Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: +RJbm4iJMzMQds0sPv3hz8kZn8u0putVTyqwIm0l0v0=
Subject key identifier: 92:7D:86:83:97:D1:7C:81:72:84:FA:DB:38:33:ED:E8:F4:12:45:4E
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 019873E26856CB2EE1245535CA2D2815A763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 1288
Signing time: Mon 04 Aug 2025 07:01:13 +0000
Manifest this update: Mon 04 Aug 2025 07:01:13 +0000
Manifest next update: Tue 05 Aug 2025 07:01:13 +0000
Files and hashes: 1: 6vC7E9fCr2S2YLpYl9NYikdwrIo.roa (hash: 0lbRVN/oMU6y83Ly4EI44/lCqnm0TAJ8jhFyCAz5oJM=)
2: VFWfa5gKi_WVASZxLKD5EBmR-Vk.roa (hash: uLbbbwsMWu+2oa981JmoBqRGb6E5FUC1zqcIAUYzCRg=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: bNS1aRfiH5zosIKo5E/BZNFBmXsVH4w2lmsNH2nnhuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:68:56:cb:2e:e1:24:55:35:ca:2d:28:15:a7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Aug 4 07:01:13 2025 GMT
Not After : Aug 5 07:01:13 2025 GMT
Subject: CN=927d868397d17c817284fadb3833ede8f412454e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:57:26:6e:d2:f9:2f:2e:14:63:b1:78:2d:
63:cf:57:50:55:02:1e:e4:9f:0c:43:59:fe:90:67:
4d:bb:6e:3a:da:1d:8f:d2:83:98:93:98:64:1d:a0:
cc:ee:63:76:26:40:78:9b:40:c8:5e:ba:87:84:9f:
a8:68:65:e8:82:f0:b1:6d:51:2e:d4:dd:5b:85:4e:
6b:ba:53:d4:5a:4e:3e:5a:e6:d9:b1:7b:2e:22:ad:
41:1b:12:3b:71:c4:96:d8:3c:a9:1d:41:23:8c:8a:
a1:d4:2d:bf:2a:dc:ca:33:3c:9e:6b:8f:fc:ed:9c:
9d:c7:cb:78:ca:1f:0c:98:ba:25:89:e9:78:12:a8:
d8:87:5d:2b:85:f3:c3:59:d9:dd:e8:a1:25:7d:ad:
09:90:a2:a3:3d:80:30:d5:21:57:99:d1:25:c6:7d:
50:3e:6b:65:5c:08:98:49:ac:0a:db:6c:cc:d6:5a:
3f:d4:2c:39:ce:78:77:30:cd:ee:f3:57:2d:fa:0d:
5d:80:30:5a:73:57:1f:32:d6:8b:d1:75:20:99:e5:
e9:4a:92:61:a3:53:08:55:b7:de:f4:92:f7:e7:95:
eb:29:fd:af:7b:47:74:f5:a7:07:53:d8:b1:6b:2e:
16:c3:18:b6:10:e6:4e:da:a3:63:55:df:b7:76:3c:
01:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7D:86:83:97:D1:7C:81:72:84:FA:DB:38:33:ED:E8:F4:12:45:4E
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fe:e0:0f:cd:ca:6c:0e:45:25:88:dd:a6:23:e3:e5:ed:ba:
c5:4c:66:b6:01:d9:ee:c6:aa:42:99:4d:c6:f3:1e:ba:7d:25:
76:be:f9:bc:df:4d:cf:4a:af:8a:b0:e2:52:b3:89:c7:71:8e:
4e:71:b1:2c:06:d0:02:55:dc:97:00:55:82:55:3c:28:3a:71:
6a:fb:fd:5e:ac:a0:c7:c4:d1:5a:5d:f2:c1:69:c6:42:7b:95:
d9:d2:8d:2f:b9:f9:79:06:18:e4:a4:81:58:0c:8f:eb:0a:b3:
a3:57:69:b0:48:64:26:f6:32:a7:3c:f7:0f:58:c7:8e:4b:5a:
2a:ed:63:f8:c4:f7:be:86:ba:48:6a:28:6a:11:05:ab:f2:66:
f9:32:59:41:d3:f9:d8:fd:e2:81:94:67:9c:e4:2f:0b:04:e6:
6c:c3:6d:f9:d1:db:2a:49:8d:7a:61:c6:e2:8b:78:c1:14:a4:
04:45:00:30:ed:34:af:f9:0a:75:a8:66:25:6e:83:e0:61:ab:
32:2a:72:db:ae:de:f9:2f:c8:c8:82:28:49:6f:1c:ea:48:83:
4a:49:b6:96:14:1c:62:55:78:c9:a9:de:20:5c:68:5e:c1:82:
53:49:7f:c7:4c:ff:02:64:13:b2:8a:6a:db:06:35:8c:62:e4:
a1:f2:15:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:30 2025 by rpki-client