Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: dtc4Fdk8PO1F8jlmqg7SQiyJVwVc4zdnzpHN9ezpbPM=
Subject key identifier: EB:0B:61:BE:D8:D8:51:5B:2F:40:D5:CC:CE:CC:98:D5:FF:E3:E4:FF
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 019838A8666EFA2BDE25B292617A6D47DF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 047B
Signing time: Wed 23 Jul 2025 19:00:16 +0000
Manifest this update: Wed 23 Jul 2025 19:00:16 +0000
Manifest next update: Thu 24 Jul 2025 19:00:16 +0000
Files and hashes: 1: 4Gjj4vT-vh5URW4bzUkYHjLyuzw.roa (hash: HxASWs91CGr7QHEsOom+lf/Gzup/Ba9MJEMnE5zFBkI=)
2: BVTw6vsjUxNoBbJObq9Iw2eDZYs.roa (hash: N/vjSEKCprvMbHrwkuq5WBhfoLp/HEmES1XrVOaxIlk=)
3: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: FYk5OAPwRAUpMAA7aeFixX/w8Pf4r4lvUO7OzI+Cod4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:a8:66:6e:fa:2b:de:25:b2:92:61:7a:6d:47:df:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Jul 23 19:00:16 2025 GMT
Not After : Jul 24 19:00:16 2025 GMT
Subject: CN=eb0b61bed8d8515b2f40d5cccecc98d5ffe3e4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:d7:22:12:c8:e5:be:df:6f:bb:bd:6e:ae:
4c:22:e2:ce:d8:95:f0:8b:3a:3e:b6:43:37:73:53:
63:0d:56:28:e3:58:a3:1a:b2:79:1a:39:8f:eb:13:
6f:44:36:fe:b6:74:8d:f1:f4:eb:77:04:c0:e6:bb:
84:3b:eb:70:2a:1c:af:32:ba:5b:b0:d2:55:85:0c:
b1:3f:32:c3:b8:0c:1d:b0:ea:bb:62:8e:0e:19:c2:
38:79:52:41:d3:4c:94:07:53:f0:ea:1e:72:7e:69:
0d:86:14:e6:9b:39:94:b9:80:a4:70:cb:ad:67:15:
94:83:27:b4:90:90:05:b0:b6:2a:c0:0e:93:8c:23:
7f:b1:ff:77:d3:6a:bc:85:fd:c4:57:d4:47:d4:52:
c7:bd:c8:c2:d5:a1:06:69:0b:c3:cf:46:70:82:ac:
71:09:d2:7a:56:92:52:ef:84:ac:e3:77:96:e7:49:
dd:ab:20:0d:ec:9c:ba:73:61:87:34:4c:07:58:be:
59:cc:ee:ad:aa:44:2a:5b:90:38:3a:24:7b:eb:58:
05:6d:2e:71:6a:d8:cf:19:c3:ff:b5:bd:31:4d:6f:
08:30:03:fc:a6:a0:a3:73:0c:8e:e6:cb:31:05:b6:
b4:58:a6:d8:57:e6:8a:31:93:9f:0f:7d:8a:d1:71:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0B:61:BE:D8:D8:51:5B:2F:40:D5:CC:CE:CC:98:D5:FF:E3:E4:FF
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:86:73:84:1f:ae:20:c2:cd:70:1a:07:71:ba:30:5a:e7:
5c:8d:c3:a2:33:b6:c7:f3:8f:14:10:5f:38:05:e3:a8:67:56:
0d:38:cf:38:47:c3:ae:a5:f9:e4:60:9e:ad:93:d2:a3:6b:3f:
6c:5e:79:aa:a2:32:9d:8f:42:31:75:c7:e6:d2:b0:7c:08:2a:
7b:a9:5b:41:34:4b:14:25:b4:ed:08:1b:8e:ac:86:1e:26:6d:
a1:a7:d9:8b:66:55:8d:4a:1b:41:89:ca:70:f3:2d:9c:b1:55:
c6:48:21:cf:e6:2d:98:40:90:73:a3:10:9b:15:e2:61:46:a0:
5c:4b:64:d3:0f:a6:2a:a1:96:78:7a:d4:fe:ae:ed:ef:39:a8:
e5:7f:58:dc:59:e4:04:6b:3e:6e:41:ca:f7:67:4f:12:5c:9b:
0d:19:99:19:a4:7b:5a:b6:1c:b6:72:2d:88:0c:32:35:fe:88:
44:5b:1a:b4:75:5b:f1:7c:13:1f:af:e2:c9:50:8b:1e:81:62:
20:d5:8c:7b:bd:57:cd:63:b0:0e:81:0c:6f:1e:21:48:c6:d4:
c3:7c:db:e5:46:f1:03:9b:bd:33:0b:68:68:ca:59:56:2f:c1:
3c:c0:56:b6:77:38:0f:1d:62:eb:ae:f1:3a:30:56:bd:21:67:
0c:f9:da:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 00:19:01 2025 by rpki-client