 21:00:21 +0000
Manifest next update: Sat 07 Jun 2025 21:00:21 +0000
Files and hashes: 1: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: ZuXy42NF3hC3jAMl3rVmnuRncUyUgVLVKuJQxwazar8=)
2: x1eJbWpmQl3-10Ti5rN1KHMVNQY.roa (hash: ci4Z76IUsc0nvbs4nyl4b4RvrzunMGUN5yIgu/rWnI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:70:dc:5d:87:2e:5a:b0:d0:83:aa:ec:b0:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Jun 6 21:00:21 2025 GMT
Not After : Jun 7 21:00:21 2025 GMT
Subject: CN=a7c4059d01c5e5f0a5e6dbcece051ea4772d988d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:ef:06:36:90:86:03:94:98:02:54:47:28:
be:ea:a7:c8:63:34:e1:4b:aa:e1:66:2f:d9:97:cb:
ab:35:38:dd:eb:85:ef:0f:f4:be:6f:71:fe:84:4e:
a1:bb:87:b7:64:9e:b5:bf:b4:4d:88:60:c4:c8:56:
ef:eb:81:52:58:36:9c:bb:28:f5:67:67:7d:bd:55:
4e:ea:8b:44:c9:55:b1:6d:f3:ea:ac:1e:0e:69:d4:
d0:a3:c1:ee:75:16:fe:24:d3:55:a7:6a:0a:0b:f7:
70:04:61:29:69:ba:04:6c:6c:d9:60:c5:b5:5d:de:
63:ea:b4:d3:00:af:34:11:cb:b1:c7:2f:b7:ee:ef:
e3:99:5e:90:78:75:04:2a:d3:d0:73:70:04:7a:3e:
15:f6:e6:f6:15:42:db:51:b5:af:61:67:24:2c:65:
d4:58:f7:2b:b8:4b:dd:85:ee:a8:fc:a4:0c:a6:31:
42:58:e6:6d:1b:93:43:0b:4e:7e:0a:cf:9f:68:03:
8c:54:37:2a:81:92:38:dd:7f:df:79:d7:9e:dc:11:
49:1f:b1:31:d1:f9:96:c5:10:60:e0:03:e5:51:4c:
e3:79:4d:77:9f:2d:d9:a6:be:36:ec:14:13:b6:8a:
32:3e:d0:06:11:29:7b:29:5a:ce:dc:bf:2b:af:74:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C4:05:9D:01:C5:E5:F0:A5:E6:DB:CE:CE:05:1E:A4:77:2D:98:8D
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3c:15:92:82:51:80:52:04:d2:41:1f:92:7a:81:4c:d6:88:
f3:d0:83:f9:da:d4:cc:48:29:58:a9:f4:3c:4b:c9:2b:17:ae:
5c:a7:a1:d6:30:cb:25:8f:88:2d:a6:5a:d8:f7:db:e6:c0:53:
58:95:b3:be:ab:6a:c2:46:99:b3:6b:26:23:e3:3e:0d:1e:dd:
9b:39:f1:ca:5c:e6:54:ab:a4:6f:7b:ac:cf:89:f7:df:fc:9b:
8c:d7:d4:19:be:ea:e1:d5:8c:3e:73:36:7f:52:b2:b8:90:72:
01:28:43:b2:4b:41:9f:e6:5c:d7:b3:fe:73:a7:c2:2d:36:5f:
19:d9:51:6c:6a:ca:75:a0:d6:b8:af:bd:59:dc:27:64:27:98:
09:70:87:2d:cd:38:a8:8b:40:29:ca:1a:17:1d:5b:26:eb:26:
89:d7:0f:ed:82:93:0c:48:1b:6b:25:c8:c1:cd:e2:30:f2:e0:
a6:f6:22:27:d5:39:ce:4e:a2:d4:a4:07:58:1e:37:3f:14:00:
6f:91:b0:82:01:88:d9:d0:5d:21:84:bf:0c:12:70:26:10:37:
b7:59:a2:6d:b4:42:40:71:96:c7:18:f6:bd:5b:77:43:63:d4:
01:85:8c:1c:80:f5:dc:f3:b8:25:16:a5:e8:9a:c2:60:d0:4f:
06:f4:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:37 2025 by rpki-client