Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: 1KZ4AXNGXiJ7HntGohZQjZ7ijRSumuvZeuo+bz00kRE=
Subject key identifier: 7E:66:C5:18:F4:D0:8D:42:FF:08:25:9C:86:4A:DD:77:4D:09:A3:68
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 019781D7626B06FAA5E6C0061A3501E4331A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1572
Signing time: Wed 18 Jun 2025 07:01:05 +0000
Manifest this update: Wed 18 Jun 2025 07:01:05 +0000
Manifest next update: Thu 19 Jun 2025 07:01:05 +0000
Files and hashes: 1: EtuX617xzyrB71Hjc1hl3WMzRjI.roa (hash: QSVoTvnTqOuhcGfy2h2iEu7xdB5mNRvXSamlWm6WYuo=)
2: MBp32VcQqAbMoARjt7V1PCPscvg.roa (hash: pI5Os3fewlyJzy3/SsAFuRA7NUz4NSu4MCASZkD0XZY=)
3: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: 8EVAHZ/+J+GfumurGJpFeYGbBY0zwastJ7I4WGI/pdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:d7:62:6b:06:fa:a5:e6:c0:06:1a:35:01:e4:33:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Jun 18 07:01:05 2025 GMT
Not After : Jun 19 07:01:05 2025 GMT
Subject: CN=7e66c518f4d08d42ff08259c864add774d09a368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:1d:78:a8:26:4d:bd:b8:7f:d8:9f:5b:9f:
7d:c2:58:77:c8:c7:ed:0c:2a:5a:c2:ac:1b:10:ad:
a1:05:be:7d:e6:1e:52:43:03:b5:65:78:d9:dd:a5:
9f:30:ae:e8:f0:8d:3a:42:53:de:b7:97:31:00:87:
37:fe:7d:f8:e0:78:2c:00:92:da:2b:1b:5c:5e:ae:
6a:19:d5:65:1d:11:ce:6a:40:cc:87:db:d5:13:51:
24:f9:a6:17:9a:04:4c:17:74:90:64:13:d3:fd:d7:
e7:4b:45:f8:09:f3:ec:e3:21:8b:1e:b6:f1:d2:4f:
f8:a1:ed:13:59:29:23:64:72:ad:87:4d:7a:f4:83:
be:ef:1a:81:e5:b0:67:90:3b:eb:4b:77:e7:51:38:
16:9b:5c:00:7f:52:76:a7:c8:54:0e:54:9f:e1:8a:
97:10:80:0e:30:29:79:0d:04:96:21:1f:3c:f5:d3:
fa:0f:5b:d5:85:51:ac:6a:a2:8a:73:91:0d:38:60:
a0:53:8b:d3:b3:9b:72:97:bd:30:b6:b5:0e:6c:df:
c5:d0:a8:12:5d:5f:ec:46:6f:00:61:52:bd:fc:fb:
93:5f:f6:45:6a:ac:bb:e2:f4:b7:dc:44:1d:d0:e2:
62:26:ac:51:cf:49:a6:8d:51:b0:d6:83:de:9b:e4:
f0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:66:C5:18:F4:D0:8D:42:FF:08:25:9C:86:4A:DD:77:4D:09:A3:68
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b0:f6:fc:04:56:f5:f0:a5:af:ea:4a:f9:cd:08:fa:ea:fd:
14:00:98:9a:b8:ac:63:af:5d:df:81:2a:6a:51:12:f5:3c:93:
10:c0:98:cc:2c:93:fe:93:3e:5e:2d:79:eb:f3:d2:07:ed:76:
2f:be:dc:d8:67:48:39:aa:7a:00:45:24:75:82:7a:b5:2e:93:
d0:d0:e6:03:20:9d:e3:61:47:fb:af:fa:87:fe:0a:bf:f0:3b:
1b:38:64:49:c2:c1:32:0e:35:cd:9b:ea:4e:cf:e4:67:92:ea:
e5:30:3b:c0:99:41:d0:e8:a2:de:c3:78:07:15:d8:64:34:af:
bf:f2:9e:0b:c4:15:2a:93:58:46:a4:5c:3f:89:36:1d:a7:44:
65:4d:65:fb:7f:27:b7:7c:10:c4:5d:d4:77:be:10:41:d9:5b:
88:29:55:1c:55:c3:cf:98:a1:b0:b9:f7:23:43:77:e9:7f:e2:
43:3c:b0:3b:01:c3:f6:8a:75:df:b5:cd:71:55:2a:19:6f:07:
5a:38:c4:34:08:e3:e8:d9:ba:f6:5a:a4:b9:9b:3a:5a:e8:da:
f6:9a:9a:12:bb:84:94:76:1b:05:10:06:87:1c:5b:18:fd:86:
79:b5:fd:67:a8:4a:31:e5:a9:25:64:91:68:13:be:bb:4f:b5:
00:75:22:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:16:29 2025 by rpki-client