
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
File: qkTrCRs6M6h7644ASrFe8Xj7qgA.mft (raw, json)
Hash identifier: HglxnP87q+ZG/za5we4M/tEPGkMQVqUKUguaxJ3H+I0=
Subject key identifier: 63:D7:E9:81:36:CD:F6:18:11:43:02:0E:FA:2D:EA:8D:C0:F6:73:78
Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Certificate serial: 019897135C9BB8C22A197C5A697717626464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
Manifest number: 10A2
Signing time: Mon 11 Aug 2025 03:01:25 +0000
Manifest this update: Mon 11 Aug 2025 03:01:25 +0000
Manifest next update: Tue 12 Aug 2025 03:01:25 +0000
Files and hashes: 1: FeP6ktHBNaRwft0H-_e4k3vqEEI.roa (hash: x0ixEBGos8NpJoIqdvMzUdlrdo9lEdaYvD23JVoVtb8=)
2: X_mEYYeWr9-8-K3hPb_xZPAlhyU.roa (hash: 6DNXGEiBb6ULQJ057yIjE1b50LAb3WIwVPg+KL0u4Kc=)
3: gr0cSL9Z20uNppJqsYayd8a1gu4.roa (hash: wqIhk/QGRclb/eyqHZ1XVvBzFk7hoCkYPXEVOlH8doQ=)
4: qkTrCRs6M6h7644ASrFe8Xj7qgA.crl (hash: 3oOEaGC73vYaRKRFWAkD9opzTyWR9MHc2kwch5/dIHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:13:5c:9b:b8:c2:2a:19:7c:5a:69:77:17:62:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00
Validity
Not Before: Aug 11 03:01:25 2025 GMT
Not After : Aug 12 03:01:25 2025 GMT
Subject: CN=63d7e98136cdf6181143020efa2dea8dc0f67378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:20:d1:ce:8b:b7:fa:fb:7a:98:06:31:76:
b9:65:90:7a:3c:53:a9:e5:c6:48:fe:67:43:26:ab:
d4:bb:08:ee:d1:f9:7c:85:4f:ed:e7:9e:2b:da:43:
6f:00:b0:a8:b2:51:09:f3:49:8a:a0:39:4a:8d:b2:
58:e4:56:cc:40:62:8a:23:f8:2e:d6:61:b6:da:3c:
61:af:0f:ee:8c:69:9e:c3:37:28:c4:ce:3b:f9:53:
99:c9:a0:40:d0:1c:47:7d:c2:34:78:cf:5d:89:d2:
f5:de:c0:60:03:bc:66:01:82:08:68:5e:20:5d:7e:
f0:ff:c6:84:47:f1:45:58:a7:3a:40:e3:b3:63:83:
a9:89:d3:84:65:3b:2b:a3:3c:15:0c:04:3c:ee:f0:
5e:c2:66:bb:95:b0:58:37:a9:e0:77:3e:e4:9b:2d:
35:b2:85:de:fd:df:03:b0:c8:c0:12:19:d2:81:01:
8b:47:05:00:2f:44:3e:e2:2c:67:7a:02:45:ae:80:
1a:78:d8:36:cf:86:91:48:6a:d7:9f:43:b9:ef:74:
9a:3d:7e:ad:5a:f7:dd:1d:78:e1:6c:d6:fa:be:bc:
ef:fa:71:e5:b6:36:b7:53:f7:b6:b9:a9:8e:54:1f:
a5:16:8f:8b:fe:74:dc:cb:ce:b0:be:84:5b:eb:39:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D7:E9:81:36:CD:F6:18:11:43:02:0E:FA:2D:EA:8D:C0:F6:73:78
X509v3 Authority Key Identifier:
keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:07:fc:ba:a7:9b:a7:cc:dd:fc:10:ea:f3:02:3c:6f:73:03:
f0:bf:c0:22:e5:75:06:46:91:47:5e:f0:2c:a3:17:9c:92:88:
c5:a7:b5:da:b2:da:9b:5a:81:ce:dc:1e:8d:2e:34:8a:eb:b7:
8f:46:bf:a1:ff:43:2e:72:3f:6d:d8:a1:7c:94:06:0c:f4:7e:
1f:64:94:82:10:e0:04:03:e1:a0:ac:41:f6:7b:e4:6e:d0:77:
8a:cf:48:cc:da:e9:ad:42:a5:79:18:a7:4f:ca:f1:65:59:aa:
eb:75:57:e4:fe:17:b7:d2:fa:0a:e4:d7:a1:33:84:0d:33:f7:
70:e4:39:ae:b7:be:40:72:2d:a9:ff:57:1c:6a:4c:44:77:b4:
e9:e2:fa:0e:71:0f:f0:78:6c:bc:ac:43:7b:6c:b0:7a:12:04:
f7:55:d2:e2:a8:0d:77:0b:27:60:de:9e:88:eb:45:20:d7:9f:
3a:a5:37:f2:79:ba:e5:a2:ad:48:5b:d7:57:23:2c:72:73:9e:
54:88:0c:d3:a8:a8:a3:1e:33:03:c9:96:52:30:d0:6f:62:a4:
e1:c2:81:3f:6f:40:11:e8:a0:cc:dd:9a:7f:35:39:c8:20:65:
1c:49:28:72:9f:c1:fc:2b:58:35:7f:15:e7:35:44:86:b0:1c:
68:c3:8e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:03:13 2025 by rpki-client