Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
File: qcd4RK62qrWMRgPKCCvdSngEd58.mft (raw, json)
Hash identifier: Xu1fHN3OjQyFoaqK871c9/Z6calwY/twY9VM7XOpqkA=
Subject key identifier: C1:77:4F:45:67:A7:D9:1E:24:EF:10:7B:82:9A:45:E8:27:19:3E:C6
Authority key identifier: A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
Certificate issuer: /CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Certificate serial: 01984D42D37DB7B821FBB95000B198AFEB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 19:01:21 +0000
Manifest this update: Sun 27 Jul 2025 19:01:21 +0000
Manifest next update: Mon 28 Jul 2025 19:01:21 +0000
Files and hashes: 1: 0rwOYdPXm3SF3mlaMFSkxpfBDj8.roa (hash: ghdXu6w3ahY/kqZH3juDYd4TR5LQuKoojRWncabKdos=)
2: qcd4RK62qrWMRgPKCCvdSngEd58.crl (hash: KqZsPAZZPX2RUdk7qUsRjvKs7EtXr1V101o/qjxlPNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:42:d3:7d:b7:b8:21:fb:b9:50:00:b1:98:af:eb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c77844aeb6aab58c4603ca082bdd4a7804779f
Validity
Not Before: Jul 27 19:01:21 2025 GMT
Not After : Jul 28 19:01:21 2025 GMT
Subject: CN=c1774f4567a7d91e24ef107b829a45e827193ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:cb:bf:b9:e0:53:7f:33:53:a7:b2:46:e5:
6e:a4:26:37:12:56:31:59:28:cf:23:2b:ae:cd:57:
35:c7:bc:7f:dc:c5:92:06:e6:9c:cf:51:0b:67:c7:
77:ee:9b:c7:8a:d6:ca:04:f7:e9:f1:96:66:5f:00:
e3:aa:17:f5:c6:e4:81:a5:1c:ae:60:58:19:3b:3b:
18:da:12:c6:c8:b9:91:ca:2f:56:16:c4:cd:f7:e3:
ec:7f:fc:71:dc:01:38:4a:05:6c:dc:53:e5:05:6f:
59:d0:03:be:c8:59:c5:73:c9:7e:4c:d5:77:dc:ab:
d9:63:1b:30:66:9c:06:f6:fa:cc:9f:10:74:f2:6c:
2e:fe:13:63:bc:32:14:93:60:dd:bc:f7:1a:81:3a:
d4:fc:22:0a:1b:09:02:7e:93:2f:e6:09:f0:4b:2b:
f6:eb:d9:6b:50:8c:0f:83:96:65:a7:54:70:08:fc:
d5:cb:3a:cf:05:71:5f:6a:cc:07:1e:23:af:13:d7:
b8:cb:ac:ab:c0:cd:86:d3:29:15:09:6a:35:af:a4:
fa:c8:d4:4e:7d:4f:77:69:dd:14:0f:16:d6:51:51:
55:ff:67:0a:c8:66:e5:f7:08:03:94:f7:b9:39:fb:
6a:5d:84:5c:67:09:1d:a5:74:59:70:5b:3d:d9:52:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:4F:45:67:A7:D9:1E:24:EF:10:7B:82:9A:45:E8:27:19:3E:C6
X509v3 Authority Key Identifier:
keyid:A9:C7:78:44:AE:B6:AA:B5:8C:46:03:CA:08:2B:DD:4A:78:04:77:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcd4RK62qrWMRgPKCCvdSngEd58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cf9533-1b34-44aa-9a78-f261fe516951/1/qcd4RK62qrWMRgPKCCvdSngEd58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9c:30:06:43:a3:85:81:5a:16:38:0b:61:ff:61:a0:f7:ea:
a3:63:73:69:56:73:44:a1:b1:d8:12:68:f5:f7:00:51:11:e1:
e4:4f:1b:a3:21:1d:36:9c:29:2c:55:45:ea:91:f9:de:49:47:
dd:78:c7:14:1d:e8:b3:31:e6:dd:e7:cb:42:50:5b:1a:a5:6a:
e1:9f:37:81:c3:5b:f2:84:31:9e:ab:f0:20:73:70:da:a5:9f:
50:21:a8:e5:92:9e:bf:12:b3:41:e5:75:97:8d:0e:dd:52:d8:
c3:7a:70:dc:e3:d9:9f:f2:1d:7b:18:96:68:ed:78:a8:0b:12:
8a:ae:e0:c4:60:e6:0d:c8:95:75:dd:a2:7b:1f:e7:7e:17:d6:
33:23:bc:0f:2f:2f:3b:d0:25:8a:44:cd:21:e1:88:4e:f7:d0:
f4:f3:f8:cc:5e:3c:96:19:46:63:f9:23:e3:04:42:8c:eb:f0:
7f:35:92:ee:db:5d:d7:af:15:2a:b3:73:74:5c:5b:72:1d:f3:
4e:7d:b5:90:34:7c:a1:9c:d4:66:fa:5e:fd:e1:91:2e:88:7a:
5f:7e:62:69:3a:00:e6:88:58:cc:47:bb:b2:c0:9f:d8:8a:bf:
fc:44:ef:c8:3f:61:65:3c:e8:64:93:88:a5:98:02:70:08:7b:
d1:88:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 04:00:52 2025 by rpki-client