Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
File: qawfhZW61VgkDXQGgAChz3CLoaU.mft (raw, json)
Hash identifier: qYGjpLaK6t6lKwgUhIBczdll3iT96WUyZ5SR8MCorRw=
Subject key identifier: 6C:04:E7:44:12:DA:53:DD:05:E9:E7:20:9F:76:16:C9:9A:AF:5C:0E
Authority key identifier: A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
Certificate issuer: /CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Certificate serial: 019847E4AE4672799BEDCBFAB8CE47F45253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
Manifest number: 15FB
Signing time: Sat 26 Jul 2025 18:00:25 +0000
Manifest this update: Sat 26 Jul 2025 18:00:25 +0000
Manifest next update: Sun 27 Jul 2025 18:00:25 +0000
Files and hashes: 1: BW_w5tNvIWO1-tVFP8df1MdaWTA.roa (hash: rExjPSaaFahRIKD/ZiQ7dk1JIKInqDzh+Jo+aqkHWCA=)
2: SHt83tHCOqEqNWz8C0rDKgPLSVk.roa (hash: 5uUYud3teEzP7h4GRY2ZjMn6NzU1+BqyXIl56/9+cO0=)
3: qawfhZW61VgkDXQGgAChz3CLoaU.crl (hash: fdJcteytI9GZP/EdVLyRMiFerHX7oaWWCCJiSB3IbJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:ae:46:72:79:9b:ed:cb:fa:b8:ce:47:f4:52:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9ac1f8595bad558240d74068000a1cf708ba1a5
Validity
Not Before: Jul 26 18:00:25 2025 GMT
Not After : Jul 27 18:00:25 2025 GMT
Subject: CN=6c04e74412da53dd05e9e7209f7616c99aaf5c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:d7:63:66:65:e5:c3:67:8f:ad:16:03:7a:
9a:9d:d2:35:ee:03:49:ca:0b:b3:51:bd:e6:ca:bc:
35:a9:ca:5c:e1:f7:43:fd:4d:08:aa:73:d7:50:d1:
fb:9a:a6:cc:52:aa:15:3d:39:a5:01:cd:20:c0:1e:
57:a0:ea:12:9f:dc:cf:6b:a9:e4:4a:41:51:58:7b:
e4:7a:df:98:2a:4c:18:24:df:da:97:09:32:b4:dd:
03:e7:8c:fa:db:6b:fb:a6:bc:96:a7:b1:7a:6c:64:
31:02:ac:37:dd:53:b7:75:4c:c9:80:b0:b8:15:be:
1f:3b:7d:6e:c4:6b:4a:30:03:75:d0:bc:08:de:d2:
4d:e0:38:bd:e6:e5:13:a8:8c:18:c3:41:db:a7:e9:
3f:24:64:76:fe:e3:c9:d1:a0:7c:9e:0c:c0:10:bb:
c8:1d:a6:9e:92:95:09:61:fc:70:83:19:23:98:c1:
79:e9:ea:c0:f7:3e:b4:94:80:8e:2c:a8:08:6e:d7:
11:10:6c:b8:5f:55:94:bb:c8:0d:c8:2e:89:ae:32:
3f:aa:ee:33:e8:f3:18:3f:28:2c:c1:08:58:20:ba:
9e:2d:51:73:ed:55:cd:a9:fc:9d:77:68:a4:26:ec:
8f:6c:d6:99:90:bc:b1:0b:a2:c5:5b:3a:a6:03:be:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:04:E7:44:12:DA:53:DD:05:E9:E7:20:9F:76:16:C9:9A:AF:5C:0E
X509v3 Authority Key Identifier:
keyid:A9:AC:1F:85:95:BA:D5:58:24:0D:74:06:80:00:A1:CF:70:8B:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qawfhZW61VgkDXQGgAChz3CLoaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/qawfhZW61VgkDXQGgAChz3CLoaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:77:de:58:40:51:25:c8:0a:57:74:83:bc:c9:27:ea:58:68:
47:86:f7:ff:87:cd:56:8c:d2:fd:17:78:5f:b1:de:0a:f5:f6:
e9:34:c4:b2:6f:2f:63:b5:4e:77:8b:0b:77:09:37:f3:47:ae:
27:e1:22:19:9b:a8:b9:cc:53:1a:86:44:68:d8:a7:1c:aa:bd:
7e:79:a9:10:9d:05:53:9f:45:51:95:9d:3a:60:82:11:99:97:
85:25:b2:b5:42:a5:12:aa:77:77:07:8d:f6:ff:33:e1:82:a5:
d4:2c:19:5b:67:63:6b:12:6f:06:51:94:57:63:dd:aa:10:8d:
2d:93:5a:3b:4e:b3:b8:ce:61:dc:bf:32:65:01:28:7e:ee:1d:
58:24:4d:61:25:73:25:32:34:88:95:76:e5:2b:76:96:fd:83:
ee:e8:f0:b1:82:e0:6d:fb:d6:f7:04:72:7b:93:50:d6:de:d6:
d5:c9:28:84:cb:96:33:c6:10:43:6e:7b:35:8f:b3:cc:b9:4c:
2f:4e:c4:d3:fe:cb:65:5a:79:76:c9:c1:49:c2:40:d2:fb:b0:
8b:f5:5b:ea:23:51:92:3e:fa:a7:11:24:3c:a8:94:b4:13:45:
1f:e7:16:f4:85:8e:83:f8:78:67:de:29:a3:ee:f2:0f:d6:8a:
18:62:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:16:09 2025 by rpki-client