Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: z5g2utws1b3rUgiIYgEr5XallZNPxJ1ajRSdMftInws=
Subject key identifier: 98:42:08:FA:BA:45:CF:8C:99:E1:48:C9:A3:FD:43:5A:99:43:EC:F3
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 0198567C4D352FD73CBD2ABDEF2A22FA176C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 1553
Signing time: Tue 29 Jul 2025 14:00:43 +0000
Manifest this update: Tue 29 Jul 2025 14:00:43 +0000
Manifest next update: Wed 30 Jul 2025 14:00:43 +0000
Files and hashes: 1: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: C1j8R9vsQtZZhVywUYEhjnkESjqnBjgQKPAXg7yVoqg=)
2: xkuriOxhH9L4osrYS3niaHQqN-k.roa (hash: K/CvJAstY6jQItpyuZ+KxEg8C5FknWg2U5h6YOrdb90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:7c:4d:35:2f:d7:3c:bd:2a:bd:ef:2a:22:fa:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Jul 29 14:00:43 2025 GMT
Not After : Jul 30 14:00:43 2025 GMT
Subject: CN=984208faba45cf8c99e148c9a3fd435a9943ecf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:af:bf:01:ad:37:72:03:4c:10:fd:4f:ad:
be:b9:ae:2d:53:e0:a8:9b:d5:62:01:7c:ca:ea:b1:
52:73:27:1f:64:d4:27:a8:94:3f:13:10:8e:3e:33:
07:d0:fd:bc:3e:9f:47:18:22:f9:1a:2c:0a:aa:5b:
d2:43:13:e5:6b:98:5a:c9:c5:88:90:d2:da:1f:59:
26:27:38:38:bf:e0:01:19:35:78:47:71:4c:07:0c:
26:74:31:12:7c:48:76:6e:ff:e6:e6:37:7f:6a:ae:
63:d1:cc:96:70:2a:07:00:b5:29:90:80:a6:3a:55:
ea:d7:c3:73:b6:34:28:ca:4c:c5:38:9f:07:24:86:
87:35:06:89:bd:52:d8:c0:3b:ac:87:23:e8:b7:0d:
6f:31:09:31:a4:62:07:6f:14:b9:ea:12:86:67:e4:
bc:7f:5c:f9:dd:b5:2f:b2:b3:15:96:0c:28:af:c3:
2f:0e:72:f4:9f:4c:05:3d:e0:d2:c4:8e:ee:f8:7d:
06:71:53:34:37:f3:62:20:5f:4f:f5:84:4e:14:b0:
a9:2f:98:7d:31:24:bf:ed:64:6c:1c:3f:eb:6c:0a:
23:ec:08:05:a0:51:c8:b6:a8:2f:d5:e9:28:91:f4:
cc:f4:af:af:e3:6f:16:f7:1e:67:ea:c1:e7:cb:32:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:08:FA:BA:45:CF:8C:99:E1:48:C9:A3:FD:43:5A:99:43:EC:F3
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:22:d8:ee:17:fb:df:51:17:ba:88:f6:aa:48:21:41:08:7c:
b7:a6:f2:44:de:93:bf:25:de:64:79:a6:27:ef:df:e2:92:2e:
77:f5:d9:d7:b9:1c:21:c6:91:20:a4:50:86:64:00:d5:1a:f0:
dc:86:07:e5:6a:2e:ab:91:4c:62:60:bd:f3:ca:78:4e:6e:76:
4e:52:91:9c:18:63:69:ac:0f:92:d7:47:6c:3c:d5:a2:76:aa:
d6:19:5b:1f:78:2d:58:96:b1:13:cb:d2:d5:ac:d2:c3:32:43:
1d:97:b6:34:c3:86:7e:e4:04:e6:dc:3d:96:2f:fe:dd:f1:e1:
a4:c3:6f:dd:b7:7a:27:79:1d:6d:12:7b:e0:9c:bc:4c:ac:2f:
69:3f:6d:e6:a8:b9:b4:ce:7d:fc:46:42:80:56:46:4a:c2:23:
68:90:d4:e7:6b:24:57:5f:72:0c:b5:ab:43:a1:58:08:3d:a1:
11:ef:05:4e:b6:a0:57:f0:4b:c8:4b:26:d2:fe:15:2b:95:13:
99:fd:05:b6:0d:37:70:0d:ed:a1:d3:5b:3c:60:a6:fb:8d:9c:
5d:39:00:8c:37:de:90:ed:26:d6:f2:62:74:bf:22:05:ae:b1:
d6:b9:3b:2f:47:ef:48:90:17:ce:79:40:5f:ef:27:83:9e:89:
5c:1d:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:35:12 2025 by rpki-client