Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
File: qsIj-xlCEV5IqXVCByktAKCC7N8.mft (raw, json)
Hash identifier: Bpw6ayU3S+SjEAyOe5ngWZWmCfJ40D401uhGAYw70LY=
Subject key identifier: 02:0E:AC:80:54:1F:C9:80:18:5D:9B:84:71:DE:93:B5:E0:CC:4D:B9
Authority key identifier: AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
Certificate issuer: /CN=aac223fb1942115e48a9754207292d00a082ecdf
Certificate serial: 01976F99CF4A49DEF07D0D888CC84AC3D082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
Manifest number: 07E1
Signing time: Sat 14 Jun 2025 18:00:40 +0000
Manifest this update: Sat 14 Jun 2025 18:00:40 +0000
Manifest next update: Sun 15 Jun 2025 18:00:40 +0000
Files and hashes: 1: f7H4NvJn5XG9ZEVLvo3rzyryem0.roa (hash: FIvnUTIH/WyzVRn7SNngTErOpdYKzvrkMjSyoAbXEio=)
2: qsIj-xlCEV5IqXVCByktAKCC7N8.crl (hash: h2ligFfVduefLH2lOcGVDi8xTcnX1qdGs/+5wXavY+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:cf:4a:49:de:f0:7d:0d:88:8c:c8:4a:c3:d0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac223fb1942115e48a9754207292d00a082ecdf
Validity
Not Before: Jun 14 18:00:40 2025 GMT
Not After : Jun 15 18:00:40 2025 GMT
Subject: CN=020eac80541fc980185d9b8471de93b5e0cc4db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:a4:e3:a0:0a:42:d8:bd:44:d4:99:ae:11:
66:4b:97:14:02:60:1a:9f:81:33:52:3c:4d:04:87:
41:20:f0:5b:1c:5e:eb:d0:d0:0f:d5:42:0d:aa:25:
96:b6:9f:34:da:94:67:2a:12:be:1a:7d:44:c3:0a:
91:3a:be:df:42:aa:b2:8d:2d:31:f7:58:67:36:d5:
56:0f:8c:44:ae:72:ac:56:3f:5d:9c:d7:2d:80:bc:
83:47:b7:64:4c:8f:13:51:fc:ba:f6:b3:24:29:30:
aa:26:9d:f5:37:4d:1a:43:52:2a:63:d7:a2:93:ff:
48:97:69:34:05:c0:7e:a7:20:b4:92:a2:fe:57:86:
ea:86:c8:2b:f9:aa:b1:0f:39:e4:04:22:73:56:ca:
e7:15:70:88:28:ac:e5:3a:2c:47:82:83:e8:e8:ec:
78:07:b9:ab:50:f8:e5:4f:31:6b:6c:90:b1:63:7d:
bd:05:e4:f7:b6:8e:9a:2c:c0:65:7e:8d:43:60:8e:
b1:45:c9:0f:36:88:a0:f2:61:88:e1:47:60:8c:0b:
ef:8f:83:06:7f:5b:df:7d:bf:c1:3b:d6:9c:cf:77:
81:88:c9:94:b2:82:a8:b9:28:6f:a9:d1:bc:09:d5:
cd:f1:ea:4a:6c:69:d3:3c:9b:28:23:34:58:8b:fb:
55:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:AC:80:54:1F:C9:80:18:5D:9B:84:71:DE:93:B5:E0:CC:4D:B9
X509v3 Authority Key Identifier:
keyid:AA:C2:23:FB:19:42:11:5E:48:A9:75:42:07:29:2D:00:A0:82:EC:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsIj-xlCEV5IqXVCByktAKCC7N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/60eb48-279d-4afe-8d8a-1daa951c71b7/1/qsIj-xlCEV5IqXVCByktAKCC7N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:48:61:36:0d:2d:0f:41:1e:be:a1:bd:a0:ec:67:2d:ba:79:
ba:4d:e6:01:a1:2b:7f:2e:44:96:e5:a0:bb:e1:e9:8c:d8:92:
44:6a:ab:e5:d7:6f:10:de:58:2c:05:2e:b0:ff:5f:e3:a3:a7:
7c:32:e3:36:6d:ad:70:2a:e7:28:07:6d:11:07:53:55:38:68:
30:cb:56:4a:e6:fa:63:d8:d8:7d:ec:60:01:d8:ac:85:9b:d6:
0b:c6:c0:3b:19:57:f2:72:59:0e:65:e6:ab:ce:d7:80:24:5a:
ff:59:09:4d:32:56:9f:f0:4b:3e:b5:e8:10:d6:eb:b2:5b:62:
3c:52:e8:9e:a3:53:c1:9c:2e:53:58:21:65:bd:1a:c8:8a:ab:
c6:6a:f7:60:85:8d:94:47:81:05:cb:a4:96:1a:0a:3c:3a:84:
70:9f:04:18:58:fc:21:9f:fe:1c:44:3c:8d:15:cd:81:fd:b5:
d4:67:f2:86:94:d9:33:3e:0c:a0:00:30:ae:0a:f3:28:1c:c3:
84:f0:e5:ee:a1:e7:a7:3f:6e:a0:17:04:54:ed:7f:2b:6c:65:
66:88:0f:5d:e0:ae:83:bf:bb:ed:36:80:ae:a9:f7:35:59:5b:
36:12:9c:df:af:e4:b9:5c:a6:72:2f:cb:6a:e0:df:b4:43:ca:
3a:ee:f6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:19:08 2025 by rpki-client