Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: T3vHkuxL9U6zIBsRN2ScMSSbdQrTKbj1t9o6ySHEUNE=
Subject key identifier: D2:EB:DC:56:37:BC:92:92:22:DD:AB:BF:A0:F0:BD:98:A8:89:1A:AE
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 019848899DD679507C03658BA4C4AB2F8938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 21:00:35 +0000
Manifest this update: Sat 26 Jul 2025 21:00:35 +0000
Manifest next update: Sun 27 Jul 2025 21:00:35 +0000
Files and hashes: 1: FmQTGAptfwQVIkuMpg8hJc2vZxA.roa (hash: e7opOpYhedUnony/T0f78z282oNfXK2DZuJyjlY4Q0s=)
2: N5QNqPYfQDsZsb3UbswlkLMUOVI.roa (hash: K+50oxv12Lx2bczUpm74apszZeVkTFLJaHzFVSZLhe4=)
3: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: d+j+0W/G6Q3WGT01LUFA/6ZE6FZ9k1DzRK9CuKspTbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:9d:d6:79:50:7c:03:65:8b:a4:c4:ab:2f:89:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Jul 26 21:00:35 2025 GMT
Not After : Jul 27 21:00:35 2025 GMT
Subject: CN=d2ebdc5637bc929222ddabbfa0f0bd98a8891aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:71:98:97:96:ef:73:a7:1c:66:5f:7b:36:
a3:d2:fe:2f:49:aa:c6:34:de:73:ff:e4:06:96:f1:
0c:33:1c:51:6c:55:36:2c:bd:93:a1:10:e8:c3:1f:
0d:3c:93:a5:23:28:17:eb:c7:b6:2d:55:c1:e6:7e:
f9:1b:fd:81:7b:30:5c:10:f8:25:d0:d3:cd:07:79:
d0:e5:ed:91:6e:bf:90:0c:1d:c1:88:2e:c3:71:e0:
61:fa:11:cd:27:19:d5:e7:e3:71:5f:e4:98:5a:a2:
9a:62:b6:34:d4:4e:22:f7:9a:ee:5d:9f:a9:d1:e9:
13:72:8d:d5:a2:19:7b:cd:4d:4f:77:3b:76:07:09:
1f:71:68:74:d1:ca:d1:7e:48:28:21:bc:c7:c3:9a:
2d:cd:81:29:c9:7c:c8:90:07:46:ed:11:68:51:56:
00:8c:b2:b2:25:5c:43:ee:fe:61:6a:79:eb:57:87:
ef:f4:a4:e7:01:24:8b:4f:5a:73:d8:c3:95:60:fe:
4f:b0:60:f9:41:c0:2c:29:af:39:0f:d2:1b:5f:26:
d9:0a:64:b5:93:a4:97:22:9a:b5:ae:16:bc:30:a3:
c0:36:cf:a4:f9:d1:fd:17:d9:43:ab:e4:d0:ab:c1:
ba:8c:92:36:70:ba:8d:4e:a0:a1:5e:3a:4f:c1:63:
91:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:DC:56:37:BC:92:92:22:DD:AB:BF:A0:F0:BD:98:A8:89:1A:AE
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e9:dd:7f:5e:d4:2f:7a:91:77:fc:de:32:2f:50:0f:37:19:
6e:6c:98:16:fd:71:f0:56:3a:aa:24:5d:73:c5:12:79:6d:5c:
8c:1f:27:59:55:3b:98:0c:5d:ce:77:4c:36:51:8e:21:b1:7b:
ce:0f:06:b4:60:87:51:1f:8a:9a:b5:58:ac:e0:1b:76:6e:96:
44:a3:6d:d7:35:ce:3a:da:f0:e4:64:fd:36:92:88:fe:46:c4:
09:09:7a:82:a6:ea:10:84:ac:e4:1f:f1:b2:b7:91:ca:f1:4b:
3c:72:a7:3a:4a:19:db:d7:04:ff:f3:87:3a:29:9f:e5:6a:6d:
68:9d:c4:1e:01:d2:fc:53:18:09:0b:25:1e:fb:cd:f3:16:3f:
36:cc:f8:67:3c:f8:df:b1:e4:53:ed:b3:aa:5a:5e:cd:55:39:
b7:05:8c:95:58:0f:79:28:68:21:54:66:39:88:e4:ee:90:42:
c5:a0:ae:49:da:c7:e2:54:ef:ca:fc:25:d3:2f:e9:cd:e9:bb:
1d:54:ca:fc:97:d6:75:73:2f:a0:93:65:85:7b:4a:10:c4:d1:
53:95:79:d8:6d:16:f0:a1:6a:ab:62:6f:71:83:a0:91:5e:95:
7d:b4:8a:e7:77:b3:cf:44:0a:5a:37:f4:14:6a:88:09:21:7a:
15:26:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:30:05 2025 by rpki-client