Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: hm7q76UtlXBnzfGFzneyYuT6Rw1qrM8k3O3I5G8nQtg=
Subject key identifier: 95:64:A0:11:22:9A:16:8E:B2:89:52:47:4C:75:3C:41:C6:72:67:ED
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 019845F71859371258A894689128DA365584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1607
Signing time: Sat 26 Jul 2025 09:01:18 +0000
Manifest this update: Sat 26 Jul 2025 09:01:18 +0000
Manifest next update: Sun 27 Jul 2025 09:01:18 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: cK4W5ul2vI+fHd0eQedrbs/LKiIsrHDAGq77Xa8IeHw=)
2: mC6qnnktw8ocqw8es0LfRst29xw.roa (hash: ppmb2PFwvp6zlS01nCp0DE/SrZFmg3TuLccALf3DpFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f7:18:59:37:12:58:a8:94:68:91:28:da:36:55:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Jul 26 09:01:18 2025 GMT
Not After : Jul 27 09:01:18 2025 GMT
Subject: CN=9564a011229a168eb28952474c753c41c67267ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7d:81:13:f4:cb:5c:06:ec:ef:84:1d:3a:62:
71:2d:80:fa:c2:ef:1c:e0:08:b3:18:f0:84:ac:09:
52:b6:02:20:93:27:f7:cd:a8:0f:73:3b:d5:db:ce:
35:30:04:ec:a7:2d:41:e8:51:eb:a0:84:93:70:c0:
46:f2:a4:cd:ad:0b:68:90:9a:84:8f:ff:1e:b2:9a:
5b:28:53:11:15:c7:f4:2b:33:7a:ce:6a:70:cc:da:
e8:57:34:3d:82:b6:bf:58:e5:33:c6:c3:45:e6:75:
3e:02:0e:e6:db:b1:9a:b9:b9:12:fc:d3:4e:0f:31:
86:d5:9c:4d:45:23:64:45:04:76:4d:b0:7a:de:bf:
ef:39:23:02:c8:de:ae:75:aa:be:7a:99:ac:71:0a:
98:75:01:dc:9f:22:6d:8d:24:24:ce:23:a1:a5:f6:
ce:23:d9:12:99:95:2d:e2:74:82:ec:6f:53:a2:62:
87:56:d2:e2:35:89:0e:c4:8e:f9:5a:fc:4f:d2:8c:
de:aa:71:70:98:4c:e5:25:13:cb:5b:1f:64:b4:97:
d0:a8:3a:f2:47:ee:1d:fb:34:81:97:48:06:7f:35:
4c:07:e9:0c:44:93:91:20:f7:1f:8a:5f:f7:21:fa:
a3:f5:00:2a:d9:b6:c1:3f:b5:2b:e8:dc:57:49:be:
0b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:64:A0:11:22:9A:16:8E:B2:89:52:47:4C:75:3C:41:C6:72:67:ED
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:cd:0c:11:ce:43:3f:37:96:a9:76:73:9f:b9:ce:11:2c:ed:
48:6b:c0:db:4a:d3:6d:3c:d6:03:c5:12:f1:0f:72:67:eb:4e:
8a:39:4f:b4:d8:48:54:e6:8c:c6:cf:39:27:36:32:6e:a3:6b:
e3:89:a7:ac:66:dc:9b:99:7d:8c:e7:c6:52:68:b1:97:15:63:
ea:19:a7:9d:63:40:d4:24:6f:c8:89:8a:e5:c4:ed:b0:13:ae:
3d:bf:55:44:6e:7e:7c:11:66:55:26:38:58:88:18:34:5f:ee:
e7:79:ed:19:80:b5:54:ba:82:71:57:da:00:59:be:39:0c:6a:
5f:b7:2d:fc:25:c1:6e:b1:fd:26:4d:fc:04:60:31:a1:68:9e:
f8:f6:0a:21:6f:6c:51:ad:e0:09:17:44:27:08:ee:74:29:f2:
21:41:fa:fe:47:66:0c:e5:aa:12:4c:e1:b5:b7:ae:07:f2:6a:
ea:68:06:59:14:27:bc:15:fa:35:2d:8a:ad:19:e8:a3:30:1b:
0e:39:2e:39:54:54:7e:92:f8:f1:b5:94:a9:4f:88:12:5c:aa:
2d:1e:c9:7e:43:f0:45:af:95:f4:ca:fb:59:41:d5:25:ee:5f:
f5:d9:c1:9e:63:dc:40:25:94:05:94:5e:e3:86:d3:84:ca:72:
7a:4c:00:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:27:02 2025 by rpki-client