Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
File: qiIvVnO4KKeuUvmboMYqzXCXSjg.mft (raw, json)
Hash identifier: J4q9NnLYo2LD0tePuxYGRhnF8rYGz85fL+xtKHEsIBM=
Subject key identifier: AF:CE:1E:7A:73:14:04:92:EA:18:94:F8:7F:71:19:73:D5:A7:E0:A3
Authority key identifier: AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
Certificate issuer: /CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Certificate serial: 01989F3AE15A9FD6995E395A4D289319C344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
Manifest number: 0328
Signing time: Tue 12 Aug 2025 17:01:32 +0000
Manifest this update: Tue 12 Aug 2025 17:01:32 +0000
Manifest next update: Wed 13 Aug 2025 17:01:32 +0000
Files and hashes: 1: Lh_NKL7D2mWFyhzHGugt5SgY5Oo.roa (hash: DjvsQWCGurUIzxMM5VASKrLIiSf6rVM8+QHojBeXG6I=)
2: qiIvVnO4KKeuUvmboMYqzXCXSjg.crl (hash: K0vIOHYXO9Mj6lHK58vlcrCkDVlBj3MGJqU5JkaOqMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:e1:5a:9f:d6:99:5e:39:5a:4d:28:93:19:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa222f5673b828a7ae52f99ba0c62acd70974a38
Validity
Not Before: Aug 12 17:01:32 2025 GMT
Not After : Aug 13 17:01:32 2025 GMT
Subject: CN=afce1e7a73140492ea1894f87f711973d5a7e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:30:ba:05:48:d1:86:94:f9:44:af:8e:e1:
9b:b4:fb:cf:25:f6:ba:ef:fc:be:c3:94:8f:a4:70:
ff:dc:86:c0:81:86:b0:78:10:09:21:61:51:3c:42:
e5:31:84:a5:35:47:60:f6:d7:c7:f5:86:2f:39:8e:
1f:f0:99:7f:f2:cc:18:d6:5f:e3:56:01:c8:23:14:
7e:9c:3c:04:11:65:f9:5f:25:13:53:11:5b:05:af:
74:d0:f5:d6:fc:b8:3c:22:0f:99:3f:30:ec:4b:c5:
9d:38:de:af:85:b4:aa:95:ae:fa:1f:ce:69:7a:7b:
e7:ef:4b:1c:8f:38:2b:b2:aa:19:d8:01:86:1d:04:
a5:5b:c6:15:c4:f9:24:22:f9:ab:64:ef:86:75:8d:
85:e3:1b:23:44:6a:1c:01:39:5b:9e:dd:27:28:60:
8f:70:07:1f:bd:85:92:4d:84:79:c0:b2:2d:03:6e:
07:c9:fe:37:3a:44:f1:98:ff:62:5a:16:03:fd:7c:
a3:7d:dd:79:90:af:94:e0:65:b4:27:8b:c7:87:85:
64:25:d2:6d:55:96:1d:cc:9a:77:ee:2d:fe:a4:72:
d9:20:ea:03:cf:f3:4d:fb:c4:1e:91:d2:d7:80:e1:
3f:39:fa:54:53:34:51:4e:eb:ba:0b:da:36:d1:94:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CE:1E:7A:73:14:04:92:EA:18:94:F8:7F:71:19:73:D5:A7:E0:A3
X509v3 Authority Key Identifier:
keyid:AA:22:2F:56:73:B8:28:A7:AE:52:F9:9B:A0:C6:2A:CD:70:97:4A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiIvVnO4KKeuUvmboMYqzXCXSjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e54636-c998-409a-89bb-2b7b827e718c/1/qiIvVnO4KKeuUvmboMYqzXCXSjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:46:95:34:96:19:b1:0e:16:44:c6:b9:ce:76:c1:fa:91:e2:
f7:ef:e9:f3:eb:c7:40:6e:ec:16:11:7e:ab:07:24:7b:ab:fd:
ee:fb:df:41:73:ee:73:92:0f:f1:ca:18:52:12:3a:0d:68:36:
95:87:33:55:c0:a2:69:4c:0a:2c:d3:66:61:d3:a8:76:d6:ee:
55:07:2b:af:fe:55:7f:4e:f2:cf:5a:ba:f3:db:83:ac:30:c8:
83:d0:d5:97:d7:b8:35:39:bf:b0:30:ec:27:60:8c:3d:61:2c:
27:da:d8:c7:0e:e1:8c:ea:cc:17:1e:e2:8e:51:d0:1e:e0:ac:
05:6e:88:13:08:e3:1b:7a:88:7c:38:0e:41:7e:79:2b:a2:fe:
8b:ba:c5:d1:d3:dd:ab:c8:45:68:51:cf:60:16:8c:2b:58:12:
12:0b:fa:95:d8:30:0a:19:e8:3e:d7:3e:fc:b0:10:43:07:04:
97:5b:2f:73:0a:2e:97:29:52:bb:f8:df:e6:e4:10:ab:86:b6:
21:e4:69:ea:d5:ff:09:c1:e0:50:02:53:62:00:46:3e:d4:ba:
dd:04:27:74:cc:99:61:7c:38:dc:7e:86:59:59:37:3a:df:7e:
91:90:21:14:5a:04:fa:7d:81:14:6c:42:a1:cf:37:b2:54:c1:
59:d2:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:05 2025 by rpki-client