Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
File: qjV0fbQXDtRXVsyaOk52iaDrYsc.mft (raw, json)
Hash identifier: iLG13pokYNAEzorhhMtxc7XE8LJRg+CDhYKMzBcWsog=
Subject key identifier: 4B:0A:3E:98:CF:D9:E8:0F:87:6A:BA:99:55:AD:6B:75:16:E3:B9:9E
Authority key identifier: AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
Certificate issuer: /CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Certificate serial: 0197D9D1AE2B30B9499706A211C40B391ED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
Manifest number: 02AE
Signing time: Sat 05 Jul 2025 09:01:26 +0000
Manifest this update: Sat 05 Jul 2025 09:01:26 +0000
Manifest next update: Sun 06 Jul 2025 09:01:26 +0000
Files and hashes: 1: c4TxJnX6SULpOIlEbtsYVcPO_1E.roa (hash: mprESb6/2u0lim3u1bjN8fuUSWrOypjztHMO2wyLys0=)
2: qjV0fbQXDtRXVsyaOk52iaDrYsc.crl (hash: VHok8IhsjM0fDVra0nH6/u+cxED2NPR1xgYds9qiSuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:d1:ae:2b:30:b9:49:97:06:a2:11:c4:0b:39:1e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35747db4170ed45756cc9a3a4e7689a0eb62c7
Validity
Not Before: Jul 5 09:01:26 2025 GMT
Not After : Jul 6 09:01:26 2025 GMT
Subject: CN=4b0a3e98cfd9e80f876aba9955ad6b7516e3b99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:fa:2d:29:a2:5d:e7:f5:93:d8:c1:e9:01:
27:49:de:cf:eb:2f:b5:31:93:24:aa:05:3c:79:c2:
18:81:fc:c1:f7:c0:f2:62:7f:fd:22:80:c9:56:16:
72:c4:f7:33:5f:9b:a3:8d:a0:8d:9b:f8:11:46:af:
44:28:69:89:d1:9b:5b:f3:39:e2:bb:07:30:79:3f:
14:24:6c:ad:f0:fa:be:f8:c3:e3:78:d9:36:b7:ee:
9d:78:a9:63:50:8e:1f:95:d2:96:9d:72:97:ab:9e:
2c:ec:0b:0a:a5:4c:43:22:89:27:92:63:ab:e2:67:
3e:5e:e9:53:0c:5b:f9:6d:d0:7f:ad:b0:7f:87:b5:
51:47:15:6c:b0:c4:bd:c7:6c:2c:bd:2e:77:fd:28:
67:03:e0:92:92:7f:8e:bc:6c:a4:1f:44:18:51:eb:
dd:46:60:13:a6:46:34:25:65:74:34:47:35:3c:23:
ea:ee:d3:71:d0:b2:cd:f1:48:27:fd:2f:d4:43:70:
f2:5a:1a:45:2c:4f:57:18:f4:51:10:b1:c0:a0:77:
46:16:0c:bf:f6:91:c7:76:1f:52:c9:50:95:81:8d:
87:f0:56:99:88:4d:f2:0b:35:bf:6c:f4:61:ed:05:
8b:21:86:0b:8a:0c:0e:8d:38:c3:e7:bd:d9:8e:30:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0A:3E:98:CF:D9:E8:0F:87:6A:BA:99:55:AD:6B:75:16:E3:B9:9E
X509v3 Authority Key Identifier:
keyid:AA:35:74:7D:B4:17:0E:D4:57:56:CC:9A:3A:4E:76:89:A0:EB:62:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjV0fbQXDtRXVsyaOk52iaDrYsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4a5c34-4df3-49c3-877b-1a8cd046da92/1/qjV0fbQXDtRXVsyaOk52iaDrYsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:1d:bf:f9:c0:de:34:20:5d:78:c9:f5:9b:17:97:a5:f8:
0c:d7:85:12:2e:e1:df:35:e1:4c:8c:05:79:a4:dc:f4:99:4c:
c5:02:73:2b:63:df:cd:e4:4e:5d:4f:fe:64:03:a7:eb:95:24:
9d:30:fa:9a:48:41:b7:42:5a:82:ea:7f:33:f1:98:ad:af:23:
3c:b6:5b:fd:e1:42:5b:48:1a:b9:87:09:31:53:ea:92:48:74:
51:c1:04:c3:15:8b:cd:b4:2c:31:7a:6e:cb:0c:76:dd:4f:b2:
c9:88:09:0e:06:6f:77:0a:be:d4:40:78:c0:e5:8c:48:1c:b4:
62:0d:d4:36:5f:0e:25:ee:29:c3:15:b9:a2:2a:b3:7b:c7:2a:
59:0c:4d:07:d5:9c:d0:a7:64:dc:fe:39:57:96:3b:1c:7c:ed:
a7:7d:bc:12:93:d3:f6:45:27:a4:68:1e:8c:66:2f:25:ab:4a:
49:41:b0:3d:68:e6:f5:43:89:fa:22:72:7b:6a:3e:2d:16:0b:
ea:f3:aa:0a:11:09:a2:8f:98:be:6a:7b:45:47:4a:79:88:a8:
47:b5:80:25:b9:cc:18:35:d5:63:88:60:59:28:7e:c7:40:70:
2b:43:16:e4:b1:f9:c4:11:9d:e1:b5:84:72:6d:37:5b:d1:a7:
6b:f6:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 16:27:02 2025 by rpki-client