Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
File: qkHJOeqVoh87dCkB3-BfJqV3dYE.mft (raw, json)
Hash identifier: q+CqjCkHZq+pLcMaw0Vd5RHoSo7ZlMucxrS15qeCNI4=
Subject key identifier: 5C:08:27:16:06:96:30:D3:5B:87:C1:35:3C:74:98:14:60:2F:89:2A
Authority key identifier: AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
Certificate issuer: /CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Certificate serial: 01987E2EC8F9D23B02F68003718A91989254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
Manifest number: 0AFF
Signing time: Wed 06 Aug 2025 07:00:51 +0000
Manifest this update: Wed 06 Aug 2025 07:00:51 +0000
Manifest next update: Thu 07 Aug 2025 07:00:51 +0000
Files and hashes: 1: qkHJOeqVoh87dCkB3-BfJqV3dYE.crl (hash: EKb0feyfk/1Xe8m/ZG4l56soMQ43zXycBYTWsH3bwa0=)
2: wcccpGaeYTilF5ncbceAk7mBvqQ.roa (hash: gOA2BhosHOf6qCEMFAHb8yTCso/K7yQdwGzJmIy7AF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:c8:f9:d2:3b:02:f6:80:03:71:8a:91:98:92:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41c939ea95a21f3b742901dfe05f26a5777581
Validity
Not Before: Aug 6 07:00:51 2025 GMT
Not After : Aug 7 07:00:51 2025 GMT
Subject: CN=5c082716069630d35b87c1353c749814602f892a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:c3:ce:02:59:40:09:81:cd:f1:42:7e:70:
3a:c4:95:13:42:a1:cd:33:ec:93:56:45:d5:b4:f9:
bd:5e:1e:72:ac:fd:5d:10:91:14:33:b5:5e:94:75:
3a:a8:55:0f:5f:9a:57:2e:df:07:0e:24:07:fb:59:
50:13:88:20:e9:60:65:98:94:47:44:a3:a6:a8:6c:
be:ca:cb:0d:b2:d3:cf:19:fd:2f:89:4e:00:39:57:
60:f8:05:20:14:3e:12:0e:9a:dc:3b:af:39:8c:0f:
48:21:3a:4d:23:d7:49:a1:4c:47:03:ea:d2:5e:6a:
3f:3e:75:4d:78:42:07:60:18:f6:bf:4b:6d:91:fa:
87:77:6a:ee:36:03:ec:86:2e:f0:15:e3:00:3d:8e:
14:5a:a6:63:55:d6:56:23:13:3c:f6:35:a3:42:7c:
9b:7e:d4:52:81:08:9e:4d:6e:b8:bb:ab:e4:ba:19:
3b:9f:66:2d:21:58:2f:85:4f:bd:80:7a:45:35:3c:
5d:d7:72:26:ca:fa:b9:7d:f4:45:e0:69:3c:1b:7d:
05:c4:09:1b:0d:89:4f:44:86:19:24:e8:fe:3b:2a:
0b:f4:41:60:25:9c:78:74:37:7b:04:ab:0a:99:ed:
bd:ee:f2:de:1c:af:f0:c2:0a:59:05:93:92:60:5c:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:08:27:16:06:96:30:D3:5B:87:C1:35:3C:74:98:14:60:2F:89:2A
X509v3 Authority Key Identifier:
keyid:AA:41:C9:39:EA:95:A2:1F:3B:74:29:01:DF:E0:5F:26:A5:77:75:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHJOeqVoh87dCkB3-BfJqV3dYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/981fb1-904d-499a-b93a-607ca025b94f/1/qkHJOeqVoh87dCkB3-BfJqV3dYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:69:07:e0:9a:93:24:3b:60:99:7e:87:46:1c:2c:ba:5d:a5:
81:b0:4d:96:25:88:73:45:ef:26:c4:ca:30:eb:aa:71:fe:0d:
ed:cc:b5:10:e2:a2:54:86:02:d7:6f:ae:27:06:af:d0:bb:b5:
29:e5:35:bb:71:33:fd:c0:76:43:d2:d3:1d:42:68:43:e0:a6:
d9:c2:d9:9b:5c:7b:a0:ce:9e:b3:bd:11:c7:17:9f:aa:e4:f8:
6b:17:ea:7f:ae:36:4d:38:29:bf:13:d7:bd:c2:7d:3b:48:1f:
b6:75:10:97:2b:7f:ff:dd:0f:09:86:b9:83:11:c1:a4:0d:34:
57:ce:0c:8d:d2:f5:f1:f0:8a:7d:8b:9b:e3:72:f4:7c:ee:d1:
63:39:74:be:84:eb:97:03:a3:86:21:06:e1:89:09:e2:99:ad:
59:5a:78:8f:7a:28:e3:54:6b:57:d8:5c:fe:e0:99:9f:50:bd:
ea:3f:96:86:85:01:82:1c:42:b8:63:6e:ec:10:47:0c:bc:66:
30:9f:93:db:d0:7e:aa:2b:8c:ce:a5:5e:93:eb:c7:31:59:13:
e2:5d:88:ce:d0:7f:47:e5:ef:1f:c7:d2:69:e4:91:83:7a:e2:
6d:67:99:e0:84:af:49:93:8c:8f:3e:18:09:f6:4e:30:5d:63:
3b:14:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:20 2025 by rpki-client