Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
File: qiK__S1aBw4uyKP8RueRGvlv6q0.mft (raw, json)
Hash identifier: ZU9XPqwEr7kE4eM91wAPMzZevoq9LLddnOPtA2X8C7o=
Subject key identifier: A9:55:04:7F:B2:EB:94:5F:C2:4C:AA:85:58:A2:97:A2:3F:7A:13:34
Authority key identifier: AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
Certificate issuer: /CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Certificate serial: 0197688506977EA3396066192A8B096100E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 09:00:37 +0000
Manifest this update: Fri 13 Jun 2025 09:00:37 +0000
Manifest next update: Sat 14 Jun 2025 09:00:37 +0000
Files and hashes: 1: eo9SLFo6ECy5DSd_dzNUwxtWG90.roa (hash: rwEptqLCRKuvmeB6qGhTimOttQv2kDracTxXGRGGlyc=)
2: qiK__S1aBw4uyKP8RueRGvlv6q0.crl (hash: npKTcXRBb8oGXR2HRhCxGqnCWm+1avPlW+Z6EnSSJb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:06:97:7e:a3:39:60:66:19:2a:8b:09:61:00:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa22bffd2d5a070e2ec8a3fc46e7911af96feaad
Validity
Not Before: Jun 13 09:00:37 2025 GMT
Not After : Jun 14 09:00:37 2025 GMT
Subject: CN=a955047fb2eb945fc24caa8558a297a23f7a1334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a4:59:4d:dc:92:bc:43:ff:54:b2:12:80:22:
78:3f:0a:96:bb:53:2b:e9:ed:d6:a0:fe:d7:cc:33:
7f:81:9e:79:89:27:b5:44:3d:35:1c:80:63:8f:54:
bd:9c:99:98:5f:73:e4:4f:18:49:83:2c:8b:0a:43:
f2:ce:76:a9:c4:15:51:99:99:17:11:c6:ed:7b:18:
42:01:4e:02:d7:c7:4c:ca:65:cc:89:df:58:ac:95:
74:9d:bd:ba:95:1f:62:ff:0d:a9:09:6f:7a:d9:ee:
65:21:b4:2a:d3:d9:cc:16:ad:f5:f3:01:b4:bc:cd:
64:84:88:05:0e:82:d8:61:41:0a:05:76:90:ca:15:
00:94:e0:72:d9:15:43:2b:a3:85:17:18:4d:98:15:
35:8b:90:f8:a8:1d:a9:6a:e3:49:36:25:60:1f:b6:
92:d6:8c:bd:92:49:74:e0:6f:56:b3:2b:1f:2d:c6:
e2:80:e6:21:e2:00:a4:a7:a5:c1:7a:81:d2:73:f0:
52:04:48:fb:7c:e5:db:ab:90:a5:b4:07:98:f6:13:
98:93:a9:82:c5:9a:57:68:c4:46:53:e1:47:32:72:
1a:0c:7f:5e:ac:41:7e:ab:6d:53:c4:69:d4:0a:65:
9b:2f:5e:45:44:c6:71:67:e1:50:3a:37:6a:ce:65:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:55:04:7F:B2:EB:94:5F:C2:4C:AA:85:58:A2:97:A2:3F:7A:13:34
X509v3 Authority Key Identifier:
keyid:AA:22:BF:FD:2D:5A:07:0E:2E:C8:A3:FC:46:E7:91:1A:F9:6F:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qiK__S1aBw4uyKP8RueRGvlv6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/878d0c-2200-4c27-94c0-5c6e19d070e5/1/qiK__S1aBw4uyKP8RueRGvlv6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:09:bd:c5:ab:7d:de:bb:4f:9f:94:fd:fa:3b:69:32:2a:0c:
5a:b0:8a:77:6b:a2:bd:1a:1c:64:11:d7:8f:6a:45:1a:71:95:
76:33:95:7d:11:cc:92:16:dd:f2:28:55:15:e2:49:ca:ed:c4:
1f:d7:37:03:79:20:4c:24:57:59:ef:93:31:43:09:41:87:0b:
28:bb:90:3f:5b:40:c7:b1:0c:38:4b:8c:72:56:ff:ea:4a:3a:
d3:e5:f1:8b:6a:49:ef:b1:7a:17:c2:3f:a5:e7:3f:8f:8b:42:
21:58:73:ea:55:ea:09:75:41:99:ab:cf:02:58:01:e6:3c:f1:
23:7f:5f:8e:5d:32:d4:85:be:48:4e:b6:2c:83:d9:60:9d:9b:
ce:4c:12:ca:4f:5f:54:97:b9:ab:5c:b9:10:40:b5:ae:7e:10:
9a:f2:3f:4c:41:18:91:b5:e0:d9:43:66:42:ab:e1:1b:6e:11:
c9:42:ce:a0:15:51:bc:de:9a:2b:99:12:98:7f:d8:bb:a2:a1:
1a:fd:e5:74:70:35:82:3d:23:62:c5:75:56:4b:a5:eb:2d:10:
ca:35:fa:cc:5e:ec:0e:a8:f1:e5:97:97:e1:86:aa:67:9b:d5:
6d:9b:77:1d:1b:62:93:be:82:d0:ab:05:15:b4:12:c4:db:43:
3f:e0:a7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:21 2025 by rpki-client